$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/InWH33bSqxWdp-OYE5_BWV93ZfA.roa File: InWH33bSqxWdp-OYE5_BWV93ZfA.roa (raw, json) Hash identifier: ASAmNmDOaHBAtYcA6Px+6w6QteJlUiVX20GrprYr32s= Subject key identifier: 22:75:87:DF:76:D2:AB:15:9D:A7:E3:98:13:9F:C1:59:5F:77:65:F0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32B4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/InWH33bSqxWdp-OYE5_BWV93ZfA.roa Signing time: Mon 26 Aug 2024 05:31:55 +0000 ROA not before: Mon 26 Aug 2024 05:31:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12980 (0x32b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=227587DF76D2AB159DA7E398139FC1595F7765F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:27:15:bc:ea:c8:ec:26:1f:6c:b7:48:f6: 1b:9d:a5:9c:75:23:5b:d6:46:1c:a6:68:6f:69:d0: 9e:51:a8:d8:54:63:ec:b3:e3:a2:83:87:08:a6:7a: 6c:42:2d:86:79:4d:aa:91:64:18:03:88:0f:d2:3f: 75:53:ad:68:7d:0b:96:a1:b6:89:e5:f7:52:08:51: 48:70:e2:13:d4:9e:71:a7:db:39:34:0f:f3:b6:d4: b5:66:e3:8c:0b:fa:82:69:9e:f5:ed:52:8b:c9:d1: 84:5f:53:11:8b:23:05:0f:93:b2:8c:ea:19:1a:94: 6d:c5:3a:55:21:3f:cd:1c:06:b1:1f:5e:fa:25:f9: d7:d5:c9:d5:7a:ef:9a:57:b5:04:3c:2b:30:f9:d8: a5:c5:28:3c:73:c8:4f:62:cd:1d:d2:3e:37:bf:1d: ab:61:f9:14:2f:08:4e:18:06:37:0b:3b:f3:cc:63: 96:05:c5:8c:ca:bd:db:55:b6:2c:df:47:fa:03:f0: 27:27:e6:c8:e0:95:aa:48:e1:e0:9c:8c:eb:6b:ac: 2d:55:dd:04:8c:f2:ee:e7:79:cb:d6:6f:40:6c:a2: 41:d2:09:96:be:90:4d:46:5e:fb:98:f0:56:42:03: 40:f9:91:64:5d:b5:98:04:3f:72:56:74:3d:f8:f0: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:75:87:DF:76:D2:AB:15:9D:A7:E3:98:13:9F:C1:59:5F:77:65:F0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/InWH33bSqxWdp-OYE5_BWV93ZfA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.152.0/21 Signature Algorithm: sha256WithRSAEncryption 95:74:35:86:e9:46:25:7a:75:48:ea:f2:35:75:e6:d7:80:33: 8c:3f:d2:4a:eb:6f:69:c1:c6:18:7e:5f:cf:83:51:23:ff:fc: cb:cc:46:fe:e6:f3:97:ca:35:bd:c0:34:58:bc:24:a5:b6:55: 90:98:fe:c9:5b:cb:08:d1:f4:e1:92:39:67:b5:63:97:3b:ed: bd:3d:41:68:d1:b6:ab:b0:09:c7:32:6e:0c:dc:23:d9:ab:cd: d1:e8:f2:3d:fd:84:0a:0c:36:4c:3f:57:12:94:e3:33:a4:5f: 2d:01:1a:11:68:fb:7c:89:1a:b1:09:fa:63:9b:f5:19:45:80: 29:90:cb:4e:d6:b6:d9:60:81:2d:a8:a3:6e:d3:f6:13:c1:94: af:3b:65:59:6c:ab:e9:4a:f8:6a:26:74:47:ab:99:77:8a:9f: c8:7d:9c:ba:2d:51:ff:cb:e4:3a:58:d5:e3:4a:5d:6c:e6:6e: 41:93:30:7f:41:c7:c0:b1:69:cf:35:a0:43:06:36:c9:b9:d0: 46:f1:a9:ee:fc:ce:74:c2:8d:70:7c:4b:5a:34:35:dd:34:10: 9b:97:a8:d7:aa:cf:69:8a:1f:71:fa:38:f3:5e:b4:bb:e7:f9: df:9e:8e:32:1c:36:3c:80:aa:1d:ea:7c:6e:af:7c:5a:10:a9: d2:38:36:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIyNzU4N0RGNzZEMkFC MTU5REE3RTM5ODEzOUZDMTU5NUY3NzY1RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeAScVvOrI7CYfbLdI9hudpZx1I1vWRhymaG9p0J5RqNhUY+yz 46KDhwimemxCLYZ5TaqRZBgDiA/SP3VTrWh9C5ahtonl91IIUUhw4hPUnnGn2zk0 D/O21LVm44wL+oJpnvXtUovJ0YRfUxGLIwUPk7KM6hkalG3FOlUhP80cBrEfXvol +dfVydV675pXtQQ8KzD52KXFKDxzyE9izR3SPje/Hath+RQvCE4YBjcLO/PMY5YF xYzKvdtVtizfR/oD8Ccn5sjglapI4eCcjOtrrC1V3QSM8u7necvWb0BsokHSCZa+ kE1GXvuY8FZCA0D5kWRdtZgEP3JWdD348Gc9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUInWH33bSqxWdp+OYE5/BWV93ZfAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0luV0gzM2JTcXhXZHAtT1lF NV9CV1Y5M1pmQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sZgwDQYJKoZIhvcNAQELBQADggEBAJV0NYbpRiV6dUjq8jV15teAM4w/0krrb2nB xhh+X8+DUSP//MvMRv7m85fKNb3ANFi8JKW2VZCY/slbywjR9OGSOWe1Y5c77b09 QWjRtquwCccybgzcI9mrzdHo8j39hAoMNkw/VxKU4zOkXy0BGhFo+3yJGrEJ+mOb 9RlFgCmQy07WttlggS2oo27T9hPBlK87ZVlsq+lK+GomdEermXeKn8h9nLotUf/L 5DpY1eNKXWzmbkGTMH9Bx8Cxac81oEMGNsm50Ebxqe78znTCjXB8S1o0Nd00EJuX qNeqz2mKH3H6OPNetLvn+d+ejjIcNjyAqh3qfG6vfFoQqdI4Nr0= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org