$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bf7hb6hg7ci3I-7RZhDOlXySRlw.roa File: Bf7hb6hg7ci3I-7RZhDOlXySRlw.roa (raw, json) Hash identifier: ahfKBT8GjEUEtkbSGIKCVkJsc9kKmTLuWBCSJwyv1bI= Subject key identifier: 05:FE:E1:6F:A8:60:ED:C8:B7:23:EE:D1:66:10:CE:95:7C:92:46:5C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 283C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bf7hb6hg7ci3I-7RZhDOlXySRlw.roa Signing time: Fri 01 Sep 2023 10:05:06 +0000 ROA not before: Fri 01 Sep 2023 10:05:06 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.228.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10300 (0x283c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:06 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=05FEE16FA860EDC8B723EED16610CE957C92465C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7b:f8:09:51:bd:4f:54:47:85:ab:10:ed:00: ea:72:07:3f:e8:32:59:ff:ce:b4:58:38:ee:14:40: 90:43:17:ca:e1:83:5a:b4:82:03:0e:3a:b4:e0:cb: 6b:6e:25:4d:eb:36:e3:f7:09:12:d3:f0:f1:86:1e: e7:3b:2e:aa:cd:50:0b:75:8c:34:3b:da:39:27:1b: b8:83:c3:60:a8:00:ae:4e:bb:69:0a:b7:ab:e7:74: 44:4b:25:56:80:bb:f4:c2:25:00:f6:e4:ec:ed:08: c6:be:7e:76:ba:f5:ac:a7:e7:91:c5:5d:a9:2e:4a: a7:47:ee:8a:d1:1a:80:78:cf:4e:51:44:8f:8c:99: 9b:1f:ba:cd:a2:04:05:4a:ee:0c:30:9b:27:d7:bd: 9e:2b:88:24:06:27:80:4a:b7:ea:6d:ad:18:f8:af: 48:3e:67:4d:82:49:9a:23:36:ec:b0:ed:bf:d1:bd: 74:75:8f:e3:92:0d:3d:d6:df:64:dd:81:48:75:2f: bc:be:69:6e:46:91:91:f2:5a:1c:f9:c8:78:16:d0: ca:59:cd:c4:51:07:48:4d:e2:d5:bf:f2:aa:3c:5d: c6:ab:d7:76:b9:2f:b5:d3:3f:74:a4:29:06:44:bf: 06:13:71:0d:87:fe:f1:de:ec:aa:f0:fd:02:a2:73: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FE:E1:6F:A8:60:ED:C8:B7:23:EE:D1:66:10:CE:95:7C:92:46:5C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bf7hb6hg7ci3I-7RZhDOlXySRlw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.228.0/22 Signature Algorithm: sha256WithRSAEncryption 60:1f:c5:06:55:d2:66:37:18:23:6f:01:31:3f:27:77:e2:a0: 88:ad:af:f5:c0:14:e5:b8:3b:7f:72:d0:75:c9:9c:16:99:58: 1d:fe:aa:b9:c5:54:6b:03:87:b3:a4:26:74:71:30:37:5b:59: 10:37:29:5f:72:48:32:72:c2:9c:3b:90:ee:de:4e:22:5d:d5: 5e:9e:fd:3e:d3:36:93:00:2d:19:bf:43:e3:1d:32:80:f9:1e: bc:85:fd:15:d9:14:30:d7:ed:f0:ad:e1:2a:49:1f:39:ee:b0: 5d:01:e7:eb:29:ff:40:4f:0c:40:ce:6a:bc:66:2b:fa:e3:44: 9b:fe:63:10:3f:0d:59:87:ca:10:10:2e:ed:cf:bd:86:1d:e0: 53:79:ba:97:e2:05:70:7a:3f:d2:ab:2e:91:c8:88:2b:44:a9: 32:d2:41:71:cb:e4:90:2d:b0:63:25:28:77:6b:6d:a6:bf:a0: 19:c1:40:22:e1:55:a3:a4:b6:75:11:0d:7b:9a:5b:39:f5:fe: b4:5c:a6:be:88:73:26:f2:d7:56:c7:10:fb:98:de:a1:b1:ec: f2:54:74:46:67:bf:57:31:a0:d6:17:24:4d:1e:dd:d6:be:ff: b0:43:ec:01:a6:49:88:5d:4c:63:4c:57:2f:ad:d1:35:a7:55: c1:43:10:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA1RkVFMTZGQTg2MEVE QzhCNzIzRUVEMTY2MTBDRTk1N0M5MjQ2NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCle/gJUb1PVEeFqxDtAOpyBz/oMln/zrRYOO4UQJBDF8rhg1q0 ggMOOrTgy2tuJU3rNuP3CRLT8PGGHuc7LqrNUAt1jDQ72jknG7iDw2CoAK5Ou2kK t6vndERLJVaAu/TCJQD25OztCMa+fna69ayn55HFXakuSqdH7orRGoB4z05RRI+M mZsfus2iBAVK7gwwmyfXvZ4riCQGJ4BKt+ptrRj4r0g+Z02CSZojNuyw7b/RvXR1 j+OSDT3W32TdgUh1L7y+aW5GkZHyWhz5yHgW0MpZzcRRB0hN4tW/8qo8Xcar13a5 L7XTP3SkKQZEvwYTcQ2H/vHe7Krw/QKic0FBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBf7hb6hg7ci3I+7RZhDOlXySRlwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JmN2hiNmhnN2NpM0ktN1Ja aERPbFh5U1Jsdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 seQwDQYJKoZIhvcNAQELBQADggEBAGAfxQZV0mY3GCNvATE/J3fioIitr/XAFOW4 O39y0HXJnBaZWB3+qrnFVGsDh7OkJnRxMDdbWRA3KV9ySDJywpw7kO7eTiJd1V6e /T7TNpMALRm/Q+MdMoD5HryF/RXZFDDX7fCt4SpJHznusF0B5+sp/0BPDEDOarxm K/rjRJv+YxA/DVmHyhAQLu3PvYYd4FN5upfiBXB6P9KrLpHIiCtEqTLSQXHL5JAt sGMlKHdrbaa/oBnBQCLhVaOktnURDXuaWzn1/rRcpr6Icyby11bHEPuY3qGx7PJU dEZnv1cxoNYXJE0e3da+/7BD7AGmSYhdTGNMVy+t0TWnVcFDEEQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org