$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sx9cPft5DcON_EzdFyF4SEMU_KE.roa File: Sx9cPft5DcON_EzdFyF4SEMU_KE.roa (raw, json) Hash identifier: zmx5Na3iReCIqC6YIJLsIu+qO+lpjLdXstIXD5/AzDI= Subject key identifier: 4B:1F:5C:3D:FB:79:0D:C3:8D:FC:4C:DD:17:21:78:48:43:14:FC:A1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30CB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sx9cPft5DcON_EzdFyF4SEMU_KE.roa Signing time: Mon 26 Aug 2024 05:29:50 +0000 ROA not before: Mon 26 Aug 2024 05:29:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12491 (0x30cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4B1F5C3DFB790DC38DFC4CDD172178484314FCA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:0f:c3:ef:e3:b7:45:42:ce:0b:9f:9f:fc: 73:92:85:9e:03:4e:c8:48:e8:a5:50:89:9b:95:bf: 54:13:d7:c1:74:a1:fa:48:6a:ec:36:37:69:a2:37: 18:98:6b:59:19:fe:ad:58:5c:eb:05:7b:d7:60:6f: e9:19:cf:af:53:5d:49:39:ce:a0:87:9b:4a:f7:b8: a9:11:8e:d7:cd:bb:cd:51:f3:16:db:2d:64:93:b1: a9:0d:d2:64:4c:06:8c:ff:98:f7:c7:16:34:da:d7: c9:ee:db:1b:3e:1e:64:3d:53:40:90:76:1f:e2:fc: 83:2b:11:31:55:71:ef:a2:9c:f0:49:90:3d:34:bc: 3d:f5:e8:84:30:92:47:08:a4:c5:55:af:ea:f2:b7: d1:77:88:c9:81:04:46:06:65:8e:d3:25:ac:89:2c: 96:43:5e:c5:5c:b9:c5:f8:ba:8c:b9:6a:bb:6b:ef: 0e:02:17:c8:06:9a:14:5f:07:ed:cb:0a:e9:81:96: da:45:c6:50:6b:ea:ac:66:c7:15:9e:f0:98:ae:b7: 64:97:e3:fc:50:b9:41:de:ff:10:d8:0f:d1:19:06: 84:11:3a:0c:d7:7f:87:36:a9:e0:1a:a9:06:8d:f5: b3:c2:ad:ea:61:fc:f0:04:9d:77:ea:51:2f:18:fe: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1F:5C:3D:FB:79:0D:C3:8D:FC:4C:DD:17:21:78:48:43:14:FC:A1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sx9cPft5DcON_EzdFyF4SEMU_KE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.192.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:7e:9d:9f:43:a0:a6:3a:9b:83:4f:4c:c8:69:f1:8a:56:23: 3b:79:db:7d:31:8e:bf:74:3f:3d:ca:4c:82:f6:f4:a2:b7:2a: b3:02:f8:d5:25:f2:ee:41:26:26:c6:c5:36:a6:43:91:a4:a5: d9:8a:c8:49:c7:f0:43:86:c9:25:3b:ac:6a:43:a8:16:ea:83: 75:bc:c6:89:ee:bc:50:69:01:6f:b8:7b:d3:d0:09:6e:05:ea: b6:e4:3f:96:bb:e3:bf:e9:01:16:54:5d:c5:3b:2b:89:0a:a8: d3:42:e6:f3:bb:2c:fb:2d:96:20:d6:1f:e6:cc:1f:8d:77:a5: ce:0e:eb:18:60:ed:d4:c0:81:9a:21:2f:8b:fc:1a:a3:09:c7: e6:39:e5:56:e0:75:e8:37:3c:e2:f8:d3:4c:77:9a:09:d7:fd: 4e:a4:89:34:5f:ee:cf:a8:c7:a2:83:90:82:78:7e:c0:c7:2e: a2:7b:38:1b:52:97:f7:5c:d1:af:c8:94:08:0f:77:c9:b9:b2: ea:60:f5:03:9b:19:e6:6a:a6:93:ec:dc:a7:3f:b3:e0:bc:56: 70:f6:60:6a:63:2b:fc:ab:e5:7e:6c:85:1a:ee:29:55:1f:6f: 8a:73:cb:5d:1f:72:97:fa:26:82:70:81:2a:65:1a:e1:0d:c2: 2e:24:1b:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCMUY1QzNERkI3OTBE QzM4REZDNENERDE3MjE3ODQ4NDMxNEZDQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfWw/D7+O3RULOC5+f/HOShZ4DTshI6KVQiZuVv1QT18F0ofpI auw2N2miNxiYa1kZ/q1YXOsFe9dgb+kZz69TXUk5zqCHm0r3uKkRjtfNu81R8xbb LWSTsakN0mRMBoz/mPfHFjTa18nu2xs+HmQ9U0CQdh/i/IMrETFVce+inPBJkD00 vD316IQwkkcIpMVVr+ryt9F3iMmBBEYGZY7TJayJLJZDXsVcucX4uoy5artr7w4C F8gGmhRfB+3LCumBltpFxlBr6qxmxxWe8Jiut2SX4/xQuUHe/xDYD9EZBoQROgzX f4c2qeAaqQaN9bPCreph/PAEnXfqUS8Y/kRjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSx9cPft5DcON/EzdFyF4SEMU/KEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1N4OWNQZnQ1RGNPTl9FemRG eUY0U0VNVV9LRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sMAwDQYJKoZIhvcNAQELBQADggEBABt+nZ9DoKY6m4NPTMhp8YpWIzt5230xjr90 Pz3KTIL29KK3KrMC+NUl8u5BJibGxTamQ5GkpdmKyEnH8EOGySU7rGpDqBbqg3W8 xonuvFBpAW+4e9PQCW4F6rbkP5a747/pARZUXcU7K4kKqNNC5vO7LPstliDWH+bM H413pc4O6xhg7dTAgZohL4v8GqMJx+Y55Vbgdeg3POL400x3mgnX/U6kiTRf7s+o x6KDkIJ4fsDHLqJ7OBtSl/dc0a/IlAgPd8m5supg9QObGeZqppPs3Kc/s+C8VnD2 YGpjK/yr5X5shRruKVUfb4pzy10fcpf6JoJwgSplGuENwi4kG7I= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org