$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rd2OY4lI4RYvQmpHvJYyuOLfHkw.roa File: Rd2OY4lI4RYvQmpHvJYyuOLfHkw.roa (raw, json) Hash identifier: yC2BKQ6patc6pSLvDTmKvjjcPHbE615mDB3W21Urutg= Subject key identifier: 45:DD:8E:63:89:48:E1:16:2F:42:6A:47:BC:96:32:B8:E2:DF:1E:4C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3259 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rd2OY4lI4RYvQmpHvJYyuOLfHkw.roa Signing time: Mon 26 Aug 2024 05:31:34 +0000 ROA not before: Mon 26 Aug 2024 05:31:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12889 (0x3259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=45DD8E638948E1162F426A47BC9632B8E2DF1E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:31:9d:3a:bf:8f:60:69:a2:a0:5e:91:60: 74:58:bf:a9:99:3b:22:20:6d:47:bf:5d:31:16:ce: 3d:80:11:46:d6:79:6e:73:55:15:fc:34:62:9d:d0: 3b:1b:6c:a4:95:00:2b:e1:ce:9a:33:00:f6:90:ea: c0:f9:5e:88:15:fa:7f:13:63:ec:de:ed:f5:1f:0d: e5:df:c2:16:5c:98:68:f5:1e:34:44:5f:12:78:6f: f1:81:d0:aa:1d:2e:62:fa:11:0a:cf:1b:3e:3e:ce: 47:9b:b7:a9:2d:92:5e:54:15:b1:84:dd:e6:de:7e: 82:20:e3:52:64:48:45:04:63:80:22:dd:24:f2:27: 25:5a:c7:a0:c9:c3:b0:f2:4b:89:22:53:d7:06:4b: fe:40:04:f8:5f:8a:f3:a5:8b:47:d8:4e:da:40:20: ef:1a:60:23:12:f6:dc:ea:dc:27:0b:1c:e3:b7:43: 6a:be:8c:f3:93:26:8b:99:67:7a:52:a7:0b:eb:54: 04:b7:0b:7c:d5:c7:bb:cd:bb:7f:20:2b:df:3f:d1: c6:4d:e8:a5:e0:e2:58:ea:16:70:aa:c1:eb:dc:66: 91:ee:3c:76:46:71:b5:17:0c:c9:bd:c1:bf:35:39: 38:49:fe:8b:56:c6:ce:28:10:24:c7:d8:45:e3:3e: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DD:8E:63:89:48:E1:16:2F:42:6A:47:BC:96:32:B8:E2:DF:1E:4C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rd2OY4lI4RYvQmpHvJYyuOLfHkw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.156.0/22 Signature Algorithm: sha256WithRSAEncryption 85:41:55:a5:1f:70:66:7f:06:98:6a:aa:2f:54:c0:59:f3:0f: 28:33:3f:94:5c:65:2a:f6:31:ca:fb:d2:52:43:f8:28:76:8f: fa:e9:65:32:7d:74:cd:3a:24:5b:d7:09:f8:b6:79:0f:6a:0e: d5:34:ee:70:d0:1b:e9:a2:64:0a:36:12:e1:fd:71:02:44:3f: d2:66:1f:3c:de:ae:a6:b8:5e:df:de:1b:02:4f:49:07:d9:39: 1c:0f:e8:24:d7:05:fd:6f:38:83:a4:32:cd:c3:e7:40:ab:ce: 6b:32:ad:96:43:ec:30:72:c1:8b:3d:b2:eb:22:f8:0a:f8:2b: ae:f9:ff:d0:33:f7:41:37:b9:b3:bb:3c:97:b3:06:a2:e9:0c: 7b:d4:3b:02:12:71:bc:af:98:3f:12:6e:e5:b7:ba:67:47:a7: e8:f0:33:06:21:a7:ae:a0:e0:c3:f7:d3:2d:1e:a7:20:ae:59: 1a:ec:2f:c6:0e:9e:06:b4:f6:bf:fd:89:7f:32:54:c9:eb:1c: 7a:69:84:d7:c1:b8:77:21:53:60:53:5c:9c:0e:79:e6:55:97: b3:92:43:c6:5e:44:9e:d9:3d:96:44:bb:14:0e:f2:50:26:ea: 31:eb:8a:85:2e:d4:50:b4:64:3c:d6:91:b2:fa:2b:8c:d6:a1: e2:bf:eb:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1REQ4RTYzODk0OEUx MTYyRjQyNkE0N0JDOTYzMkI4RTJERjFFNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVazGdOr+PYGmioF6RYHRYv6mZOyIgbUe/XTEWzj2AEUbWeW5z VRX8NGKd0DsbbKSVACvhzpozAPaQ6sD5XogV+n8TY+ze7fUfDeXfwhZcmGj1HjRE XxJ4b/GB0KodLmL6EQrPGz4+zkebt6ktkl5UFbGE3ebefoIg41JkSEUEY4Ai3STy JyVax6DJw7DyS4kiU9cGS/5ABPhfivOli0fYTtpAIO8aYCMS9tzq3CcLHOO3Q2q+ jPOTJouZZ3pSpwvrVAS3C3zVx7vNu38gK98/0cZN6KXg4ljqFnCqwevcZpHuPHZG cbUXDMm9wb81OThJ/otWxs4oECTH2EXjPpKxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURd2OY4lI4RYvQmpHvJYyuOLfHkwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JkMk9ZNGxJNFJZdlFtcEh2 Sll5dU9MZkhrdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sJwwDQYJKoZIhvcNAQELBQADggEBAIVBVaUfcGZ/Bphqqi9UwFnzDygzP5RcZSr2 Mcr70lJD+Ch2j/rpZTJ9dM06JFvXCfi2eQ9qDtU07nDQG+miZAo2EuH9cQJEP9Jm Hzzerqa4Xt/eGwJPSQfZORwP6CTXBf1vOIOkMs3D50CrzmsyrZZD7DBywYs9susi +Ar4K675/9Az90E3ubO7PJezBqLpDHvUOwIScbyvmD8SbuW3umdHp+jwMwYhp66g 4MP30y0epyCuWRrsL8YOnga09r/9iX8yVMnrHHpphNfBuHchU2BTXJwOeeZVl7OS Q8ZeRJ7ZPZZEuxQO8lAm6jHrioUu1FC0ZDzWkbL6K4zWoeK/6xE= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org