$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ALYdcqCn2zX1jgzzdpkddfOY0uA.roa File: ALYdcqCn2zX1jgzzdpkddfOY0uA.roa (raw, json) Hash identifier: YEXXAV0w5ZVe6CqBwkgbSF/j1dpzdWox+rFipuonILs= Subject key identifier: 00:B6:1D:72:A0:A7:DB:35:F5:8E:0C:F3:76:99:1D:75:F3:98:D2:E0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3125 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ALYdcqCn2zX1jgzzdpkddfOY0uA.roa Signing time: Mon 26 Aug 2024 05:30:09 +0000 ROA not before: Mon 26 Aug 2024 05:30:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12581 (0x3125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=00B61D72A0A7DB35F58E0CF376991D75F398D2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:fe:75:92:7e:df:1a:77:38:3d:1c:99:6a: bb:64:95:79:67:5e:78:b2:d9:eb:ea:d3:f3:c7:4a: 33:9b:78:b3:36:e0:29:3e:bb:92:ad:65:48:b9:22: 91:e6:cc:ea:e4:13:31:5c:70:9c:2b:19:96:5a:61: e9:cd:af:fe:c1:dd:a9:f1:a2:c3:7e:21:2e:72:65: ea:85:ac:b1:67:49:5e:d3:92:c7:28:05:bb:d3:fa: 18:2b:bf:19:71:1e:f0:8c:5f:97:ae:10:3a:c8:ed: 0a:06:ac:78:f7:b5:a5:47:97:3b:3b:97:bb:b2:bd: 53:01:0b:87:ee:66:9d:59:d4:ac:a2:60:49:62:89: 0a:0a:74:c2:48:e1:d8:d6:2e:80:0a:41:ca:fc:7e: 9f:e9:e5:68:9b:a9:79:31:4e:b1:2a:51:69:0a:80: da:06:b1:4e:5b:9c:24:98:39:a9:0c:dc:46:5c:b7: bb:54:16:3e:13:ed:5f:ee:3a:a2:15:b9:c0:dd:85: ac:01:0f:a8:ba:52:c7:00:30:31:22:a0:b8:42:c3: 13:6a:bd:1b:b7:02:53:fc:e4:ff:dd:6d:22:b5:be: 39:c9:11:1d:c8:0b:f0:ec:e9:f8:94:9f:38:68:9a: 72:1a:96:78:f2:e1:ef:c4:00:5f:2e:83:fd:05:40: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B6:1D:72:A0:A7:DB:35:F5:8E:0C:F3:76:99:1D:75:F3:98:D2:E0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ALYdcqCn2zX1jgzzdpkddfOY0uA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.12.0/22 Signature Algorithm: sha256WithRSAEncryption 24:0d:23:a9:da:b7:60:56:5f:03:20:e1:cd:4e:81:ab:4d:ad: 4b:6d:84:b4:12:05:05:fd:0f:7e:7a:a1:9f:57:47:fd:3c:a9: c5:9c:da:62:a3:48:9a:a6:c4:87:14:e9:87:62:5a:4c:1f:98: 5f:4a:5e:2b:a6:f8:48:1a:e9:21:69:58:cb:b9:d7:9f:08:be: 81:5f:f4:d9:2a:19:75:21:56:d5:32:db:ce:1c:69:35:d9:5d: bd:ae:59:90:ca:08:0d:d3:cd:23:bf:e8:1e:f4:60:66:5f:ff: 62:9e:fb:8b:50:da:7a:96:9d:d0:e6:72:8e:51:55:69:f7:3c: 23:27:cc:a3:ba:97:62:30:78:d1:ed:27:e7:43:a4:ad:22:5e: 14:90:71:dc:3d:14:73:bb:81:5d:29:d9:e6:71:54:18:5a:d3: 68:1f:2e:fb:4b:d2:aa:56:a8:61:c3:9d:e2:8c:8f:4e:ce:ee: 79:b1:7c:02:19:29:ee:2b:03:9a:66:fd:e6:24:c2:b2:5b:e3: dc:b5:8a:3e:c5:a3:d5:48:1f:04:fa:c6:5d:1e:e5:ef:01:5b: d5:e6:e5:cb:bc:9e:29:03:d9:87:6a:94:2d:37:da:b4:93:d1: e6:e5:01:89:7d:d6:f5:4d:7a:39:ba:dc:22:ff:3d:8c:df:f4: 96:f5:e7:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAwQjYxRDcyQTBBN0RC MzVGNThFMENGMzc2OTkxRDc1RjM5OEQyRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0EP51kn7fGnc4PRyZartklXlnXniy2evq0/PHSjObeLM24Ck+ u5KtZUi5IpHmzOrkEzFccJwrGZZaYenNr/7B3anxosN+IS5yZeqFrLFnSV7Tksco BbvT+hgrvxlxHvCMX5euEDrI7QoGrHj3taVHlzs7l7uyvVMBC4fuZp1Z1KyiYEli iQoKdMJI4djWLoAKQcr8fp/p5WibqXkxTrEqUWkKgNoGsU5bnCSYOakM3EZct7tU Fj4T7V/uOqIVucDdhawBD6i6UscAMDEioLhCwxNqvRu3AlP85P/dbSK1vjnJER3I C/Ds6fiUnzhomnIalnjy4e/EAF8ug/0FQD+PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUALYdcqCn2zX1jgzzdpkddfOY0uAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FMWWRjcUNuMnpYMWpnenpk cGtkZGZPWTB1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sQwwDQYJKoZIhvcNAQELBQADggEBACQNI6nat2BWXwMg4c1OgatNrUtthLQSBQX9 D356oZ9XR/08qcWc2mKjSJqmxIcU6YdiWkwfmF9KXium+Ega6SFpWMu5158IvoFf 9NkqGXUhVtUy284caTXZXb2uWZDKCA3TzSO/6B70YGZf/2Ke+4tQ2nqWndDmco5R VWn3PCMnzKO6l2IweNHtJ+dDpK0iXhSQcdw9FHO7gV0p2eZxVBha02gfLvtL0qpW qGHDneKMj07O7nmxfAIZKe4rA5pm/eYkwrJb49y1ij7Fo9VIHwT6xl0e5e8BW9Xm 5cu8nikD2YdqlC032rST0eblAYl91vVNejm63CL/PYzf9Jb157k= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:17 2024 by rpki-client on console-ams.rpki-client.org