$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4d3ZsPatrUdutAmtRFrnfxXTnPA.roa File: 4d3ZsPatrUdutAmtRFrnfxXTnPA.roa (raw, json) Hash identifier: dH8fUkwP6l+QLx3cEt7hx/YXY9QSlNMXmhw/jKLA5EM= Subject key identifier: E1:DD:D9:B0:F6:AD:AD:47:6E:B4:09:AD:44:5A:E7:7F:15:D3:9C:F0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2924 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4d3ZsPatrUdutAmtRFrnfxXTnPA.roa Signing time: Fri 01 Sep 2023 10:06:12 +0000 ROA not before: Fri 01 Sep 2023 10:06:12 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10532 (0x2924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:12 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E1DDD9B0F6ADAD476EB409AD445AE77F15D39CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:51:f9:66:a6:f2:05:f0:8f:42:df:d0:41:71: 03:bf:30:32:1c:0e:68:31:1f:69:2b:da:6a:e1:10: ff:03:97:f9:45:3a:7a:cf:90:5d:b5:e6:26:9d:17: b1:1e:3f:77:60:55:76:72:1a:d5:d2:eb:d4:65:96: dc:ff:81:70:e3:81:64:a8:3c:c8:86:39:43:5b:83: c5:9f:8e:d8:c4:f7:04:e3:7a:7d:e8:b6:5d:1e:09: b6:53:d3:19:c3:21:d2:ed:85:f0:a7:0f:ad:16:5c: c2:c3:b3:5b:f8:1f:87:d9:0a:8b:25:4e:eb:d1:26: 3e:36:b7:d8:79:fb:1c:3e:1b:bf:7d:02:07:94:92: 0d:b6:67:f8:a2:17:81:73:45:10:b7:66:b6:8d:80: 96:0a:c2:fd:ee:4c:a7:7a:67:c6:de:66:27:70:c1: 24:f9:13:a2:c7:31:c4:cb:26:29:73:d6:6b:fb:0f: 15:37:1e:ba:74:b9:b1:90:c5:e4:e2:85:90:57:05: bb:11:08:33:a6:54:87:b6:7e:13:a9:d6:fe:e5:d3: d3:5b:3d:53:34:be:f0:ab:e1:04:5f:4f:71:73:6f: fc:c1:32:e4:0f:77:e7:0e:69:77:ee:de:6f:3a:45: ed:f6:ac:bc:25:ec:3e:2e:7e:0c:1d:5b:a1:25:57: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DD:D9:B0:F6:AD:AD:47:6E:B4:09:AD:44:5A:E7:7F:15:D3:9C:F0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4d3ZsPatrUdutAmtRFrnfxXTnPA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.108.0/22 Signature Algorithm: sha256WithRSAEncryption ab:fe:bb:5e:cf:23:cf:cb:f4:c3:b5:13:fa:d6:a5:e3:e8:39: c2:45:3a:e2:c4:7a:61:e2:a5:82:84:31:9c:52:80:23:2b:2e: 5e:1b:16:0c:79:95:75:a0:77:4d:74:29:ed:05:71:d1:a5:3e: c4:28:b2:9c:d6:4c:5b:c6:2c:c6:83:30:43:a3:c4:59:f6:6a: 7d:53:a1:7f:21:7d:71:a0:46:08:99:ba:bc:6f:8c:07:4a:08: 12:2c:c5:24:76:91:ab:18:80:ed:62:ff:5c:41:d7:98:5c:eb: 77:76:e3:fa:82:7c:5d:32:43:44:44:9a:11:39:b8:dd:7e:a1: 06:a2:42:58:83:ca:80:18:fa:be:6f:86:01:0b:92:14:86:5b: f4:70:16:a3:7d:0b:9e:39:cc:a2:f0:52:77:a7:a9:41:d8:10: ca:03:27:01:91:69:4c:49:bf:8f:76:e9:77:b0:23:0a:14:43: 00:a3:a5:3a:b2:f1:04:bf:a5:d1:20:94:9e:30:45:29:00:ec: 78:22:b1:6d:50:e6:a5:cc:01:db:95:18:68:e6:45:c7:02:d3: 82:5b:61:c0:ab:47:54:0b:2d:6e:4c:a4:4e:25:dc:55:d6:f0: 8a:8b:f0:a5:30:6e:30:2a:72:03:c6:9f:93:e9:08:84:67:f6: 84:b2:ea:c3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKSQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUxREREOUIwRjZBREFE NDc2RUI0MDlBRDQ0NUFFNzdGMTVEMzlDRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaUflmpvIF8I9C39BBcQO/MDIcDmgxH2kr2mrhEP8Dl/lFOnrP kF215iadF7EeP3dgVXZyGtXS69Rlltz/gXDjgWSoPMiGOUNbg8WfjtjE9wTjen3o tl0eCbZT0xnDIdLthfCnD60WXMLDs1v4H4fZCoslTuvRJj42t9h5+xw+G799AgeU kg22Z/iiF4FzRRC3ZraNgJYKwv3uTKd6Z8beZidwwST5E6LHMcTLJilz1mv7DxU3 Hrp0ubGQxeTihZBXBbsRCDOmVIe2fhOp1v7l09NbPVM0vvCr4QRfT3Fzb/zBMuQP d+cOaXfu3m86Re32rLwl7D4ufgwdW6ElV9RlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4d3ZsPatrUdutAmtRFrnfxXTnPAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRkM1pzUGF0clVkdXRBbXRS RnJuZnhYVG5QQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sGwwDQYJKoZIhvcNAQELBQADggEBAKv+u17PI8/L9MO1E/rWpePoOcJFOuLEemHi pYKEMZxSgCMrLl4bFgx5lXWgd010Ke0FcdGlPsQospzWTFvGLMaDMEOjxFn2an1T oX8hfXGgRgiZurxvjAdKCBIsxSR2kasYgO1i/1xB15hc63d24/qCfF0yQ0REmhE5 uN1+oQaiQliDyoAY+r5vhgELkhSGW/RwFqN9C545zKLwUnenqUHYEMoDJwGRaUxJ v4926XewIwoUQwCjpTqy8QS/pdEglJ4wRSkA7HgisW1Q5qXMAduVGGjmRccC04Jb YcCrR1QLLW5MpE4l3FXW8IqL8KUwbjAqcgPGn5PpCIRn9oSy6sM= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org