$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkxAvOizoVo4a2iOR-ehHWw3IW8.roa File: IkxAvOizoVo4a2iOR-ehHWw3IW8.roa (raw, json) Hash identifier: r/E8ZpQFkUrSnygFXmQH5tkNg+Ms9VixnJrjsx0bcnA= Subject key identifier: 22:4C:40:BC:E8:B3:A1:5A:38:6B:68:8E:47:E7:A1:1D:6C:37:21:6F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32A2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkxAvOizoVo4a2iOR-ehHWw3IW8.roa Signing time: Mon 26 Aug 2024 05:31:51 +0000 ROA not before: Mon 26 Aug 2024 05:31:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12962 (0x32a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=224C40BCE8B3A15A386B688E47E7A11D6C37216F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:86:e1:27:ef:7d:e4:76:1a:bc:8f:bd:a8:56: d9:78:e4:c3:02:27:70:6f:13:95:57:f1:f1:27:19: 58:ef:95:9c:53:88:34:69:22:3f:d6:54:82:3a:20: 95:2a:aa:b4:47:47:78:4a:bc:61:d7:35:a5:c7:6c: 6e:5f:a7:84:6b:fc:c0:a7:ef:8a:b0:4b:60:26:37: 8a:be:9a:a5:60:11:8f:ed:97:b8:03:0e:c7:ea:2b: db:b4:fb:0a:8f:28:40:c8:13:ac:22:e9:d4:48:57: 48:69:ed:03:01:39:55:9f:77:7f:a7:2c:4a:c2:b0: 08:9e:a8:94:b7:4a:4c:b4:f4:02:da:80:22:ed:b7: fa:9c:fd:81:55:38:71:a8:de:bb:f0:8d:96:44:93: 3d:9e:ad:40:9e:f0:e2:44:be:d2:d1:b8:5c:5d:3d: 03:f9:50:44:bb:2a:a4:58:79:5c:86:56:95:c6:84: 3f:b2:3a:d5:b3:9b:59:ea:97:83:99:1a:aa:e3:2f: 3d:75:5d:b7:2e:05:ee:44:56:df:91:3d:46:aa:f1: 1c:41:9d:3f:28:1a:49:77:98:a8:43:5f:40:45:38: 89:a7:e6:99:6b:20:ea:1f:bf:3e:5f:40:46:fd:e2: 51:f8:83:e5:8b:48:1f:0c:f2:5b:e4:52:a4:b5:b7: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4C:40:BC:E8:B3:A1:5A:38:6B:68:8E:47:E7:A1:1D:6C:37:21:6F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkxAvOizoVo4a2iOR-ehHWw3IW8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.48.0/21 Signature Algorithm: sha256WithRSAEncryption 54:2b:dd:b4:d4:a0:d6:0b:0a:07:fc:a1:d8:4d:ab:d3:46:0f: 84:5f:a0:67:44:6b:7a:f0:4c:8f:a1:50:4e:52:21:13:65:4c: e9:25:08:13:b9:e9:47:93:c2:a9:59:ba:69:87:f7:f2:59:d2: fa:35:c1:80:20:e6:64:7a:cb:c5:cd:c7:d3:4e:e8:ef:2d:9c: 20:41:35:d5:1c:48:6d:75:bc:21:8f:7e:ea:29:5a:41:77:3f: 17:fb:4d:62:80:e7:1a:f7:a7:7e:19:c4:d2:96:e2:d6:21:4b: ed:c9:fe:6a:5d:71:90:47:61:ec:3c:b0:c6:0c:a5:b8:74:3f: 2e:a3:e7:b9:c2:f0:08:ca:fe:50:92:31:46:2a:d6:c2:dc:6d: 87:ba:9c:81:d7:b1:73:16:80:30:98:7d:31:1e:69:c3:47:28: fa:29:da:ee:e2:1c:ec:db:43:c1:86:c7:c0:87:30:ad:a3:9a: 5c:cd:98:5b:ad:56:82:db:9f:5c:87:37:41:75:99:0d:c3:81: 21:e9:b1:38:fe:60:e7:7e:3e:53:1c:74:35:8a:32:20:a0:cd: c1:14:d5:34:ec:6c:cd:51:6d:2a:9d:8b:50:19:05:f3:ca:82: e8:1f:2b:77:b8:c4:c8:81:bb:ab:17:95:cd:60:86:5c:d1:11: e1:1a:e7:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIyNEM0MEJDRThCM0Ex NUEzODZCNjg4RTQ3RTdBMTFENkMzNzIxNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzhuEn733kdhq8j72oVtl45MMCJ3BvE5VX8fEnGVjvlZxTiDRp Ij/WVII6IJUqqrRHR3hKvGHXNaXHbG5fp4Rr/MCn74qwS2AmN4q+mqVgEY/tl7gD DsfqK9u0+wqPKEDIE6wi6dRIV0hp7QMBOVWfd3+nLErCsAieqJS3Sky09ALagCLt t/qc/YFVOHGo3rvwjZZEkz2erUCe8OJEvtLRuFxdPQP5UES7KqRYeVyGVpXGhD+y OtWzm1nql4OZGqrjLz11XbcuBe5EVt+RPUaq8RxBnT8oGkl3mKhDX0BFOImn5plr IOofvz5fQEb94lH4g+WLSB8M8lvkUqS1ty9HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIkxAvOizoVo4a2iOR+ehHWw3IW8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lreEF2T2l6b1ZvNGEyaU9S LWVoSFd3M0lXOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sTAwDQYJKoZIhvcNAQELBQADggEBAFQr3bTUoNYLCgf8odhNq9NGD4RfoGdEa3rw TI+hUE5SIRNlTOklCBO56UeTwqlZummH9/JZ0vo1wYAg5mR6y8XNx9NO6O8tnCBB NdUcSG11vCGPfuopWkF3Pxf7TWKA5xr3p34ZxNKW4tYhS+3J/mpdcZBHYew8sMYM pbh0Py6j57nC8AjK/lCSMUYq1sLcbYe6nIHXsXMWgDCYfTEeacNHKPop2u7iHOzb Q8GGx8CHMK2jmlzNmFutVoLbn1yHN0F1mQ3DgSHpsTj+YOd+PlMcdDWKMiCgzcEU 1TTsbM1RbSqdi1AZBfPKgugfK3e4xMiBu6sXlc1ghlzREeEa50k= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org