$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AY0Vc2u4-LdiGPqyQQHjZw76Lng.roa File: AY0Vc2u4-LdiGPqyQQHjZw76Lng.roa (raw, json) Hash identifier: o2Tm4rjgLe9jciAc90Dj2vZ7wIaiHbwjmSIp9JdbANY= Subject key identifier: 01:8D:15:73:6B:B8:F8:B7:62:18:FA:B2:41:01:E3:67:0E:FA:2E:78 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2966 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AY0Vc2u4-LdiGPqyQQHjZw76Lng.roa Signing time: Fri 01 Sep 2023 10:06:28 +0000 ROA not before: Fri 01 Sep 2023 10:06:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10598 (0x2966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=018D15736BB8F8B76218FAB24101E3670EFA2E78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:10:f1:ab:89:79:8d:f0:f4:b0:67:78:bc:f4: d2:c1:cc:af:2d:1a:31:6d:10:bc:51:87:f2:52:1b: 05:a2:0e:8d:2b:b8:d0:36:59:dc:64:95:1a:a1:d4: 15:b8:e1:32:ed:4c:71:4d:69:b0:42:ec:44:b8:c4: 65:b3:f6:cd:a3:8b:5f:be:71:98:93:a8:e3:60:23: 0f:84:6c:0d:3f:40:22:8a:b6:03:30:46:cd:0c:d8: 16:f9:6e:e7:5d:72:e7:02:c6:d2:36:e1:4f:39:2f: c2:f0:68:76:f8:c9:63:8d:99:43:9c:39:03:37:da: 44:59:76:56:65:4d:12:dd:48:b9:bd:77:b1:06:c4: c1:40:c3:c8:f9:78:44:fc:3f:c3:d8:71:7e:84:ba: 84:26:c9:2e:0f:7a:ef:a6:8a:71:d4:ff:f3:ec:c5: 52:ff:e2:10:bf:27:71:d3:6a:c0:3d:00:f0:ac:dc: c1:5d:6c:4a:7d:ae:4b:ad:fc:bc:03:fc:4e:5a:f5: 0f:af:c9:4f:20:a2:b8:55:11:b3:f9:20:12:7f:0f: b7:d6:e4:ff:59:99:c4:73:eb:52:d2:80:b5:83:fc: e5:76:97:86:39:b9:26:08:bf:ba:65:c1:54:31:64: 06:a7:fe:bc:d5:cf:13:d9:b0:10:c2:00:1c:9a:70: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8D:15:73:6B:B8:F8:B7:62:18:FA:B2:41:01:E3:67:0E:FA:2E:78 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AY0Vc2u4-LdiGPqyQQHjZw76Lng.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.16.0/22 Signature Algorithm: sha256WithRSAEncryption aa:e2:d8:6c:32:b7:f5:94:74:c5:63:4a:55:c3:f8:de:9f:77: ea:76:6c:27:3d:ec:a1:31:84:b7:ff:4a:cf:10:b5:b7:91:27: 30:a7:0e:51:5f:42:e0:7f:86:9a:cb:6a:de:a1:a7:af:89:d1: ba:2b:65:5a:3d:fa:7b:8f:e9:1e:2e:32:37:3e:c0:17:af:64: 90:0e:cb:6f:58:64:c8:e0:e9:ce:32:e2:6c:22:5a:3e:c8:84: f2:52:e5:1b:91:7b:b8:a0:a7:bf:bd:3a:a5:19:7a:59:2a:4a: bf:97:98:ce:73:c7:39:6f:9e:b4:b5:3c:6c:93:ae:47:97:af: f5:6d:26:4d:d4:fa:f2:cf:4e:02:73:8e:4a:57:98:3b:c1:a1: d6:91:5b:5a:4a:89:e1:ad:1c:9e:a9:ec:79:70:eb:f9:3f:b2: 4a:ea:35:84:9a:8b:3d:93:0a:81:32:27:99:a7:c8:6a:e0:d6: a4:57:16:a7:bc:aa:d7:49:ff:cf:c2:ea:9e:5f:92:e6:21:b4: 89:06:16:61:3c:28:e1:a9:89:e8:9e:d9:dc:94:bc:fd:91:a3: 09:02:16:5e:e0:db:43:96:0b:70:16:dc:f7:59:97:03:10:96: 4c:df:99:5a:ba:5a:17:d9:f5:07:e1:74:22:35:77:00:b9:50: 0e:87:de:e5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAxOEQxNTczNkJCOEY4 Qjc2MjE4RkFCMjQxMDFFMzY3MEVGQTJFNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcEPGriXmN8PSwZ3i89NLBzK8tGjFtELxRh/JSGwWiDo0ruNA2 WdxklRqh1BW44TLtTHFNabBC7ES4xGWz9s2ji1++cZiTqONgIw+EbA0/QCKKtgMw Rs0M2Bb5buddcucCxtI24U85L8LwaHb4yWONmUOcOQM32kRZdlZlTRLdSLm9d7EG xMFAw8j5eET8P8PYcX6EuoQmyS4Peu+minHU//PsxVL/4hC/J3HTasA9APCs3MFd bEp9rkut/LwD/E5a9Q+vyU8gorhVEbP5IBJ/D7fW5P9ZmcRz61LSgLWD/OV2l4Y5 uSYIv7plwVQxZAan/rzVzxPZsBDCAByacE+ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAY0Vc2u4+LdiGPqyQQHjZw76LngwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FZMFZjMnU0LUxkaUdQcXlR UUhqWnc3NkxuZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sRAwDQYJKoZIhvcNAQELBQADggEBAKri2Gwyt/WUdMVjSlXD+N6fd+p2bCc97KEx hLf/Ss8QtbeRJzCnDlFfQuB/hprLat6hp6+J0borZVo9+nuP6R4uMjc+wBevZJAO y29YZMjg6c4y4mwiWj7IhPJS5RuRe7igp7+9OqUZelkqSr+XmM5zxzlvnrS1PGyT rkeXr/VtJk3U+vLPTgJzjkpXmDvBodaRW1pKieGtHJ6p7Hlw6/k/skrqNYSaiz2T CoEyJ5mnyGrg1qRXFqe8qtdJ/8/C6p5fkuYhtIkGFmE8KOGpieie2dyUvP2RowkC Fl7g20OWC3AW3PdZlwMQlkzfmVq6WhfZ9QfhdCI1dwC5UA6H3uU= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org