$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ND5GLBmMaZesfkWuBMtWs1WYIf0.roa File: ND5GLBmMaZesfkWuBMtWs1WYIf0.roa (raw, json) Hash identifier: BoQ083beJjZ/RGQG5ub57ER0cQyERTqnE0AoixpJzVQ= Subject key identifier: 34:3E:46:2C:19:8C:69:97:AC:7E:45:AE:04:CB:56:B3:55:98:21:FD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3052 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ND5GLBmMaZesfkWuBMtWs1WYIf0.roa Signing time: Mon 26 Aug 2024 05:29:21 +0000 ROA not before: Mon 26 Aug 2024 05:29:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12370 (0x3052) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=343E462C198C6997AC7E45AE04CB56B3559821FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:bc:ad:be:15:98:5b:92:49:99:5f:8b:22: d5:29:79:07:f0:75:96:49:f7:2c:8f:db:ef:08:8e: 71:96:e9:1c:67:7a:bf:cc:59:62:df:e4:88:4d:4e: bd:be:16:89:e0:21:bc:d9:00:33:6b:f2:24:f3:84: a9:e0:f7:04:38:7c:d9:94:01:29:2c:aa:b8:f4:50: ca:65:10:28:aa:82:4b:dc:9d:d4:08:41:59:54:62: 00:35:2b:e9:8a:2c:cd:04:b7:0a:48:f8:a0:9c:b4: e6:4b:c0:16:ee:45:c5:b4:23:b6:8f:65:f0:e8:97: 5f:e3:19:68:37:d7:0f:83:e4:3c:e0:c1:76:69:99: 0d:90:ae:38:5e:07:e9:de:a2:ac:1d:dd:6f:63:82: 48:c6:61:0e:03:ef:e2:f6:06:0b:14:55:49:63:12: d2:d9:b1:f9:86:4c:cb:89:77:7f:d8:2d:28:93:bd: be:9a:67:82:61:ef:33:3a:56:f9:2a:09:1f:51:2d: 8f:17:69:c4:45:a1:65:3f:1d:de:75:34:46:cc:08: 9b:3b:b9:46:b1:4e:89:9a:2d:71:a0:30:e3:30:5e: 9d:e3:ae:f6:ef:69:67:6b:df:28:39:d4:b5:66:92: 1d:83:38:86:47:57:9e:26:68:a4:b0:dc:75:43:9b: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3E:46:2C:19:8C:69:97:AC:7E:45:AE:04:CB:56:B3:55:98:21:FD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ND5GLBmMaZesfkWuBMtWs1WYIf0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.192.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:d2:2f:65:26:2a:b6:79:45:a5:0f:8f:6d:49:cf:e4:f2:9e: c7:bf:92:29:5e:11:1e:2e:49:85:9d:07:83:7f:85:e2:97:fb: dd:89:9e:1f:6a:89:c8:9b:5e:c5:2a:31:93:7e:48:90:c5:ac: 4e:88:4f:64:83:e6:c6:f4:09:ce:d1:81:f6:5a:4e:35:b0:e1: 70:9b:c5:0d:e8:f7:91:12:12:b7:c4:d8:50:f0:6c:c7:89:83: 9a:f7:ba:ed:35:e9:75:da:63:bb:79:88:52:1e:4b:49:6c:81: 9e:ff:0b:72:d8:d9:6f:5a:b4:82:82:0d:58:a6:b9:7a:d8:6a: 1b:4c:ae:af:6d:0e:27:22:5e:a5:19:6b:1b:aa:76:f3:1c:6f: 5f:94:48:8c:a1:84:1a:cf:04:92:b8:1c:b0:a5:81:64:42:02: 1b:21:1c:ae:0b:f3:e2:5c:6f:3e:a5:c9:cb:84:35:a7:3f:dc: 21:b9:4d:f8:ec:58:21:a8:0d:5f:f4:d1:00:da:c2:0c:f5:ab: ab:b9:7d:38:06:33:9d:b2:a8:59:62:7b:30:90:16:d7:60:6d: 29:d1:2b:08:bb:88:3c:c5:11:2a:58:b6:1f:34:46:39:b2:34: 06:34:c1:08:c2:06:80:e3:3b:77:54:85:d7:14:a5:b6:0d:97: a5:26:2c:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM0M0U0NjJDMTk4QzY5 OTdBQzdFNDVBRTA0Q0I1NkIzNTU5ODIxRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOfrytvhWYW5JJmV+LItUpeQfwdZZJ9yyP2+8IjnGW6Rxner/M WWLf5IhNTr2+FongIbzZADNr8iTzhKng9wQ4fNmUASksqrj0UMplECiqgkvcndQI QVlUYgA1K+mKLM0EtwpI+KCctOZLwBbuRcW0I7aPZfDol1/jGWg31w+D5DzgwXZp mQ2QrjheB+neoqwd3W9jgkjGYQ4D7+L2BgsUVUljEtLZsfmGTMuJd3/YLSiTvb6a Z4Jh7zM6VvkqCR9RLY8XacRFoWU/Hd51NEbMCJs7uUaxTomaLXGgMOMwXp3jrvbv aWdr3yg51LVmkh2DOIZHV54maKSw3HVDm4ZfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUND5GLBmMaZesfkWuBMtWs1WYIf0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05ENUdMQm1NYVplc2ZrV3VC TXRXczFXWUlmMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sMAwDQYJKoZIhvcNAQELBQADggEBAE3SL2UmKrZ5RaUPj21Jz+Tynse/kileER4u SYWdB4N/heKX+92Jnh9qicibXsUqMZN+SJDFrE6IT2SD5sb0Cc7RgfZaTjWw4XCb xQ3o95ESErfE2FDwbMeJg5r3uu016XXaY7t5iFIeS0lsgZ7/C3LY2W9atIKCDVim uXrYahtMrq9tDiciXqUZaxuqdvMcb1+USIyhhBrPBJK4HLClgWRCAhshHK4L8+Jc bz6lycuENac/3CG5TfjsWCGoDV/00QDawgz1q6u5fTgGM52yqFliezCQFtdgbSnR Kwi7iDzFESpYth80RjmyNAY0wQjCBoDjO3dUhdcUpbYNl6UmLAI= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org