$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KsRj58PY6ifshx34t1pQgffvSHU.roa File: KsRj58PY6ifshx34t1pQgffvSHU.roa (raw, json) Hash identifier: o7SfrtBaJmU5rKrx1jTt389x8pfx8NE7Geqh/2ufiv8= Subject key identifier: 2A:C4:63:E7:C3:D8:EA:27:EC:87:1D:F8:B7:5A:50:81:F7:EF:48:75 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3193 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KsRj58PY6ifshx34t1pQgffvSHU.roa Signing time: Mon 26 Aug 2024 05:30:35 +0000 ROA not before: Mon 26 Aug 2024 05:30:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12691 (0x3193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2AC463E7C3D8EA27EC871DF8B75A5081F7EF4875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:36:59:ba:8c:72:db:c4:f2:04:aa:b6:f7: 4f:f9:1e:16:6c:48:a4:34:bb:6e:21:0f:e3:93:5b: 6b:a3:c8:8a:71:ca:27:b3:52:0f:7c:2a:f8:ea:8e: 28:bb:50:fa:0e:2e:20:8c:af:30:83:a9:36:66:cd: 84:4f:92:b2:22:56:21:e4:32:af:fe:cb:31:05:1d: 63:db:51:a0:8a:a9:82:58:26:6b:8a:9d:21:80:8e: 1a:39:55:83:29:8e:5f:86:5c:6a:8b:b9:7f:50:95: 43:39:f8:b7:67:4d:4a:90:60:07:cc:0b:83:8a:7b: b8:04:60:da:98:e9:bd:bf:73:aa:4a:73:30:15:75: ee:0e:11:dc:16:d1:c8:f9:01:9c:6d:5a:49:46:e4: 6a:3f:59:5d:72:ad:58:d3:fa:bb:9d:d6:0e:b2:a9: 60:40:ec:18:9f:74:e8:8f:ae:a0:35:c6:4d:cf:bc: ce:6a:ae:0a:3d:92:3d:8c:10:5d:88:7f:82:9b:b3: 6a:9c:a3:0b:99:b5:0b:50:1f:a4:a9:fb:0a:03:50: f6:05:91:a3:87:7c:b7:13:91:78:e9:03:3c:a0:76: e6:d5:0d:c7:43:9c:91:1d:d5:73:34:37:82:f4:71: 7a:5f:1d:e0:5d:51:73:c9:c8:d8:2e:d1:a3:28:13: 22:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C4:63:E7:C3:D8:EA:27:EC:87:1D:F8:B7:5A:50:81:F7:EF:48:75 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KsRj58PY6ifshx34t1pQgffvSHU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.32.0/21 Signature Algorithm: sha256WithRSAEncryption 27:75:d3:11:24:71:29:8e:d5:74:5d:df:f2:91:f0:ba:64:1c: 7e:56:24:03:6b:d5:34:00:14:7a:17:14:b7:da:ed:3f:8e:56: 75:39:19:ab:32:e0:38:10:d6:4a:24:a2:0d:70:68:15:e4:e8: 6e:42:93:59:68:89:d2:7a:10:e8:57:bb:8b:ac:01:b1:19:30: 28:a4:1d:9d:0a:17:32:59:7e:51:90:4e:d6:f1:6c:d0:9d:58: 49:6e:0f:96:53:27:97:3f:ad:53:8f:6d:c3:90:f7:87:3d:08: d9:ee:ba:13:6b:e9:5b:4c:1d:6d:11:e1:9c:18:44:2f:b3:1e: b6:64:52:11:f6:f5:12:54:6e:02:d8:6e:d7:d9:61:26:f5:00: 95:c1:82:d9:77:5b:3d:be:cf:07:32:cf:fe:91:d9:96:9e:a8: 40:d8:a3:13:b0:31:3d:7f:5d:fb:1b:b9:81:3e:23:24:85:5e: 2f:e9:c2:6f:51:17:1f:9f:04:ab:83:ec:c1:55:c8:55:e9:f0: 58:6e:46:13:06:d1:18:8a:68:a2:b3:c5:9a:77:e1:d1:77:5c: bc:38:f2:83:00:e3:eb:10:b5:32:c2:5d:03:f1:2b:da:fa:4b: a8:3a:f4:24:3e:a2:f6:b9:e3:11:21:52:c0:f3:9a:69:9b:0a: 9c:d3:41:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBQzQ2M0U3QzNEOEVB MjdFQzg3MURGOEI3NUE1MDgxRjdFRjQ4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaJjZZuoxy28TyBKq290/5HhZsSKQ0u24hD+OTW2ujyIpxyiez Ug98Kvjqjii7UPoOLiCMrzCDqTZmzYRPkrIiViHkMq/+yzEFHWPbUaCKqYJYJmuK nSGAjho5VYMpjl+GXGqLuX9QlUM5+LdnTUqQYAfMC4OKe7gEYNqY6b2/c6pKczAV de4OEdwW0cj5AZxtWklG5Go/WV1yrVjT+rud1g6yqWBA7BifdOiPrqA1xk3PvM5q rgo9kj2MEF2If4Kbs2qcowuZtQtQH6Sp+woDUPYFkaOHfLcTkXjpAzygdubVDcdD nJEd1XM0N4L0cXpfHeBdUXPJyNgu0aMoEyLPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKsRj58PY6ifshx34t1pQgffvSHUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tzUmo1OFBZNmlmc2h4MzR0 MXBRZ2ZmdlNIVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sCAwDQYJKoZIhvcNAQELBQADggEBACd10xEkcSmO1XRd3/KR8LpkHH5WJANr1TQA FHoXFLfa7T+OVnU5Gasy4DgQ1kokog1waBXk6G5Ck1loidJ6EOhXu4usAbEZMCik HZ0KFzJZflGQTtbxbNCdWEluD5ZTJ5c/rVOPbcOQ94c9CNnuuhNr6VtMHW0R4ZwY RC+zHrZkUhH29RJUbgLYbtfZYSb1AJXBgtl3Wz2+zwcyz/6R2ZaeqEDYoxOwMT1/ XfsbuYE+IySFXi/pwm9RFx+fBKuD7MFVyFXp8FhuRhMG0RiKaKKzxZp34dF3XLw4 8oMA4+sQtTLCXQPxK9r6S6g69CQ+ova54xEhUsDzmmmbCpzTQU0= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org