$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9h6HkYuuzXVL7bGAnW4YVSoF3OI.roa File: 9h6HkYuuzXVL7bGAnW4YVSoF3OI.roa (raw, json) Hash identifier: IkYueGCLc+bS+3ry4Ki6g1xYhECRE95JoUYC89j8lIQ= Subject key identifier: F6:1E:87:91:8B:AE:CD:75:4B:ED:B1:80:9D:6E:18:55:2A:05:DC:E2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2809 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9h6HkYuuzXVL7bGAnW4YVSoF3OI.roa Signing time: Fri 01 Sep 2023 10:04:52 +0000 ROA not before: Fri 01 Sep 2023 10:04:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10249 (0x2809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F61E87918BAECD754BEDB1809D6E18552A05DCE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:53:92:3e:dd:15:11:f0:89:7b:88:a7:fc: bc:e2:95:e5:54:f6:de:d7:16:0d:d2:79:67:4c:b9: 3c:bc:4a:94:96:4b:ff:06:59:50:3c:25:52:4d:d7: fc:7b:46:63:93:30:5b:f3:4e:49:9c:24:55:ff:86: 98:48:03:c2:fe:49:12:d5:a2:37:f1:34:c2:3b:40: 68:63:2d:25:e4:17:e4:d0:b0:61:eb:1b:ff:4b:f7: 73:f4:47:46:d9:04:ef:97:d5:e2:ff:b3:22:1a:4a: 5e:46:28:ef:8e:8f:7c:e3:57:76:7b:35:50:0a:dd: 22:54:6c:c6:d4:ed:22:a3:8a:81:30:46:d0:31:77: 16:63:d6:54:b8:c0:b0:f3:de:d7:c3:7e:c9:52:b3: 95:23:33:a2:bc:56:a1:11:b9:12:10:de:4c:71:18: 09:a2:dd:87:08:d3:24:8b:a9:ab:49:4d:c8:a0:5d: 81:05:22:42:68:ba:10:bd:46:77:6f:9e:ad:9c:25: d8:d6:b2:9d:fb:55:1f:c5:87:15:62:89:4c:e7:5d: 3a:15:87:ca:80:16:f0:49:5b:20:3c:0f:83:d4:40: cf:33:f0:6e:09:c3:3d:24:c5:d9:bf:35:28:97:98: 8e:69:f9:d7:d8:f2:bb:19:05:79:a1:7d:2c:ef:d5: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1E:87:91:8B:AE:CD:75:4B:ED:B1:80:9D:6E:18:55:2A:05:DC:E2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9h6HkYuuzXVL7bGAnW4YVSoF3OI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.160.0/21 Signature Algorithm: sha256WithRSAEncryption ae:97:15:10:3f:9c:e1:c2:e9:b5:05:73:3f:da:e2:80:74:5e: 21:46:36:22:b0:ed:3e:e3:86:67:72:be:18:93:aa:f0:6a:53: 65:11:3f:10:99:61:d3:3b:09:de:ae:8f:66:8d:8e:c8:93:ba: b1:c3:e2:e2:79:4f:b8:2e:59:d2:66:29:e2:49:55:e3:01:14: 2d:0f:f0:90:1f:ff:b9:b4:6c:1d:ae:72:13:a8:0c:45:a4:5d: 8f:3f:87:91:76:e2:7c:44:88:6b:40:f8:e2:d8:37:47:93:cd: 29:1f:2c:10:14:5a:18:af:3a:77:03:a5:44:d4:53:78:a3:9e: 79:db:5b:03:1d:e9:88:87:28:0a:9b:36:eb:aa:97:e5:b5:5f: 88:d3:ad:c6:c5:18:0d:4e:f1:c1:87:83:21:63:0c:6e:06:8d: 80:d6:6d:b5:1b:e4:ea:12:e9:70:50:2c:03:cb:b4:71:68:c8: 18:cd:98:91:f6:8f:27:91:15:e5:13:30:cc:12:43:8e:b7:c8: a1:a1:37:ee:2e:b2:6b:f6:42:8f:7f:10:a1:3c:b7:52:1d:5b: 84:40:f2:0a:38:0d:fa:b8:c4:97:58:34:b3:12:e3:fa:2d:0b: 66:66:8a:dc:a7:65:06:d8:28:46:84:f6:89:c5:e5:7e:14:4e: 66:88:35:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKAkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY2MUU4NzkxOEJBRUNE NzU0QkVEQjE4MDlENkUxODU1MkEwNURDRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZm1OSPt0VEfCJe4in/LzileVU9t7XFg3SeWdMuTy8SpSWS/8G WVA8JVJN1/x7RmOTMFvzTkmcJFX/hphIA8L+SRLVojfxNMI7QGhjLSXkF+TQsGHr G/9L93P0R0bZBO+X1eL/syIaSl5GKO+Oj3zjV3Z7NVAK3SJUbMbU7SKjioEwRtAx dxZj1lS4wLDz3tfDfslSs5UjM6K8VqERuRIQ3kxxGAmi3YcI0ySLqatJTcigXYEF IkJouhC9Rndvnq2cJdjWsp37VR/FhxViiUznXToVh8qAFvBJWyA8D4PUQM8z8G4J wz0kxdm/NSiXmI5p+dfY8rsZBXmhfSzv1TaPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9h6HkYuuzXVL7bGAnW4YVSoF3OIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzloNkhrWXV1elhWTDdiR0Fu VzRZVlNvRjNPSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 saAwDQYJKoZIhvcNAQELBQADggEBAK6XFRA/nOHC6bUFcz/a4oB0XiFGNiKw7T7j hmdyvhiTqvBqU2URPxCZYdM7Cd6uj2aNjsiTurHD4uJ5T7guWdJmKeJJVeMBFC0P 8JAf/7m0bB2uchOoDEWkXY8/h5F24nxEiGtA+OLYN0eTzSkfLBAUWhivOncDpUTU U3ijnnnbWwMd6YiHKAqbNuuql+W1X4jTrcbFGA1O8cGHgyFjDG4GjYDWbbUb5OoS 6XBQLAPLtHFoyBjNmJH2jyeRFeUTMMwSQ463yKGhN+4usmv2Qo9/EKE8t1IdW4RA 8go4Dfq4xJdYNLMS4/otC2ZmitynZQbYKEaE9onF5X4UTmaINSA= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org