$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DO2jx6JB91QqSgUjnkmcHXh0-pk.roa File: DO2jx6JB91QqSgUjnkmcHXh0-pk.roa (raw, json) Hash identifier: FBDu/at2krIVMJGC4xg3EiefxfnSSuE6r/C/60lGZGE= Subject key identifier: 0C:ED:A3:C7:A2:41:F7:54:2A:4A:05:23:9E:49:9C:1D:78:74:FA:99 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 284B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DO2jx6JB91QqSgUjnkmcHXh0-pk.roa Signing time: Fri 01 Sep 2023 10:05:10 +0000 ROA not before: Fri 01 Sep 2023 10:05:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10315 (0x284b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:10 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0CEDA3C7A241F7542A4A05239E499C1D7874FA99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:91:6d:b3:0c:df:15:d0:59:60:3a:81:f6: 04:b0:f1:dc:f7:c9:2e:59:d0:f5:cf:9d:c4:7e:e0: f0:20:be:48:f3:9f:a9:75:e7:91:fd:e0:2f:10:38: 13:8b:9b:3c:33:63:93:2a:8d:91:3b:20:5c:e8:be: e1:d2:0b:6c:76:5d:c4:6d:f3:87:8a:2f:af:3e:69: 72:1f:1c:87:7a:d5:84:fd:5e:f3:6c:e1:45:d2:1f: dd:45:9f:7c:3d:de:20:6d:98:d5:e5:19:3a:83:6c: 79:72:5b:40:a8:74:cc:7e:75:96:fe:8c:e3:27:6d: 9f:a0:21:40:29:14:16:57:ae:57:46:2d:ed:11:6d: 6b:76:07:19:59:c1:65:76:bc:a4:c5:ae:d9:07:2f: 4b:0e:27:93:2f:05:3e:0d:3e:b1:80:9a:aa:70:7b: 31:63:9e:ee:2e:92:55:79:9a:3c:0a:13:d7:09:3c: 03:cd:c9:0a:ad:92:87:2e:90:7c:0c:ce:2b:98:7d: ac:b6:58:a9:65:e5:de:f2:be:28:2e:3e:6c:e0:58: 8a:4a:a0:43:84:26:34:4b:01:3a:f4:5b:b3:49:c4: ad:04:7f:05:86:72:74:e6:b2:ed:b6:6d:89:9e:fc: 06:68:aa:ec:6a:bf:0c:6d:2e:ce:87:7c:e4:75:a5: 6a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:ED:A3:C7:A2:41:F7:54:2A:4A:05:23:9E:49:9C:1D:78:74:FA:99 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DO2jx6JB91QqSgUjnkmcHXh0-pk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.85.0/24 Signature Algorithm: sha256WithRSAEncryption 63:a7:18:b0:a6:5c:1a:78:e2:4d:15:72:15:03:b8:85:9d:77: a4:4f:b3:61:74:bf:74:98:87:0f:b1:21:59:7b:ea:b5:65:2d: 7c:1c:f0:aa:a5:eb:58:3b:51:22:6b:24:19:45:ea:22:8f:63: e4:5b:40:3f:28:ef:f5:57:a7:4c:88:d1:12:d1:75:35:11:f7: e5:d9:8b:82:73:ef:9c:b5:53:ea:a8:a6:46:ed:fe:c4:fa:a1: e6:2b:38:2e:7d:14:44:24:9d:da:59:98:bc:09:a7:f6:cb:81: b4:05:6c:f0:27:be:67:2f:33:3b:27:88:75:9d:7b:2a:a7:cd: 51:e8:a4:e7:19:90:33:e5:ae:1d:05:b4:fc:6b:4f:8d:76:77: 45:b6:9e:73:3d:d8:6d:d2:dd:95:30:2b:a2:68:56:c0:f1:56: 2d:1e:8a:38:37:7c:1a:de:8e:3f:3f:fc:b7:fe:14:58:54:7b: c1:24:d6:3a:44:17:41:19:98:cc:45:64:b4:6b:0e:3b:a0:1e: 8c:61:71:09:e9:2e:aa:47:f8:ba:7a:bf:d6:c1:09:69:2b:87: d8:25:7c:fc:17:27:ac:a7:ae:b7:d0:e0:79:57:f0:30:b3:f0: 70:e2:df:30:78:c2:a4:9c:bf:63:b3:88:4e:93:15:a8:d8:1a: 78:d6:ec:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBDRURBM0M3QTI0MUY3 NTQyQTRBMDUyMzlFNDk5QzFENzg3NEZBOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYlJFtswzfFdBZYDqB9gSw8dz3yS5Z0PXPncR+4PAgvkjzn6l1 55H94C8QOBOLmzwzY5MqjZE7IFzovuHSC2x2XcRt84eKL68+aXIfHId61YT9XvNs 4UXSH91Fn3w93iBtmNXlGTqDbHlyW0CodMx+dZb+jOMnbZ+gIUApFBZXrldGLe0R bWt2BxlZwWV2vKTFrtkHL0sOJ5MvBT4NPrGAmqpwezFjnu4uklV5mjwKE9cJPAPN yQqtkocukHwMziuYfay2WKll5d7yviguPmzgWIpKoEOEJjRLATr0W7NJxK0EfwWG cnTmsu22bYme/AZoquxqvwxtLs6HfOR1pWo5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDO2jx6JB91QqSgUjnkmcHXh0+pkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RPMmp4NkpCOTFRcVNnVWpu a21jSFhoMC1way5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sFUwDQYJKoZIhvcNAQELBQADggEBAGOnGLCmXBp44k0VchUDuIWdd6RPs2F0v3SY hw+xIVl76rVlLXwc8Kql61g7USJrJBlF6iKPY+RbQD8o7/VXp0yI0RLRdTUR9+XZ i4Jz75y1U+qopkbt/sT6oeYrOC59FEQkndpZmLwJp/bLgbQFbPAnvmcvMzsniHWd eyqnzVHopOcZkDPlrh0FtPxrT412d0W2nnM92G3S3ZUwK6JoVsDxVi0eijg3fBre jj8//Lf+FFhUe8Ek1jpEF0EZmMxFZLRrDjugHoxhcQnpLqpH+Lp6v9bBCWkrh9gl fPwXJ6ynrrfQ4HlX8DCz8HDi3zB4wqScv2OziE6TFajYGnjW7Eo= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:29 2024 by rpki-client on console-fra.rpki-client.org