$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A4h3n_iSt9dXBUS9lkFeBlGCjws.roa File: A4h3n_iSt9dXBUS9lkFeBlGCjws.roa (raw, json) Hash identifier: xWVFHGiMmjkXo3JhpVV25NEiejTtIl8ORd0lMaGSfLE= Subject key identifier: 03:88:77:9F:F8:92:B7:D7:57:05:44:BD:96:41:5E:06:51:82:8F:0B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 319A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A4h3n_iSt9dXBUS9lkFeBlGCjws.roa Signing time: Mon 26 Aug 2024 05:30:44 +0000 ROA not before: Mon 26 Aug 2024 05:30:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12698 (0x319a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0388779FF892B7D7570544BD96415E0651828F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:27:10:e6:7b:c4:e7:7d:dc:26:89:ba:35:0a: 9b:5d:94:8f:3e:04:15:c4:10:f1:47:9c:d9:67:6e: d0:f3:ef:4f:60:c9:b7:e6:f0:6e:3f:40:38:d7:83: f0:20:5f:1f:75:0d:33:3e:af:a4:f6:e1:55:3c:1d: 5d:54:72:ee:6a:1c:e9:06:c4:8a:7b:33:59:f1:be: 24:57:10:32:b0:9f:86:b7:a0:cd:9b:c5:de:d0:6c: 37:6a:cf:44:e5:f1:07:c7:e2:1e:02:83:0b:71:4a: f1:d8:13:27:09:f2:40:04:5d:44:f9:67:c5:93:89: a7:ec:55:ef:78:a2:b2:f4:40:8d:17:49:8a:6b:79: a7:ad:65:92:20:ee:72:a8:fd:5f:76:29:8f:5a:86: 35:2b:40:5d:4b:ed:c3:b9:4f:89:c4:85:3f:99:b7: 4a:13:95:c9:b5:a0:75:dd:a4:73:18:c5:76:16:03: d5:63:b1:82:a5:6e:68:64:df:2a:0f:fc:1d:c7:05: e0:fb:8c:5d:2d:48:91:f8:44:33:b9:5e:a4:bb:60: f8:3e:89:29:e8:a4:2b:c3:e8:2c:7d:80:d8:0d:a4: 9d:42:21:af:fc:eb:7a:ff:e7:fb:c2:bb:ed:ee:6e: a1:cb:59:e0:e9:17:f9:a8:b5:8b:3a:c9:dc:76:56: 0b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:88:77:9F:F8:92:B7:D7:57:05:44:BD:96:41:5E:06:51:82:8F:0B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A4h3n_iSt9dXBUS9lkFeBlGCjws.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.248.0/22 Signature Algorithm: sha256WithRSAEncryption ac:c1:f2:7b:f9:93:89:ae:2c:31:da:a6:6e:ae:99:4a:ec:e3: 85:46:94:fa:1a:b0:eb:03:04:d5:cd:6c:db:cb:2d:d6:f2:e7: e6:ae:27:78:db:7b:a6:df:75:f1:7d:5b:39:6a:a4:8a:34:4e: cd:27:f7:28:40:85:73:e6:53:81:05:9a:dc:70:93:10:ea:47: 7c:3e:b0:ba:09:34:68:0e:20:f5:cc:78:35:82:fc:d6:25:e2: de:56:96:58:63:03:ea:84:aa:d8:74:fc:81:55:ff:2e:db:ec: 3a:f4:6e:88:e3:e0:15:aa:84:fd:78:63:78:a1:7d:55:11:cf: 7d:3b:d2:23:4f:4b:c8:95:1e:0c:ae:98:79:9d:74:a2:d3:ac: 38:50:1f:7f:92:2e:93:f1:cd:9e:92:88:51:50:a6:8d:50:87: b3:10:2c:4d:75:e8:fa:6d:cc:f9:12:4e:ec:31:db:af:41:e7: a1:80:c3:4e:7c:34:52:5f:3f:90:68:df:63:0d:49:b4:a1:b0: 41:1e:72:7c:17:a2:be:95:0a:2b:89:f1:a1:00:9b:3f:06:6c: 64:63:4d:7b:2a:a9:d3:21:ba:e5:0d:b5:d1:6f:ba:bd:24:f0: f9:b7:d7:13:d4:70:22:01:ee:2e:7a:e6:c8:93:e1:96:c3:67: 58:f4:19:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAzODg3NzlGRjg5MkI3 RDc1NzA1NDRCRDk2NDE1RTA2NTE4MjhGMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOJxDme8Tnfdwmibo1CptdlI8+BBXEEPFHnNlnbtDz709gybfm 8G4/QDjXg/AgXx91DTM+r6T24VU8HV1Ucu5qHOkGxIp7M1nxviRXEDKwn4a3oM2b xd7QbDdqz0Tl8QfH4h4CgwtxSvHYEycJ8kAEXUT5Z8WTiafsVe94orL0QI0XSYpr eaetZZIg7nKo/V92KY9ahjUrQF1L7cO5T4nEhT+Zt0oTlcm1oHXdpHMYxXYWA9Vj sYKlbmhk3yoP/B3HBeD7jF0tSJH4RDO5XqS7YPg+iSnopCvD6Cx9gNgNpJ1CIa/8 63r/5/vCu+3ubqHLWeDpF/motYs6ydx2VgtzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUA4h3n/iSt9dXBUS9lkFeBlGCjwswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0E0aDNuX2lTdDlkWEJVUzls a0ZlQmxHQ2p3cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sfgwDQYJKoZIhvcNAQELBQADggEBAKzB8nv5k4muLDHapm6umUrs44VGlPoasOsD BNXNbNvLLdby5+auJ3jbe6bfdfF9WzlqpIo0Ts0n9yhAhXPmU4EFmtxwkxDqR3w+ sLoJNGgOIPXMeDWC/NYl4t5WllhjA+qEqth0/IFV/y7b7Dr0bojj4BWqhP14Y3ih fVURz3070iNPS8iVHgyumHmddKLTrDhQH3+SLpPxzZ6SiFFQpo1Qh7MQLE116Ppt zPkSTuwx269B56GAw058NFJfP5Bo32MNSbShsEEecnwXor6VCiuJ8aEAmz8GbGRj TXsqqdMhuuUNtdFvur0k8Pm31xPUcCIB7i565siT4ZbDZ1j0GTA= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org