$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/84dz8EjLHVS9EzGAiwj5b13QNoo.roa File: 84dz8EjLHVS9EzGAiwj5b13QNoo.roa (raw, json) Hash identifier: zvWzJdOD86QWHZt0YrDWnT/+nQUOn/k34EaJ2f0RMOY= Subject key identifier: F3:87:73:F0:48:CB:1D:54:BD:13:31:80:8B:08:F9:6F:5D:D0:36:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3121 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/84dz8EjLHVS9EzGAiwj5b13QNoo.roa Signing time: Mon 26 Aug 2024 05:30:08 +0000 ROA not before: Mon 26 Aug 2024 05:30:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12577 (0x3121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F38773F048CB1D54BD1331808B08F96F5DD0368A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:04:45:fe:cf:24:37:87:04:fa:19:1c:62: 8b:29:b6:04:d7:cd:07:e7:ca:e1:13:d1:e1:cf:01: 98:09:cb:d6:6e:bc:a8:2b:c1:b3:23:dd:58:51:9a: 19:c8:bd:96:43:d4:63:d5:86:7c:01:fb:b3:7d:f4: b7:cb:d7:48:3d:98:82:7e:37:ab:35:5e:cf:56:39: 7b:0d:ff:e5:0f:cd:e4:88:5b:4e:25:d0:f0:df:02: 12:27:3e:4c:a9:26:e5:26:2b:51:a0:58:eb:05:f1: e1:d2:b3:8f:ff:82:29:48:10:62:69:d4:5b:24:93: d4:5e:67:d7:d0:0d:13:e0:d4:7e:a5:70:09:3d:73: 2b:9d:ec:10:62:9f:5f:9d:85:2d:df:f8:75:a6:0b: 1b:7f:9c:1a:46:d7:c0:4a:27:8b:60:a6:56:d0:61: dd:74:3a:c5:5a:1d:98:13:34:1d:83:09:a1:ca:8f: 45:9e:a8:5b:a0:92:b4:de:a2:37:ff:44:af:92:28: b6:53:c3:ec:6b:2c:2b:de:f3:0d:5e:dd:33:45:68: 63:12:9e:60:cd:bd:1e:c7:07:a0:b8:93:21:55:c4: 86:e6:75:7e:1b:d7:c8:83:56:cb:05:aa:4f:6f:13: 04:c5:15:5d:7e:ac:4d:90:1b:61:af:dd:25:1c:9c: 11:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:87:73:F0:48:CB:1D:54:BD:13:31:80:8B:08:F9:6F:5D:D0:36:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/84dz8EjLHVS9EzGAiwj5b13QNoo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.240.0/22 Signature Algorithm: sha256WithRSAEncryption 65:55:37:a2:e2:4f:65:8d:fe:3a:54:68:38:96:f5:64:17:7c: 25:76:27:28:7f:85:68:d3:f9:80:fa:5a:18:86:72:6f:e4:ff: 1b:b5:17:ac:46:d1:e9:a7:3d:60:7d:3f:a0:ce:9a:df:2a:93: b8:ec:fc:20:ff:38:93:9c:10:b7:89:01:03:21:4e:c1:a7:e8: be:d9:5b:7d:28:6a:7c:b9:4b:00:79:f4:43:ca:1a:60:22:9d: f4:c1:40:42:a0:25:24:27:71:af:c2:3f:bf:a5:b3:bd:bd:2d: 62:30:ac:f7:b3:36:cc:1f:f3:2c:e8:99:17:63:c4:cf:4c:67: 59:f6:c5:79:7c:96:33:7f:0a:60:1d:38:f2:c7:c4:c3:e8:a1: 2d:a1:e5:a5:df:a0:5d:05:27:3e:6a:89:44:35:82:58:60:aa: a1:94:23:45:35:e3:90:37:6d:23:b9:7f:41:1d:7b:37:76:49: 20:b5:0f:26:5a:1f:3a:74:9b:2d:5b:98:43:9c:1d:ca:f8:c6: 0b:54:54:b3:af:9c:57:0d:7f:00:02:71:e7:57:be:c1:71:70: 33:85:aa:7b:a7:f3:fa:d1:9f:3c:35:38:85:bf:11:bf:9a:8c: e2:3d:75:d7:68:b0:c8:0f:70:7a:d0:32:64:46:85:18:67:f1: 6d:9f:63:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMSEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzODc3M0YwNDhDQjFE NTRCRDEzMzE4MDhCMDhGOTZGNUREMDM2OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4YQRF/s8kN4cE+hkcYosptgTXzQfnyuET0eHPAZgJy9ZuvKgr wbMj3VhRmhnIvZZD1GPVhnwB+7N99LfL10g9mIJ+N6s1Xs9WOXsN/+UPzeSIW04l 0PDfAhInPkypJuUmK1GgWOsF8eHSs4//gilIEGJp1Fskk9ReZ9fQDRPg1H6lcAk9 cyud7BBin1+dhS3f+HWmCxt/nBpG18BKJ4tgplbQYd10OsVaHZgTNB2DCaHKj0We qFugkrTeojf/RK+SKLZTw+xrLCve8w1e3TNFaGMSnmDNvR7HB6C4kyFVxIbmdX4b 18iDVssFqk9vEwTFFV1+rE2QG2Gv3SUcnBEfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU84dz8EjLHVS9EzGAiwj5b13QNoowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzg0ZHo4RWpMSFZTOUV6R0Fp d2o1YjEzUU5vby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sfAwDQYJKoZIhvcNAQELBQADggEBAGVVN6LiT2WN/jpUaDiW9WQXfCV2Jyh/hWjT +YD6WhiGcm/k/xu1F6xG0emnPWB9P6DOmt8qk7js/CD/OJOcELeJAQMhTsGn6L7Z W30oany5SwB59EPKGmAinfTBQEKgJSQnca/CP7+ls729LWIwrPezNswf8yzomRdj xM9MZ1n2xXl8ljN/CmAdOPLHxMPooS2h5aXfoF0FJz5qiUQ1glhgqqGUI0U145A3 bSO5f0Edezd2SSC1DyZaHzp0my1bmEOcHcr4xgtUVLOvnFcNfwACcedXvsFxcDOF qnun8/rRnzw1OIW/Eb+ajOI9dddosMgPcHrQMmRGhRhn8W2fYww= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org