$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mz6uh7uHcoFPtLmhe1Pt4c_2nQg.roa File: Mz6uh7uHcoFPtLmhe1Pt4c_2nQg.roa (raw, json) Hash identifier: FrMScuJzvZUqPb+9UjCPqkkC3GWK9YkjACAUo83c8uw= Subject key identifier: 33:3E:AE:87:BB:87:72:81:4F:B4:B9:A1:7B:53:ED:E1:CF:F6:9D:08 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3029 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mz6uh7uHcoFPtLmhe1Pt4c_2nQg.roa Signing time: Mon 26 Aug 2024 05:29:12 +0000 ROA not before: Mon 26 Aug 2024 05:29:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12329 (0x3029) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=333EAE87BB8772814FB4B9A17B53EDE1CFF69D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:28:27:89:3f:b7:09:48:c2:95:4b:17:68: 47:01:3c:e8:6e:b1:c2:f6:b9:98:40:63:38:4a:5c: 7c:6f:fc:10:a2:3f:64:9d:f9:cb:44:b5:01:cb:de: 94:36:84:6c:d5:7c:a1:26:00:93:25:4f:7c:e9:71: 43:c6:99:e2:78:41:be:26:a9:22:f3:96:10:cb:88: 01:1c:c1:45:18:88:36:28:ec:c8:5e:dd:6a:31:73: 38:1f:86:46:9a:18:0b:26:8a:6c:25:84:2e:1c:e6: 21:3a:c4:c8:fb:e9:df:5c:dc:80:29:d1:87:0e:9d: 64:26:c7:3f:56:bd:0a:18:55:77:18:9e:0c:c8:41: 41:30:ed:40:04:87:ee:06:df:64:5b:93:5e:6f:d6: c9:ca:94:22:7b:a5:9c:3f:3c:6d:16:1f:44:74:00: 9a:d7:0d:22:74:47:12:99:98:54:fa:09:bb:76:ad: d5:c6:9e:18:a9:b7:b2:41:b2:73:09:fb:65:d0:63: 01:6d:39:87:27:58:2b:dc:90:1b:3c:12:5c:71:f9: fe:52:e6:57:00:42:0c:67:eb:1c:22:8c:5b:df:81: ca:27:03:95:88:8b:f2:56:6f:31:0c:1c:aa:67:33: 09:60:d0:54:3d:c5:78:d8:c5:eb:6a:6f:95:6c:b7: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:AE:87:BB:87:72:81:4F:B4:B9:A1:7B:53:ED:E1:CF:F6:9D:08 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mz6uh7uHcoFPtLmhe1Pt4c_2nQg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.132.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:fe:22:28:96:99:48:06:00:19:41:94:1e:f8:49:0d:a7:48: 42:c9:3e:82:8f:f9:77:86:d5:09:4a:7c:71:6d:b1:f5:43:6a: 9c:00:dd:bc:60:67:ee:0e:83:e2:29:f9:35:7b:19:ba:e7:83: e9:56:ad:ac:08:ca:92:07:d1:aa:a1:f0:32:f1:c0:4f:bc:c4: bf:e4:8b:a9:cd:c3:70:c5:8d:6f:35:be:36:f5:4e:bd:9b:a1: a9:4c:eb:eb:7c:02:34:55:dc:dc:86:6a:4e:b0:38:01:c4:f4: 4f:bc:27:66:89:3b:ac:ca:96:2d:de:1c:43:05:ed:03:09:a0: 08:da:8f:de:fe:1d:63:6d:f0:5e:0d:79:7e:80:ff:3a:a2:06: ff:6d:ad:97:27:01:ad:04:64:f0:84:dd:93:43:fc:f6:a2:cb: 4c:92:7e:8c:34:7a:9b:d9:1d:bd:98:71:c9:e3:f2:85:ea:a5: d9:5b:fc:05:e1:8f:39:54:1d:54:d5:7e:3e:89:1a:be:e7:d5: 46:be:2a:fb:41:b4:9a:1a:20:fa:57:95:fa:6b:d1:a0:f8:ce: 53:4f:a2:8b:ab:4f:79:8e:76:1b:fc:cd:6a:98:5b:8f:fb:30: a1:d7:4f:81:ee:2b:42:71:5b:df:b8:3f:64:7b:df:f6:c0:8f: 4d:17:58:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzM0VBRTg3QkI4Nzcy ODE0RkI0QjlBMTdCNTNFREUxQ0ZGNjlEMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+5igniT+3CUjClUsXaEcBPOhuscL2uZhAYzhKXHxv/BCiP2Sd +ctEtQHL3pQ2hGzVfKEmAJMlT3zpcUPGmeJ4Qb4mqSLzlhDLiAEcwUUYiDYo7Mhe 3WoxczgfhkaaGAsmimwlhC4c5iE6xMj76d9c3IAp0YcOnWQmxz9WvQoYVXcYngzI QUEw7UAEh+4G32Rbk15v1snKlCJ7pZw/PG0WH0R0AJrXDSJ0RxKZmFT6Cbt2rdXG nhipt7JBsnMJ+2XQYwFtOYcnWCvckBs8Elxx+f5S5lcAQgxn6xwijFvfgconA5WI i/JWbzEMHKpnMwlg0FQ9xXjYxetqb5Vst4HTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMz6uh7uHcoFPtLmhe1Pt4c/2nQgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL016NnVoN3VIY29GUHRMbWhl MVB0NGNfMm5RZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sYQwDQYJKoZIhvcNAQELBQADggEBADr+IiiWmUgGABlBlB74SQ2nSELJPoKP+XeG 1QlKfHFtsfVDapwA3bxgZ+4Og+Ip+TV7Gbrng+lWrawIypIH0aqh8DLxwE+8xL/k i6nNw3DFjW81vjb1Tr2boalM6+t8AjRV3NyGak6wOAHE9E+8J2aJO6zKli3eHEMF 7QMJoAjaj97+HWNt8F4NeX6A/zqiBv9trZcnAa0EZPCE3ZND/Paiy0ySfow0epvZ Hb2Yccnj8oXqpdlb/AXhjzlUHVTVfj6JGr7n1Ua+KvtBtJoaIPpXlfpr0aD4zlNP oourT3mOdhv8zWqYW4/7MKHXT4HuK0JxW9+4P2R73/bAj00XWKE= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org