$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9nL-VMKmkHAbeEmZnUiL-VLEKM.roa File: A9nL-VMKmkHAbeEmZnUiL-VLEKM.roa (raw, json) Hash identifier: 6TjjVc/WhV3FXFxHWgGiNR9WuImyh0l5dZ22LRN+x7M= Subject key identifier: 03:D9:CB:F9:53:0A:9A:41:C0:6D:E1:26:66:75:22:2F:E5:4B:10:A3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 322A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9nL-VMKmkHAbeEmZnUiL-VLEKM.roa Signing time: Mon 26 Aug 2024 05:31:21 +0000 ROA not before: Mon 26 Aug 2024 05:31:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 180.176.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12842 (0x322a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=03D9CBF9530A9A41C06DE1266675222FE54B10A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:21:af:28:4b:5e:44:53:eb:a7:1b:29:d9: c3:c9:53:f8:7b:53:fd:bb:bd:2f:38:b4:e0:c7:c1: 37:f3:2d:42:ae:da:4d:38:0c:80:cf:c3:ae:14:60: 94:71:7f:b0:33:c0:8f:5c:33:02:54:dc:01:43:54: be:41:92:ee:99:38:9b:8d:9b:17:4f:23:be:dc:3c: 93:58:5d:63:2c:72:17:05:3e:34:66:51:20:32:e5: 1e:1c:6b:6f:3e:fa:84:4c:08:94:9a:41:a5:c8:b8: 49:db:c1:b8:0f:bb:ef:7f:c1:57:5f:64:bc:84:08: 6d:d1:97:b8:57:0e:ea:f0:85:5b:d6:39:70:01:f5: 0b:e0:9d:b2:3c:db:99:bc:1f:b7:e8:05:ee:66:16: c1:92:e7:50:72:ee:c3:b7:b6:9f:c8:73:c9:08:bf: d2:c0:66:9d:1a:54:6b:dd:c3:61:f7:9d:2a:e6:2e: 59:b0:17:46:53:87:f9:5e:db:64:c0:b2:a3:db:a9: 02:57:1d:ca:2d:46:1e:1f:10:a4:90:73:ee:d5:b7: 13:52:e4:22:5e:5d:65:18:90:b6:36:ee:9e:5e:89: 47:21:09:7e:c9:bc:38:a3:96:02:41:07:90:f3:c4: 71:65:1b:59:23:ec:69:27:02:a4:21:dd:86:02:1d: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D9:CB:F9:53:0A:9A:41:C0:6D:E1:26:66:75:22:2F:E5:4B:10:A3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9nL-VMKmkHAbeEmZnUiL-VLEKM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.220.0/23 Signature Algorithm: sha256WithRSAEncryption 51:cc:ac:ec:f5:e1:36:75:5a:3d:e1:4b:10:7b:16:ad:89:9f: 0c:0f:97:5f:52:0a:45:1a:f2:89:17:56:71:fc:c5:27:d4:a3: ba:d7:ca:3f:2f:c1:e1:f5:65:e7:a1:fb:da:f7:df:57:cb:c3: 7b:38:2c:cc:7c:54:8c:dc:ee:5f:78:84:98:ab:88:76:5c:04: 1a:04:08:76:8a:9a:9a:69:14:2e:ed:f3:3b:31:25:2c:d5:d8: b6:c8:4b:e6:95:72:1b:06:b1:38:85:b4:16:27:bb:b9:d8:92: cd:30:30:e4:6b:aa:e1:59:9a:c2:16:cf:f0:ec:a0:d5:60:c8: e8:5c:4f:dc:0d:99:3d:b3:0a:c0:dc:c7:be:91:fc:f2:97:36: 48:cf:5c:f5:df:9c:27:36:8f:72:d1:e8:04:b2:22:10:c6:58: 6a:c8:6d:9c:52:94:9d:1f:c2:5b:40:0e:31:7f:01:ea:8d:87: 06:f8:01:70:3e:20:cf:07:96:a8:d8:fc:3f:77:91:37:1b:0b: 95:08:7d:84:cc:b9:bb:de:c1:3e:64:84:55:c7:cd:33:a6:12: 1d:38:bb:1a:b2:ea:08:c0:ae:b8:1c:db:9e:83:71:3c:1b:d9: 48:eb:4b:9c:ea:ae:44:59:42:78:3c:30:e2:65:cc:67:74:9e: 63:91:76:d7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAzRDlDQkY5NTMwQTlB NDFDMDZERTEyNjY2NzUyMjJGRTU0QjEwQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKVyGvKEteRFPrpxsp2cPJU/h7U/27vS84tODHwTfzLUKu2k04 DIDPw64UYJRxf7AzwI9cMwJU3AFDVL5Bku6ZOJuNmxdPI77cPJNYXWMschcFPjRm USAy5R4ca28++oRMCJSaQaXIuEnbwbgPu+9/wVdfZLyECG3Rl7hXDurwhVvWOXAB 9QvgnbI825m8H7foBe5mFsGS51By7sO3tp/Ic8kIv9LAZp0aVGvdw2H3nSrmLlmw F0ZTh/le22TAsqPbqQJXHcotRh4fEKSQc+7VtxNS5CJeXWUYkLY27p5eiUchCX7J vDijlgJBB5DzxHFlG1kj7GknAqQh3YYCHd9XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUA9nL+VMKmkHAbeEmZnUiL+VLEKMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0E5bkwtVk1LbWtIQWJlRW1a blVpTC1WTEVLTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sNwwDQYJKoZIhvcNAQELBQADggEBAFHMrOz14TZ1Wj3hSxB7Fq2JnwwPl19SCkUa 8okXVnH8xSfUo7rXyj8vweH1Zeeh+9r331fLw3s4LMx8VIzc7l94hJiriHZcBBoE CHaKmpppFC7t8zsxJSzV2LbIS+aVchsGsTiFtBYnu7nYks0wMORrquFZmsIWz/Ds oNVgyOhcT9wNmT2zCsDcx76R/PKXNkjPXPXfnCc2j3LR6ASyIhDGWGrIbZxSlJ0f wltADjF/AeqNhwb4AXA+IM8HlqjY/D93kTcbC5UIfYTMubvewT5khFXHzTOmEh04 uxqy6gjArrgc256DcTwb2UjrS5zqrkRZQng8MOJlzGd0nmORdtc= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:36 2024 by rpki-client on console-ams.rpki-client.org