$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/POCLCXOhGDXRilL6E83usH2k5-g.roa File: POCLCXOhGDXRilL6E83usH2k5-g.roa (raw, json) Hash identifier: 2osWX66+A7pvO5orkMiZG/eXF/HF2YZQaVTnksNLUcA= Subject key identifier: 3C:E0:8B:09:73:A1:18:35:D1:8A:52:FA:13:CD:EE:B0:7D:A4:E7:E8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3177 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/POCLCXOhGDXRilL6E83usH2k5-g.roa Signing time: Mon 26 Aug 2024 05:30:29 +0000 ROA not before: Mon 26 Aug 2024 05:30:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12663 (0x3177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3CE08B0973A11835D18A52FA13CDEEB07DA4E7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ac:b5:7f:46:56:88:d1:c7:8d:06:43:7f:50: 66:33:27:7a:65:f2:84:89:2b:4f:cf:3a:6a:a2:30: 58:f5:eb:76:8e:bc:d9:66:2b:e7:53:f7:51:55:61: 0c:34:33:7c:7f:d9:5a:d7:1a:5a:3c:3e:a0:da:c1: 24:06:eb:50:9c:79:63:dd:2a:af:30:63:58:33:4c: 4f:bb:0f:cd:ce:f4:a1:d7:d8:bd:9b:c4:b7:21:88: bd:8d:c6:93:6a:5f:40:88:35:8b:84:0d:df:10:4d: 08:02:96:5a:21:7f:d7:d2:e7:bf:e8:72:15:df:64: bb:e6:c5:72:e3:22:c1:4b:82:76:b8:28:01:ce:ca: 1c:08:1e:b2:61:26:38:d2:df:ee:66:01:51:cb:72: 6b:be:0e:19:8f:6f:50:7f:4c:f9:fc:af:8f:a5:65: 85:3e:4f:01:56:8a:a8:10:b7:7e:8e:4c:37:00:10: ff:71:29:52:bd:cf:13:22:5f:7b:6c:3d:1a:2c:e8: c4:ae:4f:56:b2:7e:e1:3c:69:7f:fc:68:86:87:e5: 00:33:73:b7:94:29:2e:50:65:cf:03:35:66:a0:e9: 54:5d:9a:95:ed:78:88:56:38:bf:91:d6:f3:a2:10: 5b:29:2b:14:06:8f:51:78:f8:20:78:37:57:3a:24: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E0:8B:09:73:A1:18:35:D1:8A:52:FA:13:CD:EE:B0:7D:A4:E7:E8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/POCLCXOhGDXRilL6E83usH2k5-g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.4.0/22 Signature Algorithm: sha256WithRSAEncryption 64:ac:80:21:7e:39:42:af:66:62:d9:eb:f2:1f:01:d4:85:f8: df:29:45:ba:94:41:da:65:bc:12:a3:40:b2:de:2f:e7:da:21: d7:38:1a:65:35:90:2d:ec:7c:49:32:83:1a:75:58:6e:e8:68: bc:eb:e9:be:4c:b6:19:32:dd:aa:f6:7d:27:cd:6f:51:01:58: 10:73:2b:50:b2:df:92:55:b6:d8:ce:65:6d:c1:ec:66:cd:03: 6e:41:e8:89:78:eb:9e:1b:f1:a6:b8:13:13:62:ca:1b:88:65: 70:e5:f9:6a:ad:b9:52:8c:fb:c0:c3:71:3e:6a:2c:5e:1b:74: 49:8b:9d:24:13:0d:02:9e:1a:9d:30:b9:76:ee:c7:c9:c8:34: 78:c0:82:d7:1c:40:2e:fa:8b:8c:3b:2a:e7:8d:9c:e2:5d:09: d5:a5:ec:0e:74:5d:96:d4:25:d8:22:88:73:9e:c8:eb:7a:76: a1:65:9e:25:3c:ea:c3:c9:d2:5d:e3:b2:65:85:85:db:ea:84: 5e:57:2e:b5:fd:f0:81:bc:12:08:48:13:6f:89:cc:16:75:3e: 84:bf:e1:00:51:fe:75:00:fb:1c:e5:f9:a6:df:c0:7f:eb:fe: 13:0b:4e:15:a3:f2:91:aa:eb:6d:51:18:df:2c:a7:eb:fd:89: 07:84:2a:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDRTA4QjA5NzNBMTE4 MzVEMThBNTJGQTEzQ0RFRUIwN0RBNEU3RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnrLV/RlaI0ceNBkN/UGYzJ3pl8oSJK0/POmqiMFj163aOvNlm K+dT91FVYQw0M3x/2VrXGlo8PqDawSQG61CceWPdKq8wY1gzTE+7D83O9KHX2L2b xLchiL2NxpNqX0CINYuEDd8QTQgCllohf9fS57/ochXfZLvmxXLjIsFLgna4KAHO yhwIHrJhJjjS3+5mAVHLcmu+DhmPb1B/TPn8r4+lZYU+TwFWiqgQt36OTDcAEP9x KVK9zxMiX3tsPRos6MSuT1ayfuE8aX/8aIaH5QAzc7eUKS5QZc8DNWag6VRdmpXt eIhWOL+R1vOiEFspKxQGj1F4+CB4N1c6JFKjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPOCLCXOhGDXRilL6E83usH2k5+gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BPQ0xDWE9oR0RYUmlsTDZF ODN1c0gyazUtZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sAQwDQYJKoZIhvcNAQELBQADggEBAGSsgCF+OUKvZmLZ6/IfAdSF+N8pRbqUQdpl vBKjQLLeL+faIdc4GmU1kC3sfEkygxp1WG7oaLzr6b5Mthky3ar2fSfNb1EBWBBz K1Cy35JVttjOZW3B7GbNA25B6Il4654b8aa4ExNiyhuIZXDl+WqtuVKM+8DDcT5q LF4bdEmLnSQTDQKeGp0wuXbux8nINHjAgtccQC76i4w7KueNnOJdCdWl7A50XZbU JdgiiHOeyOt6dqFlniU86sPJ0l3jsmWFhdvqhF5XLrX98IG8EghIE2+JzBZ1PoS/ 4QBR/nUA+xzl+abfwH/r/hMLThWj8pGq621RGN8sp+v9iQeEKks= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org