$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LC1xTbcIreTQgJHCCt4eXAYr4WU.roa File: LC1xTbcIreTQgJHCCt4eXAYr4WU.roa (raw, json) Hash identifier: RIjPNaTpY+veyudusD4T1teCVj0JsQQAOAEfrc2xRYw= Subject key identifier: 2C:2D:71:4D:B7:08:AD:E4:D0:80:91:C2:0A:DE:1E:5C:06:2B:E1:65 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2958 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LC1xTbcIreTQgJHCCt4eXAYr4WU.roa Signing time: Fri 01 Sep 2023 10:06:24 +0000 ROA not before: Fri 01 Sep 2023 10:06:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10584 (0x2958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2C2D714DB708ADE4D08091C20ADE1E5C062BE165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:e4:2b:d5:bc:63:ef:1d:99:bc:b1:72:16: a7:e2:46:3d:c1:5d:4c:2a:d1:4d:64:b9:9a:b8:d1: ca:a3:25:b0:5e:ce:86:4f:21:04:9f:fa:3a:8c:fc: 13:e5:56:96:45:77:f4:4f:38:3b:38:6b:77:81:30: 37:a5:90:d6:db:c7:06:60:f4:30:15:2e:d4:73:74: c4:70:c3:28:3f:9e:ca:fd:17:09:43:c7:bf:b6:75: 09:7d:f1:c6:2a:71:d9:c1:83:24:18:d9:9b:79:e6: 5e:9f:24:73:5f:80:c2:db:9e:0b:2c:b0:6a:e2:22: c3:8a:0a:b0:01:f3:2b:32:8c:9c:b6:3d:c3:01:af: e7:ba:e8:77:69:67:22:72:b6:ec:27:a3:29:4c:98: 55:d0:8d:8a:60:88:e2:44:08:d4:ed:44:95:15:6f: 57:c4:60:7f:89:23:e6:f2:64:81:c0:1f:c5:e7:49: a6:e6:d1:8b:25:bd:4c:61:f9:3b:09:c4:3d:63:a5: 06:3e:84:00:c5:c5:25:f8:8c:27:3b:2a:7a:33:3e: dc:e3:6d:f7:12:e8:d8:e3:d6:e6:16:cc:43:90:a6: 94:15:4d:3d:4e:bf:59:51:2b:c7:d7:14:31:65:9d: 01:31:b1:f1:69:4f:ad:0e:82:56:bc:94:6c:45:9e: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2D:71:4D:B7:08:AD:E4:D0:80:91:C2:0A:DE:1E:5C:06:2B:E1:65 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LC1xTbcIreTQgJHCCt4eXAYr4WU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.22.0/24 Signature Algorithm: sha256WithRSAEncryption 61:79:f5:c1:8b:7c:aa:b7:b6:67:21:d6:6f:52:ec:29:fa:f4: 21:36:79:79:39:01:d2:0f:18:00:70:85:f7:f3:a6:1e:5a:ab: bd:7f:60:4a:59:49:40:5b:bf:62:ba:d5:25:e3:d8:de:80:0e: 51:62:4b:a7:b7:3c:e9:ea:09:28:fe:04:71:a8:fc:13:9f:18: 10:eb:e8:db:76:53:d6:4d:71:0d:55:6f:5a:d5:94:a9:a0:c2: 10:d1:6f:cb:1e:fc:b3:e3:0a:33:52:a0:b2:e7:83:3f:a6:5b: 44:1d:9c:9d:28:9f:ff:b8:ad:02:94:7a:9e:7c:e5:7e:78:42: 12:c8:86:b2:0e:7e:1d:e3:08:d6:9e:70:c7:d2:6b:c4:76:58: 6a:3b:8a:c1:6c:c5:c9:3c:1a:05:f6:0d:9b:f0:a5:47:07:46: 87:71:85:a8:84:2e:0d:25:e5:09:32:b9:e9:1e:a5:c9:fa:12: 50:ba:60:b1:f5:5f:ed:c0:27:96:81:70:2f:53:72:dc:74:86: 8f:c6:39:dd:82:2b:e3:22:67:8c:c7:b9:fd:9c:4a:75:f6:54: da:37:93:8a:0c:06:c7:b0:d4:bd:b7:3b:2a:9a:8a:21:d2:82: be:23:a5:3e:7d:7d:ba:f7:1b:da:b8:2b:cf:b6:67:b8:09:0d: ee:df:89:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJDMkQ3MTREQjcwOEFE RTREMDgwOTFDMjBBREUxRTVDMDYyQkUxNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIFeQr1bxj7x2ZvLFyFqfiRj3BXUwq0U1kuZq40cqjJbBezoZP IQSf+jqM/BPlVpZFd/RPODs4a3eBMDelkNbbxwZg9DAVLtRzdMRwwyg/nsr9FwlD x7+2dQl98cYqcdnBgyQY2Zt55l6fJHNfgMLbngsssGriIsOKCrAB8ysyjJy2PcMB r+e66HdpZyJytuwnoylMmFXQjYpgiOJECNTtRJUVb1fEYH+JI+byZIHAH8XnSabm 0YslvUxh+TsJxD1jpQY+hADFxSX4jCc7KnozPtzjbfcS6Njj1uYWzEOQppQVTT1O v1lRK8fXFDFlnQExsfFpT60Ogla8lGxFnj6LAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULC1xTbcIreTQgJHCCt4eXAYr4WUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xDMXhUYmNJcmVUUWdKSEND dDRlWEFZcjRXVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sBYwDQYJKoZIhvcNAQELBQADggEBAGF59cGLfKq3tmch1m9S7Cn69CE2eXk5AdIP GABwhffzph5aq71/YEpZSUBbv2K61SXj2N6ADlFiS6e3POnqCSj+BHGo/BOfGBDr 6Nt2U9ZNcQ1Vb1rVlKmgwhDRb8se/LPjCjNSoLLngz+mW0QdnJ0on/+4rQKUep58 5X54QhLIhrIOfh3jCNaecMfSa8R2WGo7isFsxck8GgX2DZvwpUcHRodxhaiELg0l 5Qkyuekepcn6ElC6YLH1X+3AJ5aBcC9Tctx0ho/GOd2CK+MiZ4zHuf2cSnX2VNo3 k4oMBsew1L23OyqaiiHSgr4jpT59fbr3G9q4K8+2Z7gJDe7fiVI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org