$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NV49cIxujEYR5bftzQ4BH4UZG5Q.roa File: NV49cIxujEYR5bftzQ4BH4UZG5Q.roa (raw, json) Hash identifier: 1/15PUA6sPAh1iV2RG1hMyeL9vExEZhE5OqBNnG0eqc= Subject key identifier: 35:5E:3D:70:8C:6E:8C:46:11:E5:B7:ED:CD:0E:01:1F:85:19:1B:94 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32D5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NV49cIxujEYR5bftzQ4BH4UZG5Q.roa Signing time: Mon 26 Aug 2024 05:32:04 +0000 ROA not before: Mon 26 Aug 2024 05:32:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13013 (0x32d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=355E3D708C6E8C4611E5B7EDCD0E011F85191B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:c4:a8:77:dd:3b:bc:13:a4:b4:23:7c:15: 88:9b:44:f9:28:65:b8:51:57:69:03:08:5d:5f:65: c6:8b:72:64:93:f5:94:eb:9d:b4:dd:95:b4:c8:7c: a5:bf:e7:56:4c:b5:2f:c2:21:f1:4d:a3:bf:6a:3d: ee:44:23:00:17:11:83:9e:a3:45:b7:79:52:22:97: 0f:91:ac:52:7c:62:c1:60:e8:08:34:42:82:eb:6b: 1e:95:3a:54:92:2b:09:cd:f6:80:59:49:f2:a1:e3: 7b:17:b8:61:4a:24:f4:15:64:e2:7e:db:59:65:97: 05:d0:5e:98:7b:23:06:4e:71:d6:d7:e5:41:ad:e5: 1a:82:41:97:97:17:af:87:66:33:d5:ff:28:4b:96: 5f:50:64:7e:d8:99:ec:6b:dd:95:52:d9:57:12:73: 9d:eb:ba:a5:fb:ec:cf:f3:3f:73:bf:61:02:46:0c: 04:c4:e9:dc:64:20:36:54:1e:3b:e6:e5:07:e5:a9: 4b:5e:15:58:ab:47:84:a8:91:71:c6:a4:57:7c:54: ae:f3:96:d6:a1:ae:49:25:e8:8a:f9:45:08:66:7b: 4c:5b:55:a4:68:e4:46:02:24:58:44:59:6a:35:ff: 36:c4:55:89:d4:df:02:c2:9a:c7:3d:d7:60:11:8a: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5E:3D:70:8C:6E:8C:46:11:E5:B7:ED:CD:0E:01:1F:85:19:1B:94 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NV49cIxujEYR5bftzQ4BH4UZG5Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.236.0/23 Signature Algorithm: sha256WithRSAEncryption 36:86:5a:65:0a:89:ce:25:f1:41:e0:90:a1:bc:4d:e0:6d:0d: 33:55:e0:2a:98:53:08:83:73:8e:c5:eb:7f:97:7b:d0:e6:21: d1:56:e0:43:4d:df:2c:e4:06:39:68:58:eb:b0:ca:0a:21:37: 5d:d3:22:3c:39:db:4e:72:d7:47:9c:c6:e4:ab:77:a4:c6:2d: 15:4b:fd:a5:2a:8c:96:6a:33:61:52:88:a9:63:64:6e:0a:0a: a5:f2:e8:96:10:c5:df:ec:1d:fd:6b:8a:b5:12:21:ff:5b:90: 9c:1f:2a:b4:8e:a2:16:cd:65:0b:cd:9b:0a:f3:b0:b8:e8:aa: 4a:27:8d:ad:fd:17:be:52:67:c2:09:e8:a2:39:8d:a3:fc:90: 5a:d0:81:7c:b6:e3:39:5a:18:cb:df:ee:e5:27:45:59:fd:81: ac:3e:f0:51:ad:0d:4b:ff:d4:57:25:1a:1e:a4:f2:f9:c9:c5: 5b:a1:83:a8:42:b3:8e:e6:a6:a8:08:7e:bc:b4:72:21:85:95: 47:9e:a3:b6:fd:f7:01:17:5c:d7:51:a3:37:ed:37:9d:5d:3e: ed:92:a6:ee:3b:b0:52:02:46:7d:74:a9:ea:0d:41:dd:3c:f4: b6:18:28:94:e9:14:1f:1d:ad:dd:16:f5:1a:0a:13:17:3e:03: 6f:f9:16:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1NUUzRDcwOEM2RThD NDYxMUU1QjdFRENEMEUwMTFGODUxOTFCOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC6cSod907vBOktCN8FYibRPkoZbhRV2kDCF1fZcaLcmST9ZTr nbTdlbTIfKW/51ZMtS/CIfFNo79qPe5EIwAXEYOeo0W3eVIilw+RrFJ8YsFg6Ag0 QoLrax6VOlSSKwnN9oBZSfKh43sXuGFKJPQVZOJ+21lllwXQXph7IwZOcdbX5UGt 5RqCQZeXF6+HZjPV/yhLll9QZH7Ymexr3ZVS2VcSc53ruqX77M/zP3O/YQJGDATE 6dxkIDZUHjvm5QflqUteFVirR4SokXHGpFd8VK7zltahrkkl6Ir5RQhme0xbVaRo 5EYCJFhEWWo1/zbEVYnU3wLCmsc912ARir/bAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNV49cIxujEYR5bftzQ4BH4UZG5QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05WNDljSXh1akVZUjViZnR6 UTRCSDRVWkc1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sewwDQYJKoZIhvcNAQELBQADggEBADaGWmUKic4l8UHgkKG8TeBtDTNV4CqYUwiD c47F63+Xe9DmIdFW4ENN3yzkBjloWOuwygohN13TIjw5205y10ecxuSrd6TGLRVL /aUqjJZqM2FSiKljZG4KCqXy6JYQxd/sHf1rirUSIf9bkJwfKrSOohbNZQvNmwrz sLjoqkonja39F75SZ8IJ6KI5jaP8kFrQgXy24zlaGMvf7uUnRVn9gaw+8FGtDUv/ 1FclGh6k8vnJxVuhg6hCs47mpqgIfry0ciGFlUeeo7b99wEXXNdRozftN51dPu2S pu47sFICRn10qeoNQd089LYYKJTpFB8drd0W9RoKExc+A2/5Fg0= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org