$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DrM1BYF6s-aopqILUre8-bCQO7Q.roa File: DrM1BYF6s-aopqILUre8-bCQO7Q.roa (raw, json) Hash identifier: kQBbrPKosEYcHO92t0/j4gW5CSo8AVS+qxkk4OyLlrA= Subject key identifier: 0E:B3:35:05:81:7A:B3:E6:A8:A6:A2:0B:52:B7:BC:F9:B0:90:3B:B4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30AC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DrM1BYF6s-aopqILUre8-bCQO7Q.roa Signing time: Mon 26 Aug 2024 05:29:42 +0000 ROA not before: Mon 26 Aug 2024 05:29:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12460 (0x30ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0EB33505817AB3E6A8A6A20B52B7BCF9B0903BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:84:7e:d2:64:ec:89:e0:30:4d:5b:98:e3:40: 71:af:65:42:56:61:3f:76:3d:bc:ea:e1:fd:e9:7a: b5:50:2b:e3:ec:ee:75:78:65:32:c4:ad:68:7e:65: ba:17:ca:8b:70:42:eb:9c:76:59:be:02:4b:de:4e: 65:4f:d7:ff:7b:ab:5c:a1:80:e1:61:ee:33:2f:70: 80:29:f9:a2:2e:23:c2:a2:c9:1e:57:c4:1a:36:f6: 59:5c:b1:f6:d0:3d:2c:9d:0e:04:ad:44:c2:4d:b6: b7:6c:2f:54:a8:c9:b8:aa:97:cc:7d:7a:1d:81:71: a5:58:7f:7f:8d:ed:b4:5c:a6:46:06:91:62:19:ed: 71:0e:6d:f5:26:98:70:e0:a6:22:d2:f4:8c:a9:85: 45:89:11:8e:2d:23:31:ae:6d:80:0c:2c:0a:0f:ea: a8:f7:58:71:d4:bc:58:38:5d:7a:b6:df:7c:fd:3b: 26:c9:21:09:87:be:67:10:a5:63:56:69:69:78:ab: 53:28:0b:55:4d:9b:93:91:e9:62:8f:9d:f6:1b:ca: a1:50:c4:77:09:9b:57:53:48:60:bb:48:8a:6d:46: 37:81:4b:05:97:22:a8:49:f3:d4:32:6c:c6:b7:06: 14:06:fc:3e:34:23:ac:8c:f4:ca:0e:2e:c9:39:de: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B3:35:05:81:7A:B3:E6:A8:A6:A2:0B:52:B7:BC:F9:B0:90:3B:B4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DrM1BYF6s-aopqILUre8-bCQO7Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.104.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:a6:41:52:32:06:f1:7f:e1:4f:3d:ae:c1:99:78:aa:bf:bd: 5c:96:09:19:f7:7f:77:1d:e6:aa:06:09:12:0c:0f:c5:54:ee: f6:de:c4:c6:2a:cc:01:b7:90:e9:c6:45:8f:21:1b:34:95:12: 9b:fd:30:aa:12:14:b0:86:fb:41:41:cd:1e:cf:e3:81:ff:dc: 73:62:88:58:4c:34:1c:49:a2:e0:60:37:f2:c0:60:92:df:b9: 70:0b:6e:40:ee:ca:a2:7d:93:8a:08:26:e7:dd:12:a8:25:f0: c9:a4:c9:37:22:67:75:83:ce:f6:ba:7f:51:77:09:8b:8e:77: 60:68:ed:29:f6:a0:a6:cd:b0:38:8b:30:aa:31:70:ec:81:d9: 5e:ea:37:b9:09:57:99:a6:f8:d5:43:fe:70:2e:c3:1f:03:11: 08:50:d4:1b:4c:47:ba:0b:21:58:8a:60:7a:f0:3e:54:54:e2: 00:1e:8b:f1:0a:07:92:a7:58:d9:26:fb:75:e8:9d:89:61:be: b2:65:aa:c3:e5:f2:00:1d:59:4b:24:95:4f:1f:38:25:3d:4b: 40:ff:f3:1e:01:0f:69:2e:1e:80:5f:d1:b9:d9:f1:85:42:1a: 32:91:23:99:fe:af:6c:c6:ae:8b:eb:85:b5:34:9c:78:03:0b: 2d:e5:54:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBFQjMzNTA1ODE3QUIz RTZBOEE2QTIwQjUyQjdCQ0Y5QjA5MDNCQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYhH7SZOyJ4DBNW5jjQHGvZUJWYT92Pbzq4f3perVQK+Ps7nV4 ZTLErWh+ZboXyotwQuucdlm+AkveTmVP1/97q1yhgOFh7jMvcIAp+aIuI8KiyR5X xBo29llcsfbQPSydDgStRMJNtrdsL1Soybiql8x9eh2BcaVYf3+N7bRcpkYGkWIZ 7XEObfUmmHDgpiLS9IyphUWJEY4tIzGubYAMLAoP6qj3WHHUvFg4XXq233z9OybJ IQmHvmcQpWNWaWl4q1MoC1VNm5OR6WKPnfYbyqFQxHcJm1dTSGC7SIptRjeBSwWX IqhJ89QybMa3BhQG/D40I6yM9MoOLsk53iVHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDrM1BYF6s+aopqILUre8+bCQO7QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RyTTFCWUY2cy1hb3BxSUxV cmU4LWJDUU83US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sWgwDQYJKoZIhvcNAQELBQADggEBAJ6mQVIyBvF/4U89rsGZeKq/vVyWCRn3f3cd 5qoGCRIMD8VU7vbexMYqzAG3kOnGRY8hGzSVEpv9MKoSFLCG+0FBzR7P44H/3HNi iFhMNBxJouBgN/LAYJLfuXALbkDuyqJ9k4oIJufdEqgl8MmkyTciZ3WDzva6f1F3 CYuOd2Bo7Sn2oKbNsDiLMKoxcOyB2V7qN7kJV5mm+NVD/nAuwx8DEQhQ1BtMR7oL IViKYHrwPlRU4gAei/EKB5KnWNkm+3XonYlhvrJlqsPl8gAdWUsklU8fOCU9S0D/ 8x4BD2kuHoBf0bnZ8YVCGjKRI5n+r2zGrovrhbU0nHgDCy3lVBQ= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org