$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWA2onbfbv4590uc6PfYRASy2iA.roa File: DWA2onbfbv4590uc6PfYRASy2iA.roa (raw, json) Hash identifier: l7KkHfjqhLnZF16U6AV8F9wP2C8v8tP8AX3n2cazkRs= Subject key identifier: 0D:60:36:A2:76:DF:6E:FE:39:F7:4B:9C:E8:F7:D8:44:04:B2:DA:20 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3011 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWA2onbfbv4590uc6PfYRASy2iA.roa Signing time: Mon 26 Aug 2024 05:29:06 +0000 ROA not before: Mon 26 Aug 2024 05:29:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.228.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12305 (0x3011) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0D6036A276DF6EFE39F74B9CE8F7D84404B2DA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:c0:c1:18:29:65:06:63:51:3d:8e:6c:cb: 2b:8c:82:f8:ec:c0:2b:c3:62:36:08:10:7f:3d:25: f4:43:93:ae:60:98:5f:e1:6b:dc:8f:4f:58:43:6f: ca:a1:f5:68:8b:e1:e7:cc:1c:8f:7c:d5:63:ac:53: 22:59:db:c1:c5:a5:8b:89:a8:78:0f:2e:a0:79:c3: dc:10:15:57:cd:8a:bd:74:f8:dc:0b:e1:16:14:ff: d4:02:f7:1d:d1:54:11:32:91:3c:2a:23:6f:ae:37: ac:6a:e8:73:18:7d:fc:3f:ed:7e:11:3e:24:0a:c4: 6e:b4:0f:71:74:cd:36:14:ba:d6:92:61:1c:ed:e0: 89:65:c0:40:35:d6:4a:e7:41:66:4b:c3:fd:c1:8e: bd:22:07:7a:fe:66:19:7a:bd:aa:e5:ea:4d:27:48: a6:cb:5a:a2:b1:44:84:3c:ad:8c:7b:03:3a:fb:f5: a7:a6:58:5e:ca:d1:f1:10:9d:52:4e:1e:be:1d:52: 41:64:4f:c0:fa:f6:20:8f:c3:f4:08:c0:2b:01:83: 77:29:fb:79:17:1e:94:1e:19:39:43:1c:a7:b2:05: 85:c2:c3:c1:33:28:57:72:2a:01:9d:c6:31:51:6c: 2d:e2:db:f1:d2:b9:68:6d:87:02:c9:c2:55:85:80: cc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:60:36:A2:76:DF:6E:FE:39:F7:4B:9C:E8:F7:D8:44:04:B2:DA:20 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWA2onbfbv4590uc6PfYRASy2iA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.228.0/22 Signature Algorithm: sha256WithRSAEncryption 26:72:cb:81:9d:6d:f8:4e:a0:75:27:06:33:55:09:11:bf:15: d3:c5:92:99:e8:7f:ef:e2:89:70:51:be:03:da:ef:31:49:63: c7:cc:cf:cd:d4:10:d4:9f:1f:f4:a1:cc:be:a4:23:ba:9b:c9: 42:6a:a4:82:0c:7f:d7:8d:8f:46:f3:4c:2f:92:69:f2:33:0b: ca:25:11:e7:7e:4a:85:6d:f1:04:00:97:87:13:69:59:ac:96: c8:80:14:f1:42:7a:d4:8e:73:b9:69:a0:ff:39:a7:5a:c6:a0: de:1e:6e:c7:08:7a:74:1a:35:f1:a2:96:57:30:85:32:a3:aa: 19:c5:03:d8:38:d3:82:6b:63:f1:3a:68:58:8b:2a:38:00:51: c9:65:52:7b:15:d3:e7:36:36:4c:63:03:04:a1:d0:d9:35:c5: 52:72:e2:62:82:b9:37:c8:d8:fd:a1:c0:8a:91:a3:43:e3:68: 53:49:bc:8e:d6:4f:d6:d2:35:9a:5e:54:93:cb:8f:3e:74:42: 8c:b2:d4:d4:69:7d:5c:c3:26:c2:af:b4:82:ab:a7:d7:59:6d: de:26:24:20:ac:a0:2c:41:f6:a6:45:8f:b4:ec:36:a2:ee:21: c6:45:9f:40:c0:f2:9f:94:6e:c6:48:aa:4c:2d:81:5d:99:ef: 53:c8:3f:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBENjAzNkEyNzZERjZF RkUzOUY3NEI5Q0U4RjdEODQ0MDRCMkRBMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN3sDBGCllBmNRPY5syyuMgvjswCvDYjYIEH89JfRDk65gmF/h a9yPT1hDb8qh9WiL4efMHI981WOsUyJZ28HFpYuJqHgPLqB5w9wQFVfNir10+NwL 4RYU/9QC9x3RVBEykTwqI2+uN6xq6HMYffw/7X4RPiQKxG60D3F0zTYUutaSYRzt 4IllwEA11krnQWZLw/3Bjr0iB3r+Zhl6varl6k0nSKbLWqKxRIQ8rYx7Azr79aem WF7K0fEQnVJOHr4dUkFkT8D69iCPw/QIwCsBg3cp+3kXHpQeGTlDHKeyBYXCw8Ez KFdyKgGdxjFRbC3i2/HSuWhthwLJwlWFgMxTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDWA2onbfbv4590uc6PfYRASy2iAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RXQTJvbmJmYnY0NTkwdWM2 UGZZUkFTeTJpQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 seQwDQYJKoZIhvcNAQELBQADggEBACZyy4GdbfhOoHUnBjNVCRG/FdPFkpnof+/i iXBRvgPa7zFJY8fMz83UENSfH/ShzL6kI7qbyUJqpIIMf9eNj0bzTC+SafIzC8ol Eed+SoVt8QQAl4cTaVmslsiAFPFCetSOc7lpoP85p1rGoN4ebscIenQaNfGillcw hTKjqhnFA9g404JrY/E6aFiLKjgAUcllUnsV0+c2NkxjAwSh0Nk1xVJy4mKCuTfI 2P2hwIqRo0PjaFNJvI7WT9bSNZpeVJPLjz50Qoyy1NRpfVzDJsKvtIKrp9dZbd4m JCCsoCxB9qZFj7TsNqLuIcZFn0DA8p+UbsZIqkwtgV2Z71PIPwI= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org