$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0jY58Oukbli7xe_x4hN_MwAk5-A.roa File: 0jY58Oukbli7xe_x4hN_MwAk5-A.roa (raw, json) Hash identifier: ks1sCCd3JT53SdcrmDqetMMlb31+3vo+DMFdptWgd2k= Subject key identifier: D2:36:39:F0:EB:A4:6E:58:BB:C5:EF:F1:E2:13:7F:33:00:24:E7:E0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2826 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0jY58Oukbli7xe_x4hN_MwAk5-A.roa Signing time: Fri 01 Sep 2023 10:05:00 +0000 ROA not before: Fri 01 Sep 2023 10:05:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10278 (0x2826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D23639F0EBA46E58BBC5EFF1E2137F330024E7E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:91:4b:17:f3:b3:91:de:46:29:08:86:2d: 9d:fc:ca:55:6d:0a:ad:1c:73:43:ec:9c:d5:2c:5f: 1b:f0:30:c7:d5:83:74:43:ec:94:6d:b1:a6:4a:8c: e2:16:33:a4:96:1b:b7:30:0b:7c:ad:a0:1b:2c:9d: 88:fc:04:44:8b:ca:74:c9:b9:3c:14:04:6d:34:4d: 92:64:9c:2d:7b:f6:34:9d:d9:d2:97:8c:3f:d6:b3: 84:d9:36:e1:e7:b2:90:e6:c0:85:e4:2f:1c:60:7c: b2:a7:12:dd:53:23:6a:5c:72:b8:ef:94:c6:b0:67: 74:68:05:ab:05:37:d5:c0:f8:73:83:2f:70:af:00: 74:ef:98:71:76:ea:22:e1:0d:67:bf:fa:93:ff:ae: 9d:65:98:05:d0:0a:8f:53:82:4e:f7:10:99:74:cf: ac:0f:f8:43:35:27:ac:a1:32:04:b3:a2:6f:91:99: 5f:00:6b:5a:13:47:84:f9:1c:e1:86:46:fc:91:53: a5:51:f5:cb:5d:75:3d:64:9d:36:13:9c:b1:8f:e6: 1a:43:b7:8a:04:3b:29:81:cf:2d:82:ad:99:8b:72: e2:92:9d:28:48:68:4b:c5:98:04:dd:47:37:8e:64: 1b:34:31:7c:34:3b:37:45:59:3e:83:97:50:8d:2b: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:36:39:F0:EB:A4:6E:58:BB:C5:EF:F1:E2:13:7F:33:00:24:E7:E0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0jY58Oukbli7xe_x4hN_MwAk5-A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.40.0/22 Signature Algorithm: sha256WithRSAEncryption 42:36:fb:20:36:0a:5f:ec:73:b2:e6:3c:18:c9:c7:d6:e9:82: 88:48:a2:bd:40:9a:ac:22:e4:15:4d:d0:a3:58:6d:5e:5f:5d: d8:ee:b2:28:84:bd:2b:24:b8:d8:ef:3b:bc:24:9a:f7:dd:32: a0:00:ca:cd:ea:21:07:5f:d6:73:4a:0b:7d:e7:f2:f3:2b:31: ba:99:da:61:4a:97:6d:7e:0b:19:86:d5:21:cb:51:ce:a5:09: 71:a0:26:60:86:5d:3d:e1:de:6a:78:e7:6d:89:ae:f8:86:a6: 34:20:87:c8:26:c9:79:71:de:db:a9:99:c4:4e:69:f8:72:72: dc:7a:6b:3d:d1:42:db:95:ed:e7:2a:cf:a0:d8:60:de:dc:72: e7:7d:d2:18:8f:62:7f:52:e8:44:a9:f6:25:2e:d8:ed:0a:a7: 5b:1f:c2:4a:1e:70:c8:76:da:40:be:06:a2:3b:3e:23:c6:79: 95:9e:26:68:13:8a:17:4c:f1:c9:de:99:e9:34:dd:75:cd:b2: f7:3a:0f:74:45:8e:95:16:b2:2b:c1:99:3c:ce:49:ba:03:91: a4:e1:db:85:df:ba:a6:72:50:db:2f:c0:41:82:c1:60:92:e9: 6b:17:cc:5c:db:0c:12:bd:30:f1:9d:4b:79:55:db:f8:62:84: 01:f6:57:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQyMzYzOUYwRUJBNDZF NThCQkM1RUZGMUUyMTM3RjMzMDAyNEU3RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQw5FLF/Ozkd5GKQiGLZ38ylVtCq0cc0PsnNUsXxvwMMfVg3RD 7JRtsaZKjOIWM6SWG7cwC3ytoBssnYj8BESLynTJuTwUBG00TZJknC179jSd2dKX jD/Ws4TZNuHnspDmwIXkLxxgfLKnEt1TI2pccrjvlMawZ3RoBasFN9XA+HODL3Cv AHTvmHF26iLhDWe/+pP/rp1lmAXQCo9Tgk73EJl0z6wP+EM1J6yhMgSzom+RmV8A a1oTR4T5HOGGRvyRU6VR9ctddT1knTYTnLGP5hpDt4oEOymBzy2CrZmLcuKSnShI aEvFmATdRzeOZBs0MXw0OzdFWT6Dl1CNKy4tAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0jY58Oukbli7xe/x4hN/MwAk5+AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBqWTU4T3VrYmxpN3hlX3g0 aE5fTXdBazUtQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sSgwDQYJKoZIhvcNAQELBQADggEBAEI2+yA2Cl/sc7LmPBjJx9bpgohIor1Amqwi 5BVN0KNYbV5fXdjusiiEvSskuNjvO7wkmvfdMqAAys3qIQdf1nNKC33n8vMrMbqZ 2mFKl21+CxmG1SHLUc6lCXGgJmCGXT3h3mp4522JrviGpjQgh8gmyXlx3tupmcRO afhyctx6az3RQtuV7ecqz6DYYN7ccud90hiPYn9S6ESp9iUu2O0Kp1sfwkoecMh2 2kC+BqI7PiPGeZWeJmgTihdM8cnemek03XXNsvc6D3RFjpUWsivBmTzOSboDkaTh 24XfuqZyUNsvwEGCwWCS6WsXzFzbDBK9MPGdS3lV2/hihAH2VxY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org