$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DzTAJEir9vlbuWQs193yez7d5-c.roa File: DzTAJEir9vlbuWQs193yez7d5-c.roa (raw, json) Hash identifier: 9z/KiaOrq74i8kH/ABsxlo/SBJHcOCl/Xj7O7dw2O0I= Subject key identifier: 0F:34:C0:24:48:AB:F6:F9:5B:B9:64:2C:D7:DD:F2:7B:3E:DD:E7:E7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2ADE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DzTAJEir9vlbuWQs193yez7d5-c.roa Signing time: Fri 01 Sep 2023 10:08:23 +0000 ROA not before: Fri 01 Sep 2023 10:08:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10974 (0x2ade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0F34C02448ABF6F95BB9642CD7DDF27B3EDDE7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:1b:02:43:df:a1:ec:6a:9c:48:73:d3:99: 2a:39:f6:2c:75:db:73:ec:33:a8:87:96:bb:f8:02: d7:9c:fa:48:fa:42:6a:89:45:d6:1b:de:1c:c0:93: a1:c5:82:97:89:ab:ef:d0:14:7b:ba:7f:1a:54:d9: b4:de:ef:80:95:5f:18:58:f1:6e:b8:a2:39:54:a7: d0:2a:77:d1:36:9b:ac:6a:2e:ab:31:63:0e:7d:f6: a9:6a:58:19:b9:3d:42:42:4f:b3:03:7d:d6:8e:84: e4:0f:e3:7f:40:c9:c6:09:26:d8:80:19:8d:a2:de: 63:f7:f5:a6:bf:45:c0:7e:90:59:05:c9:c3:45:77: b8:68:d3:a1:bf:5b:2b:16:08:73:ef:c5:b9:50:17: 86:7b:10:8c:5a:c4:10:12:14:e0:88:c2:c5:95:97: 63:e3:64:fd:2d:f2:fc:4b:1c:4f:0e:c6:41:4b:15: f5:81:e1:e7:c6:c8:27:e1:f3:10:30:bc:cf:d0:3a: f5:1f:00:10:92:36:94:4e:b0:c0:63:9c:0b:da:25: 62:ae:1a:92:af:f0:6f:31:47:d6:b6:45:97:96:a2: 2c:15:86:a5:28:ac:13:bb:fe:c7:f8:2f:a8:fe:39: c1:ec:4d:c8:dc:8a:f2:d6:40:8f:27:d8:d8:3a:4f: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:34:C0:24:48:AB:F6:F9:5B:B9:64:2C:D7:DD:F2:7B:3E:DD:E7:E7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DzTAJEir9vlbuWQs193yez7d5-c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.152.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:0b:4d:68:a4:ef:69:b9:ba:2d:d7:b3:d5:0a:df:c9:df:b4: a8:0e:29:17:8b:ec:5b:32:28:27:70:ac:49:c4:da:24:89:fc: 4f:56:03:5e:67:fc:a9:69:a2:3d:50:7b:1a:8a:a0:f5:02:8f: 29:b3:8e:8f:48:99:9a:4c:33:b2:6d:99:9f:b6:41:8e:76:49: 5b:88:31:57:2e:a1:95:df:c3:23:8b:01:64:2d:8d:d3:b8:26: 79:36:59:e3:f8:97:66:fc:69:e2:e6:fe:4f:52:28:6e:16:03: c1:76:b8:35:df:d9:ba:ae:35:50:29:d7:ca:de:77:65:ca:e0: cf:c4:f0:08:ee:56:e0:ad:8d:d4:8f:b7:5f:c0:50:8f:48:02: 9e:db:82:7f:38:c1:83:88:20:fc:12:05:97:5f:ea:8f:7a:5a: e6:7c:86:6c:e6:63:0a:f2:33:ac:ee:f5:0b:65:18:66:d2:87: f4:12:13:3c:61:84:02:54:d2:13:92:25:00:66:cc:fe:db:6e: 24:e2:21:31:ab:70:f9:b6:4c:f9:33:1d:de:c2:97:c1:ab:30: 2b:ac:ba:5c:33:af:ff:c5:44:87:3c:54:f5:f8:e3:68:2e:9c: d3:a2:d1:bb:2e:52:69:d1:15:ec:48:09:90:b1:c0:f3:de:d3: 0f:eb:0e:9b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBGMzRDMDI0NDhBQkY2 Rjk1QkI5NjQyQ0Q3RERGMjdCM0VEREU3RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkZRsCQ9+h7GqcSHPTmSo59ix123PsM6iHlrv4Atec+kj6QmqJ RdYb3hzAk6HFgpeJq+/QFHu6fxpU2bTe74CVXxhY8W64ojlUp9Aqd9E2m6xqLqsx Yw599qlqWBm5PUJCT7MDfdaOhOQP439AycYJJtiAGY2i3mP39aa/RcB+kFkFycNF d7ho06G/WysWCHPvxblQF4Z7EIxaxBASFOCIwsWVl2PjZP0t8vxLHE8OxkFLFfWB 4efGyCfh8xAwvM/QOvUfABCSNpROsMBjnAvaJWKuGpKv8G8xR9a2RZeWoiwVhqUo rBO7/sf4L6j+OcHsTcjcivLWQI8n2Ng6TxNnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDzTAJEir9vlbuWQs193yez7d5+cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0R6VEFKRWlyOXZsYnVXUXMx OTN5ZXo3ZDUtYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sZgwDQYJKoZIhvcNAQELBQADggEBAAwLTWik72m5ui3Xs9UK38nftKgOKReL7Fsy KCdwrEnE2iSJ/E9WA15n/Klpoj1QexqKoPUCjymzjo9ImZpMM7JtmZ+2QY52SVuI MVcuoZXfwyOLAWQtjdO4Jnk2WeP4l2b8aeLm/k9SKG4WA8F2uDXf2bquNVAp18re d2XK4M/E8AjuVuCtjdSPt1/AUI9IAp7bgn84wYOIIPwSBZdf6o96WuZ8hmzmYwry M6zu9QtlGGbSh/QSEzxhhAJU0hOSJQBmzP7bbiTiITGrcPm2TPkzHd7Cl8GrMCus ulwzr//FRIc8VPX442gunNOi0bsuUmnRFexICZCxwPPe0w/rDps= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org