$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NTs8qE5Q_2jsr2w5h9e19Iz74fY.roa File: NTs8qE5Q_2jsr2w5h9e19Iz74fY.roa (raw, json) Hash identifier: Denirt22VzfDuHdFZ7Bomy74CggbctIO36ZfW3gx5Us= Subject key identifier: 35:3B:3C:A8:4E:50:FF:68:EC:AF:6C:39:87:D7:B5:F4:8C:FB:E1:F6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27C7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NTs8qE5Q_2jsr2w5h9e19Iz74fY.roa Signing time: Fri 01 Sep 2023 10:04:32 +0000 ROA not before: Fri 01 Sep 2023 10:04:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10183 (0x27c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=353B3CA84E50FF68ECAF6C3987D7B5F48CFBE1F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:e6:79:b1:66:ec:b0:1a:3a:8f:19:23:df: 64:e6:1f:90:ef:e1:fb:9b:6e:4f:33:26:f7:36:2c: 69:ca:69:27:33:a6:89:c4:3f:60:3f:97:ba:40:dd: 2e:51:93:66:1e:fd:a5:19:55:03:7c:c2:50:eb:88: 1c:f6:46:4f:c9:48:3c:dc:96:d6:1a:20:b3:3d:6d: 7e:f8:cd:a7:e0:03:78:2e:bc:55:a1:ac:09:15:67: d7:48:5b:5c:c0:f3:4f:f4:b8:96:bc:5f:b7:92:2b: 70:35:09:72:d4:77:0a:72:05:5a:83:9e:f5:fd:0c: 03:76:25:e0:9b:e4:8a:28:dc:50:f3:c1:92:c8:02: 52:61:b6:f9:b7:1d:14:a2:62:32:e7:50:d1:9f:59: 75:4d:da:45:4a:03:3d:23:dc:b2:63:09:5a:b0:e4: 17:c9:31:bf:a2:15:f2:a6:b9:fb:fa:2f:17:de:2a: 82:07:a9:f0:1f:cc:ab:a7:c7:cf:c6:37:bb:dd:6e: 6b:45:b7:58:79:84:a7:8f:8b:05:ae:bf:aa:27:76: c5:c6:60:6b:29:62:7b:1e:f0:59:0c:97:b4:e4:5b: 6c:a5:fa:e9:96:2f:1e:8f:74:e0:f6:a0:d6:58:ee: f7:fb:73:8c:3c:2c:73:5c:56:f9:64:a4:e6:9f:52: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3B:3C:A8:4E:50:FF:68:EC:AF:6C:39:87:D7:B5:F4:8C:FB:E1:F6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NTs8qE5Q_2jsr2w5h9e19Iz74fY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.216.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:c7:53:ce:fa:b2:f7:35:10:a3:c9:45:22:5d:a1:a9:50:ad: 58:82:4b:6b:db:e1:2e:06:57:1e:6d:59:5b:3c:c7:0b:3f:b0: 43:09:38:ef:a6:45:4a:4d:1e:11:68:e6:e0:4d:52:16:70:0d: 15:e2:e2:3c:00:6a:0c:ed:66:fc:e1:db:ed:4b:dd:0c:dd:3e: e4:b6:45:6a:8a:d9:5e:d1:39:51:53:85:04:02:5f:44:6e:c0: c6:11:21:3d:57:e1:6f:2e:e9:2d:d3:b5:63:a1:7e:7b:cb:61: f1:21:c3:7e:04:14:9e:d1:67:51:7b:2e:66:b6:14:e1:8a:d1: 69:1c:90:13:3c:fd:dd:7c:e8:20:ac:c4:58:3d:1b:b4:c4:3b: 5a:2e:cc:37:1e:db:d4:63:21:f7:65:70:44:26:15:03:d5:09: 3c:60:6a:9e:21:f6:44:49:28:2e:4d:60:c2:fb:1a:4f:88:43: 1e:e0:37:10:b3:6f:56:ea:c8:72:47:c2:e7:3d:5c:a7:15:c0: ef:49:5b:b6:ca:7b:0a:4a:42:6c:d2:d0:74:f5:b4:3d:95:b5: a5:f3:f9:99:08:d3:50:d5:55:c7:99:48:4d:a8:6f:d2:af:ae: 69:9b:90:0b:af:22:57:f6:25:c9:e2:9b:3f:f3:65:55:f9:27: 2d:2b:ea:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM1M0IzQ0E4NEU1MEZG NjhFQ0FGNkMzOTg3RDdCNUY0OENGQkUxRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGsOZ5sWbssBo6jxkj32TmH5Dv4fubbk8zJvc2LGnKaSczponE P2A/l7pA3S5Rk2Ye/aUZVQN8wlDriBz2Rk/JSDzcltYaILM9bX74zafgA3guvFWh rAkVZ9dIW1zA80/0uJa8X7eSK3A1CXLUdwpyBVqDnvX9DAN2JeCb5Ioo3FDzwZLI AlJhtvm3HRSiYjLnUNGfWXVN2kVKAz0j3LJjCVqw5BfJMb+iFfKmufv6LxfeKoIH qfAfzKunx8/GN7vdbmtFt1h5hKePiwWuv6ondsXGYGspYnse8FkMl7TkW2yl+umW Lx6PdOD2oNZY7vf7c4w8LHNcVvlkpOafUpjNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNTs8qE5Q/2jsr2w5h9e19Iz74fYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05UczhxRTVRXzJqc3IydzVo OWUxOUl6NzRmWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sdgwDQYJKoZIhvcNAQELBQADggEBAB/HU876svc1EKPJRSJdoalQrViCS2vb4S4G Vx5tWVs8xws/sEMJOO+mRUpNHhFo5uBNUhZwDRXi4jwAagztZvzh2+1L3QzdPuS2 RWqK2V7ROVFThQQCX0RuwMYRIT1X4W8u6S3TtWOhfnvLYfEhw34EFJ7RZ1F7Lma2 FOGK0WkckBM8/d186CCsxFg9G7TEO1ouzDce29RjIfdlcEQmFQPVCTxgap4h9kRJ KC5NYML7Gk+IQx7gNxCzb1bqyHJHwuc9XKcVwO9JW7bKewpKQmzS0HT1tD2VtaXz +ZkI01DVVceZSE2ob9KvrmmbkAuvIlf2Jcnimz/zZVX5Jy0r6uc= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:56 2024 by rpki-client on console-ams.rpki-client.org