$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/927C8LEC4AR7naYVnyPh1viSgas.roa File: 927C8LEC4AR7naYVnyPh1viSgas.roa (raw, json) Hash identifier: a4Zpeo8uW+rOjQqw8uEWoQ8IQn2j0ldG92vbD9yl5JE= Subject key identifier: F7:6E:C2:F0:B1:02:E0:04:7B:9D:A6:15:9F:23:E1:D6:F8:92:81:AB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31C1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/927C8LEC4AR7naYVnyPh1viSgas.roa Signing time: Mon 26 Aug 2024 05:30:54 +0000 ROA not before: Mon 26 Aug 2024 05:30:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12737 (0x31c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F76EC2F0B102E0047B9DA6159F23E1D6F89281AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:cf:52:03:6b:b5:0e:a6:34:db:55:08:ca: b1:75:af:da:bc:c5:7c:66:93:68:a3:2f:64:37:eb: fa:e1:46:17:4c:7c:ff:3b:3a:a7:ff:b0:2e:0b:c8: d4:dc:2e:a1:da:e1:b7:57:61:95:da:81:43:b7:dd: 5f:8c:1d:2e:28:d8:fb:a3:5c:2c:4c:8c:8b:d8:e5: 40:4f:75:a0:98:21:81:b6:0b:9e:50:9d:08:e7:0b: 20:16:9c:40:b5:e5:74:cf:a0:09:a7:ec:03:79:18: 6e:46:1e:2f:7a:da:9a:65:59:f6:e1:83:23:02:d0: 71:57:27:31:08:ce:94:d6:73:93:a7:06:86:e5:45: e6:79:5e:e8:d2:63:47:f3:c3:55:e7:36:2b:e0:c9: b7:20:ef:de:82:6a:46:56:f1:37:b2:8e:9b:07:25: 4d:18:bf:2b:b0:5e:e7:ac:73:47:10:98:1d:2b:be: 4c:89:b4:33:d7:08:2d:5e:67:98:fa:fe:d6:d1:aa: 9c:d2:84:e7:79:eb:c9:be:a5:7b:b3:38:2a:bf:32: 60:db:7a:3e:50:bd:ad:b4:f9:45:31:ef:68:b6:8e: 25:e3:1f:0b:bf:bc:25:b4:a2:30:ec:f3:53:59:1f: ff:34:3d:35:3b:b3:d5:e1:40:37:24:de:54:63:3d: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6E:C2:F0:B1:02:E0:04:7B:9D:A6:15:9F:23:E1:D6:F8:92:81:AB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/927C8LEC4AR7naYVnyPh1viSgas.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.224.0/22 Signature Algorithm: sha256WithRSAEncryption 72:c2:8c:76:4e:1a:1b:29:10:06:2e:4c:0e:ff:dc:4a:d7:a7: 69:39:f7:65:f5:ec:a0:70:9d:f6:4a:b1:74:f4:65:73:05:f8: 0e:df:b1:63:13:c3:48:17:06:38:19:40:a8:0a:c7:cb:60:b5: 07:98:29:4c:90:93:33:89:53:4c:79:92:a4:ba:39:fd:a3:4b: c6:59:23:a3:a6:41:47:22:1a:e2:55:ee:39:f4:b1:4f:26:e9: af:5b:34:2c:d8:66:4f:f5:ec:13:ab:e8:95:36:56:ef:40:e8: 21:e3:87:eb:ac:b6:1d:a1:27:c5:b2:b9:52:f2:b5:0d:c1:85: 40:e2:3d:ae:d6:1f:31:45:c2:bb:37:8f:f5:1d:1a:4d:e5:b7: 38:a4:0a:47:18:f5:b8:0f:09:12:bb:12:60:0a:db:d6:6c:ff: d3:93:77:c7:ca:12:df:02:6a:e4:2d:31:44:0d:a6:9b:ad:12: 0f:29:1c:73:85:4e:4b:f5:1b:ae:09:fb:eb:cb:2e:2f:cc:fa: d2:28:64:fd:4e:b5:3e:0b:31:3a:1e:66:96:2b:49:10:2b:f1: 27:51:70:41:6f:bc:43:9a:19:5e:44:a5:97:c1:20:49:31:8f: 10:27:ef:9b:d2:d1:08:4c:eb:e1:24:4c:65:45:cd:f1:52:bd: 8a:16:e1:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY3NkVDMkYwQjEwMkUw MDQ3QjlEQTYxNTlGMjNFMUQ2Rjg5MjgxQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP+M9SA2u1DqY021UIyrF1r9q8xXxmk2ijL2Q36/rhRhdMfP87 Oqf/sC4LyNTcLqHa4bdXYZXagUO33V+MHS4o2PujXCxMjIvY5UBPdaCYIYG2C55Q nQjnCyAWnEC15XTPoAmn7AN5GG5GHi962pplWfbhgyMC0HFXJzEIzpTWc5OnBobl ReZ5XujSY0fzw1XnNivgybcg796CakZW8TeyjpsHJU0YvyuwXuesc0cQmB0rvkyJ tDPXCC1eZ5j6/tbRqpzShOd568m+pXuzOCq/MmDbej5Qva20+UUx72i2jiXjHwu/ vCW0ojDs81NZH/80PTU7s9XhQDck3lRjPfGtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU927C8LEC4AR7naYVnyPh1viSgaswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzkyN0M4TEVDNEFSN25hWVZu eVBoMXZpU2dhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 seAwDQYJKoZIhvcNAQELBQADggEBAHLCjHZOGhspEAYuTA7/3ErXp2k592X17KBw nfZKsXT0ZXMF+A7fsWMTw0gXBjgZQKgKx8tgtQeYKUyQkzOJU0x5kqS6Of2jS8ZZ I6OmQUciGuJV7jn0sU8m6a9bNCzYZk/17BOr6JU2Vu9A6CHjh+usth2hJ8WyuVLy tQ3BhUDiPa7WHzFFwrs3j/UdGk3ltzikCkcY9bgPCRK7EmAK29Zs/9OTd8fKEt8C auQtMUQNpputEg8pHHOFTkv1G64J++vLLi/M+tIoZP1OtT4LMToeZpYrSRAr8SdR cEFvvEOaGV5EpZfBIEkxjxAn75vS0QhM6+EkTGVFzfFSvYoW4Vg= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org