$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8pqXSJeUhFOZVtlJkJrKsaZ1KVk.roa File: 8pqXSJeUhFOZVtlJkJrKsaZ1KVk.roa (raw, json) Hash identifier: v426oK1ujthzQTUAe6SQLRJo//mCHK9GtXyj8IrbhUs= Subject key identifier: F2:9A:97:48:97:94:84:53:99:56:D9:49:90:9A:CA:B1:A6:75:29:59 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3141 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8pqXSJeUhFOZVtlJkJrKsaZ1KVk.roa Signing time: Mon 26 Aug 2024 05:30:16 +0000 ROA not before: Mon 26 Aug 2024 05:30:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12609 (0x3141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F29A9748979484539956D949909ACAB1A6752959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:03:b3:77:40:b7:70:a4:50:60:2a:74:a9: a3:a9:82:b3:09:a7:8c:46:f4:d9:e0:cb:0f:11:ff: 1f:58:52:ff:17:93:7a:ab:17:a7:b3:4d:c1:73:5b: af:d3:7b:8f:50:8f:48:09:ac:18:84:8c:ff:5a:89: c9:c7:cb:6e:cb:69:7c:5e:e9:a9:85:f7:f0:96:d9: 0a:d2:ca:0a:1e:0f:8c:bb:f1:2a:f5:60:b2:65:f0: ec:b6:80:70:f9:fc:8b:dd:90:a2:58:a0:ca:aa:44: 0b:9e:73:fe:d7:18:df:6f:0d:99:60:ee:59:9f:9d: 8b:5f:e8:53:56:a8:de:9a:bd:9c:40:53:f3:7f:85: 29:2f:10:87:9a:5f:b8:ae:5a:ff:93:04:0e:b8:16: 11:45:3b:17:5c:12:8b:f0:b5:e6:42:48:ba:18:91: a7:1f:d2:71:66:1a:f2:45:c2:31:bb:29:ae:dc:33: 4e:38:d5:0a:42:03:0f:e8:03:be:b0:5e:34:e4:1a: 80:fd:96:ca:bd:99:5d:ba:56:2a:f6:e2:dd:e4:ff: c9:06:f4:89:01:f0:ff:8f:d2:80:3d:9d:ba:d2:09: fc:c7:6c:8c:c6:e3:0a:e1:27:73:9d:4a:45:50:dd: 39:a1:64:ca:e4:0c:94:66:e2:cd:f0:7a:1a:eb:40: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9A:97:48:97:94:84:53:99:56:D9:49:90:9A:CA:B1:A6:75:29:59 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8pqXSJeUhFOZVtlJkJrKsaZ1KVk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.104.0/22 Signature Algorithm: sha256WithRSAEncryption 54:f8:b7:98:26:55:98:5a:4f:af:3e:2c:e6:c3:ee:b3:8f:42: fe:5c:98:bf:1b:31:b2:b4:72:e1:b0:dc:7f:9c:d2:28:68:03: 37:89:0c:81:1b:57:96:e2:b6:24:a4:35:d0:12:70:33:0a:a1: cd:b7:a2:40:76:21:c7:e7:75:65:26:75:ed:c7:d2:3a:24:39: 8a:6b:31:52:53:36:6c:0e:74:f7:81:fc:0d:ba:3d:e7:2a:28: 25:86:f1:85:48:16:bc:2a:ad:e1:a4:13:0e:f1:c5:c1:0a:6c: dc:db:7d:60:f7:9c:d6:d3:c2:93:a1:7e:d0:cd:fd:ca:97:d4: dd:95:b1:13:1c:7a:c6:b4:4f:e8:dd:f1:52:20:2a:e2:cd:db: d3:6c:ef:1e:0a:5e:66:64:b6:00:93:6b:d0:77:68:e1:ca:63: f5:bb:ed:32:7a:8c:70:da:97:60:3f:df:a4:4f:c0:87:02:02: 20:2c:93:ce:2e:b8:c7:e4:7c:fb:f9:2e:73:0c:4b:93:88:2f: a5:dc:ff:91:30:90:78:17:df:fa:ce:e9:20:9c:4f:42:ba:f1: 01:2e:b8:e1:a1:08:41:9a:55:87:57:a3:96:b5:bb:de:f7:b8: 3c:8c:99:b2:c9:a2:a2:77:3a:33:10:f6:9a:26:85:e3:25:0f: e7:e3:27:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyOUE5NzQ4OTc5NDg0 NTM5OTU2RDk0OTkwOUFDQUIxQTY3NTI5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYewOzd0C3cKRQYCp0qaOpgrMJp4xG9Nngyw8R/x9YUv8Xk3qr F6ezTcFzW6/Te49Qj0gJrBiEjP9aicnHy27LaXxe6amF9/CW2QrSygoeD4y78Sr1 YLJl8Oy2gHD5/IvdkKJYoMqqRAuec/7XGN9vDZlg7lmfnYtf6FNWqN6avZxAU/N/ hSkvEIeaX7iuWv+TBA64FhFFOxdcEovwteZCSLoYkacf0nFmGvJFwjG7Ka7cM044 1QpCAw/oA76wXjTkGoD9lsq9mV26Vir24t3k/8kG9IkB8P+P0oA9nbrSCfzHbIzG 4wrhJ3OdSkVQ3TmhZMrkDJRm4s3wehrrQMx1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8pqXSJeUhFOZVtlJkJrKsaZ1KVkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhwcVhTSmVVaEZPWlZ0bEpr SnJLc2FaMUtWay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sGgwDQYJKoZIhvcNAQELBQADggEBAFT4t5gmVZhaT68+LObD7rOPQv5cmL8bMbK0 cuGw3H+c0ihoAzeJDIEbV5bitiSkNdAScDMKoc23okB2IcfndWUmde3H0jokOYpr MVJTNmwOdPeB/A26PecqKCWG8YVIFrwqreGkEw7xxcEKbNzbfWD3nNbTwpOhftDN /cqX1N2VsRMcesa0T+jd8VIgKuLN29Ns7x4KXmZktgCTa9B3aOHKY/W77TJ6jHDa l2A/36RPwIcCAiAsk84uuMfkfPv5LnMMS5OIL6Xc/5EwkHgX3/rO6SCcT0K68QEu uOGhCEGaVYdXo5a1u973uDyMmbLJoqJ3OjMQ9pomheMlD+fjJ0I= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org