$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7cwGv6zQhPulXYem61GYJ1iA0yM.roa File: 7cwGv6zQhPulXYem61GYJ1iA0yM.roa (raw, json) Hash identifier: IxuiSf5Ad7ThLwv43PyunH68kh7Fl0qwzjgVP/vwLIM= Subject key identifier: ED:CC:06:BF:AC:D0:84:FB:A5:5D:87:A6:EB:51:98:27:58:80:D3:23 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2983 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7cwGv6zQhPulXYem61GYJ1iA0yM.roa Signing time: Fri 01 Sep 2023 10:06:41 +0000 ROA not before: Fri 01 Sep 2023 10:06:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10627 (0x2983) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:41 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EDCC06BFACD084FBA55D87A6EB5198275880D323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:fb:65:e5:d9:46:c0:f9:de:49:f4:d2:58: 1f:ee:23:6c:6f:f1:85:23:ad:6b:ca:17:a5:31:97: 1e:ff:af:6f:c0:83:37:9b:52:bd:8f:82:29:37:8c: 21:92:a8:ce:69:04:20:2e:f8:5a:b6:d7:62:95:68: 69:de:5b:2e:7f:de:7f:b7:b7:23:b7:37:68:40:c0: fb:57:3a:2e:54:d8:2f:3f:b3:26:d9:41:df:60:bc: 23:d5:ab:cb:7e:57:53:f9:6c:be:79:37:7f:d6:3b: b1:a3:fd:3e:94:81:1f:fb:ec:a2:e8:54:f9:df:4d: f2:70:93:ef:5f:f3:b4:6d:2b:b4:09:42:e0:80:64: b2:c7:28:bb:f9:81:f4:1e:20:cd:a6:80:2b:25:f0: 83:c8:57:2a:5a:84:62:2a:b3:e1:0e:0a:c4:a7:f9: e7:50:35:80:8e:05:df:b6:44:d5:2d:a1:d9:3b:ea: b1:df:5c:e2:d9:f1:af:f0:34:46:e1:3b:50:dc:37: 36:db:6c:9a:9d:c6:f6:82:3a:fb:ae:9e:be:5c:10: 59:24:fa:a9:33:16:51:e7:d8:76:6d:ba:2b:45:28: f4:e7:bf:f0:14:68:10:fe:03:14:85:38:87:4e:c6: e0:a2:b8:12:b9:bf:a0:4e:a0:c2:20:b1:34:1e:10: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CC:06:BF:AC:D0:84:FB:A5:5D:87:A6:EB:51:98:27:58:80:D3:23 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7cwGv6zQhPulXYem61GYJ1iA0yM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.92.0/22 Signature Algorithm: sha256WithRSAEncryption 17:3f:02:37:2d:87:28:71:5f:95:7f:c2:4f:e4:85:bb:32:4b: 83:bd:ff:0f:14:15:03:2e:00:1a:49:3d:c0:52:c6:c3:e9:05: b8:9f:24:3c:d6:21:53:a1:5c:bc:1a:ca:27:8d:84:35:67:0c: 5c:1d:2f:26:99:b2:09:40:ec:b1:73:5f:3b:1c:74:ec:c0:40: 17:d3:c9:16:a7:3d:68:bb:c6:87:8f:b4:12:07:5e:d0:7e:ad: b9:84:eb:58:c7:dd:2b:d9:ee:39:91:1e:ff:04:31:c0:bd:94: 91:d0:b7:4f:b8:b4:66:12:0a:7f:cb:3b:b6:e3:4d:93:53:7c: ad:4a:a6:d6:db:1d:d3:b6:d3:f9:40:fb:7a:0a:c8:0a:5c:c7: 57:b0:ef:f0:0c:5c:9e:15:8a:43:04:29:7e:b6:87:4d:75:6a: df:1e:99:8d:65:ab:36:f6:73:d6:7c:b3:7d:a8:86:81:a4:14: 09:1d:6e:bd:eb:5e:70:5e:09:bb:d7:11:e3:b5:3d:2f:cf:22: f8:51:0a:36:4c:c0:20:78:81:4a:99:ed:75:0d:15:d5:b2:4e: c5:9e:ad:0c:f4:f2:e4:2c:13:a1:d7:06:f3:64:23:72:b6:83: 32:d4:5c:0c:b0:cb:39:a6:45:43:f5:c4:55:9f:69:68:ae:82: 8a:2a:37:72 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVEQ0MwNkJGQUNEMDg0 RkJBNTVEODdBNkVCNTE5ODI3NTg4MEQzMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuKftl5dlGwPneSfTSWB/uI2xv8YUjrWvKF6Uxlx7/r2/Agzeb Ur2Pgik3jCGSqM5pBCAu+Fq212KVaGneWy5/3n+3tyO3N2hAwPtXOi5U2C8/sybZ Qd9gvCPVq8t+V1P5bL55N3/WO7Gj/T6UgR/77KLoVPnfTfJwk+9f87RtK7QJQuCA ZLLHKLv5gfQeIM2mgCsl8IPIVypahGIqs+EOCsSn+edQNYCOBd+2RNUtodk76rHf XOLZ8a/wNEbhO1DcNzbbbJqdxvaCOvuunr5cEFkk+qkzFlHn2HZtuitFKPTnv/AU aBD+AxSFOIdOxuCiuBK5v6BOoMIgsTQeEDo5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7cwGv6zQhPulXYem61GYJ1iA0yMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdjd0d2NnpRaFB1bFhZZW02 MUdZSjFpQTB5TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sFwwDQYJKoZIhvcNAQELBQADggEBABc/AjcthyhxX5V/wk/khbsyS4O9/w8UFQMu ABpJPcBSxsPpBbifJDzWIVOhXLwayieNhDVnDFwdLyaZsglA7LFzXzscdOzAQBfT yRanPWi7xoePtBIHXtB+rbmE61jH3SvZ7jmRHv8EMcC9lJHQt0+4tGYSCn/LO7bj TZNTfK1KptbbHdO20/lA+3oKyApcx1ew7/AMXJ4VikMEKX62h011at8emY1lqzb2 c9Z8s32ohoGkFAkdbr3rXnBeCbvXEeO1PS/PIvhRCjZMwCB4gUqZ7XUNFdWyTsWe rQz08uQsE6HXBvNkI3K2gzLUXAywyzmmRUP1xFWfaWiugooqN3I= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:29 2024 by rpki-client on console-fra.rpki-client.org