$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7ka3JyMCys_iqSDkGJGlNcCdpg.roa File: E7ka3JyMCys_iqSDkGJGlNcCdpg.roa (raw, json) Hash identifier: nPEZZFjg+YKzF/KJEPI/XQ/wjYmRd8/5GOdP8piJdTQ= Subject key identifier: 13:B9:1A:DC:9C:8C:0B:2B:3F:8A:A4:83:90:62:46:94:D7:02:76:98 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2B13 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7ka3JyMCys_iqSDkGJGlNcCdpg.roa Signing time: Fri 01 Sep 2023 10:09:49 +0000 ROA not before: Fri 01 Sep 2023 10:09:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11027 (0x2b13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:09:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=13B91ADC9C8C0B2B3F8AA48390624694D7027698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:97:12:a8:00:b0:0e:5c:cf:47:92:2d:6e: 96:b6:0f:cd:4c:55:a4:59:0c:8a:19:9c:f6:0f:17: 86:16:1c:fe:eb:ac:83:e1:f9:dc:ec:e2:10:3e:16: 84:3c:ed:89:13:67:96:23:aa:49:41:9e:0c:97:25: 52:5d:8c:d6:c9:7d:1e:a0:31:7f:18:c6:22:a4:b8: 76:bf:06:5c:8a:31:a5:23:45:ea:93:11:a9:31:1c: d6:27:6b:18:9e:76:5d:69:8b:8f:99:a3:a9:f2:5e: eb:15:ea:b0:5f:35:81:7d:b4:c8:e9:06:e4:e6:29: a9:b7:36:26:de:9d:6e:e0:d5:f3:1d:2b:3b:40:37: cf:8b:3f:8b:c7:60:f3:d1:ba:f0:bb:95:19:c9:ac: 3f:5a:74:55:c9:16:7a:e9:57:44:8e:cd:b4:b2:c3: 3c:22:2e:42:b5:7d:ca:3d:d8:66:1c:3c:7e:f9:2f: 97:3d:20:0b:af:eb:ed:e6:e3:95:d3:93:04:e5:0a: f4:ea:00:59:ef:ad:ed:dc:e1:c1:d4:de:c5:9a:61: c0:1d:3d:4b:95:07:70:a2:84:ea:2d:76:e7:34:97: ea:66:22:36:39:b6:f8:da:60:33:22:99:62:fe:f7: 0c:c6:ee:6c:75:5b:54:24:83:eb:5c:a7:bd:9f:70: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B9:1A:DC:9C:8C:0B:2B:3F:8A:A4:83:90:62:46:94:D7:02:76:98 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7ka3JyMCys_iqSDkGJGlNcCdpg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.231.0/24 Signature Algorithm: sha256WithRSAEncryption 74:a7:15:fb:9c:cf:40:0f:fe:65:5b:1f:e4:38:8f:ec:e3:2f: 8a:1c:07:21:e3:1e:b5:f5:e5:0c:37:5f:d1:16:99:0e:6c:37: a0:0c:d5:57:02:e7:ab:e3:09:a9:4f:e7:5a:67:9b:9f:69:7a: f6:5f:80:dc:7b:01:41:f6:45:a0:b5:17:73:c4:73:13:76:31: f3:e8:6d:14:80:52:da:3c:90:01:ce:1c:a4:d6:a4:b3:fb:11: 63:1e:27:20:25:72:eb:a1:6b:44:49:af:0b:73:52:f9:da:22: 27:05:9c:6d:78:36:38:9d:ad:a3:48:f3:5a:39:cb:85:97:a1: c7:fd:59:4d:c7:fc:ae:6c:fe:c1:b4:37:0c:dd:70:11:f4:44: 56:1b:9b:d1:14:e3:a9:8e:41:c2:b4:59:24:f4:f3:90:b5:3c: 53:70:12:f8:50:ea:05:a9:db:fe:d1:77:39:9c:b9:1a:34:3b: 79:ba:15:11:ea:18:72:73:6a:53:03:da:f0:d2:fb:30:4d:83: 81:29:a9:07:6b:e4:68:14:c0:16:a5:a4:24:20:01:4b:60:fa: 90:78:20:05:68:8a:ac:09:ba:ae:63:52:e1:38:cb:85:5f:5d: 03:03:43:f7:31:42:9a:bf:81:88:24:11:61:d3:0f:e7:d3:e9: 87:89:31:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA5NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDEzQjkxQURDOUM4QzBC MkIzRjhBQTQ4MzkwNjI0Njk0RDcwMjc2OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDompcSqACwDlzPR5Itbpa2D81MVaRZDIoZnPYPF4YWHP7rrIPh +dzs4hA+FoQ87YkTZ5YjqklBngyXJVJdjNbJfR6gMX8YxiKkuHa/BlyKMaUjReqT EakxHNYnaxiedl1pi4+Zo6nyXusV6rBfNYF9tMjpBuTmKam3NibenW7g1fMdKztA N8+LP4vHYPPRuvC7lRnJrD9adFXJFnrpV0SOzbSywzwiLkK1fco92GYcPH75L5c9 IAuv6+3m45XTkwTlCvTqAFnvre3c4cHU3sWaYcAdPUuVB3CihOotduc0l+pmIjY5 tvjaYDMimWL+9wzG7mx1W1Qkg+tcp72fcKO9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUE7ka3JyMCys/iqSDkGJGlNcCdpgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0U3a2EzSnlNQ3lzX2lxU0Rr R0pHbE5jQ2RwZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 secwDQYJKoZIhvcNAQELBQADggEBAHSnFfucz0AP/mVbH+Q4j+zjL4ocByHjHrX1 5Qw3X9EWmQ5sN6AM1VcC56vjCalP51pnm59pevZfgNx7AUH2RaC1F3PEcxN2MfPo bRSAUto8kAHOHKTWpLP7EWMeJyAlcuuha0RJrwtzUvnaIicFnG14NjidraNI81o5 y4WXocf9WU3H/K5s/sG0NwzdcBH0RFYbm9EU46mOQcK0WST085C1PFNwEvhQ6gWp 2/7RdzmcuRo0O3m6FRHqGHJzalMD2vDS+zBNg4EpqQdr5GgUwBalpCQgAUtg+pB4 IAVoiqwJuq5jUuE4y4VfXQMDQ/cxQpq/gYgkEWHTD+fT6YeJMf0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org