$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MH_G4qzRG85-YN09eFgzKZUqKpc.roa File: MH_G4qzRG85-YN09eFgzKZUqKpc.roa (raw, json) Hash identifier: 6ybj02PpT/OJYtfzPFegw336gY29jbLItL05staONgE= Subject key identifier: 30:7F:C6:E2:AC:D1:1B:CE:7E:60:DD:3D:78:58:33:29:95:2A:2A:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3083 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MH_G4qzRG85-YN09eFgzKZUqKpc.roa Signing time: Mon 26 Aug 2024 05:29:32 +0000 ROA not before: Mon 26 Aug 2024 05:29:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12419 (0x3083) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=307FC6E2ACD11BCE7E60DD3D78583329952A2A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:31:a3:93:0a:c7:c3:5f:bb:6b:81:c0:bb: bc:ed:70:0b:b7:be:3b:07:61:1f:76:98:f4:59:8f: a7:98:3c:54:c0:6a:16:0e:49:51:50:92:02:21:73: e5:87:de:79:b3:4f:ae:c7:cd:cc:bf:ee:33:2e:d4: 3a:76:5c:1e:91:79:fb:21:53:6c:16:f8:0a:99:2a: 4f:cd:ca:70:c9:e3:38:4f:80:f3:03:53:a0:cf:4e: 12:62:7f:76:5a:c4:f3:82:2b:1c:cd:64:8e:e2:eb: 9f:73:0c:e1:18:9a:78:27:ed:84:7a:45:87:e7:7a: f6:c9:c8:c6:da:dd:25:97:a3:4e:25:22:1b:d4:85: 25:65:b3:e3:77:75:ec:f9:9c:3e:aa:3c:43:6c:22: 5e:c6:75:b5:40:e6:96:48:74:5b:7d:56:37:9a:2e: f9:ed:59:0c:e9:17:88:7c:e2:40:1b:f2:d4:60:cc: e8:30:da:80:4f:59:1a:98:a5:d5:55:d9:e5:51:7f: 16:39:c1:b6:2f:59:09:1c:d0:15:a4:16:5d:ff:35: 2f:b4:9b:23:74:0f:2c:60:d1:e1:de:db:09:c2:2b: 16:2d:98:8e:44:6d:30:ab:ed:1d:c3:75:59:ae:6b: 27:7c:cc:f6:3f:34:00:16:38:ae:6d:33:24:af:34: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7F:C6:E2:AC:D1:1B:CE:7E:60:DD:3D:78:58:33:29:95:2A:2A:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MH_G4qzRG85-YN09eFgzKZUqKpc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.112.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:5e:26:0f:b4:b0:c2:7a:80:16:92:d0:c9:ae:ff:0b:ec:38: e4:85:bf:34:9f:5c:3f:87:b8:9e:3b:ef:ec:50:47:fc:c3:26: 44:97:05:85:58:d5:24:81:21:ad:72:4a:01:71:b4:b9:cd:e5: 89:b7:71:3e:44:d8:d8:6e:54:b6:e4:60:d2:5e:77:ab:6f:52: 61:c1:dd:fe:67:f6:8e:87:3b:ca:df:02:e9:79:ff:8d:2b:e2: 12:b3:ba:82:37:43:59:36:cd:0a:1a:c6:48:c6:8f:10:00:22: 2d:fb:b6:aa:28:77:f7:44:30:5a:6e:f7:b9:17:a5:3f:cb:27: 41:bf:e4:b0:7d:a8:90:3b:cd:70:50:22:ee:f9:fa:cf:d0:21: 43:93:07:79:e1:48:b0:2a:20:63:a9:07:6f:05:60:a7:29:52: b2:60:2f:36:49:b0:08:8d:15:fc:61:b9:fb:b1:c3:c7:33:0c: 80:f5:d2:43:62:0d:a1:47:d7:79:e4:70:6b:e8:4e:69:c9:42: d0:3e:a1:f9:4f:3e:5b:58:6b:a6:3a:06:ca:4d:91:df:ae:8d: 10:49:9b:cc:56:e5:26:16:b8:e2:7d:a5:81:32:54:a2:e6:b2: e2:13:df:6f:03:c1:38:a2:91:f0:51:c0:6e:c7:9c:53:23:9f: f7:09:50:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMwN0ZDNkUyQUNEMTFC Q0U3RTYwREQzRDc4NTgzMzI5OTUyQTJBOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHVTGjkwrHw1+7a4HAu7ztcAu3vjsHYR92mPRZj6eYPFTAahYO SVFQkgIhc+WH3nmzT67Hzcy/7jMu1Dp2XB6RefshU2wW+AqZKk/NynDJ4zhPgPMD U6DPThJif3ZaxPOCKxzNZI7i659zDOEYmngn7YR6RYfnevbJyMba3SWXo04lIhvU hSVls+N3dez5nD6qPENsIl7GdbVA5pZIdFt9VjeaLvntWQzpF4h84kAb8tRgzOgw 2oBPWRqYpdVV2eVRfxY5wbYvWQkc0BWkFl3/NS+0myN0Dyxg0eHe2wnCKxYtmI5E bTCr7R3DdVmuayd8zPY/NAAWOK5tMySvNGEzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMH/G4qzRG85+YN09eFgzKZUqKpcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01IX0c0cXpSRzg1LVlOMDll Rmd6S1pVcUtwYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sHAwDQYJKoZIhvcNAQELBQADggEBADpeJg+0sMJ6gBaS0Mmu/wvsOOSFvzSfXD+H uJ477+xQR/zDJkSXBYVY1SSBIa1ySgFxtLnN5Ym3cT5E2NhuVLbkYNJed6tvUmHB 3f5n9o6HO8rfAul5/40r4hKzuoI3Q1k2zQoaxkjGjxAAIi37tqood/dEMFpu97kX pT/LJ0G/5LB9qJA7zXBQIu75+s/QIUOTB3nhSLAqIGOpB28FYKcpUrJgLzZJsAiN Ffxhufuxw8czDID10kNiDaFH13nkcGvoTmnJQtA+oflPPltYa6Y6BspNkd+ujRBJ m8xW5SYWuOJ9pYEyVKLmsuIT328DwTiikfBRwG7HnFMjn/cJUE8= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org