$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDHOnwEVP90fVut8E1gyFXae6uo.roa File: TDHOnwEVP90fVut8E1gyFXae6uo.roa (raw, json) Hash identifier: 1PF3PaQq1uYark7UKqHGKs6/PzAJKsdjccQf8dO9Gi8= Subject key identifier: 4C:31:CE:9F:01:15:3F:DD:1F:56:EB:7C:13:58:32:15:76:9E:EA:EA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2F9B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDHOnwEVP90fVut8E1gyFXae6uo.roa Signing time: Mon 26 Aug 2024 05:28:40 +0000 ROA not before: Mon 26 Aug 2024 05:28:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12187 (0x2f9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4C31CE9F01153FDD1F56EB7C13583215769EEAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:62:44:cb:52:f8:ca:c2:bc:c6:ef:48:b8: e2:1e:bf:30:33:c5:74:54:f5:a7:7d:85:2e:30:9d: 51:b9:97:3e:73:8e:01:ce:a1:bb:11:e5:b4:16:03: cb:76:20:90:0d:fd:d1:4e:a9:f2:8b:e0:16:30:4c: 47:69:a4:35:33:92:46:ff:23:bf:78:80:5c:aa:51: de:43:45:ba:93:56:49:fb:e3:67:b2:a0:06:9d:bb: 40:7d:89:23:b0:dd:38:39:bb:ad:d7:ff:ca:20:df: 5a:ec:b0:48:3b:a5:ac:89:96:03:ab:3f:ea:e3:ea: e0:7e:31:b3:79:30:98:99:0a:29:f7:e3:8f:61:14: 86:e0:b0:73:ba:e9:67:d4:d3:22:2d:b7:20:bb:95: 39:67:e2:8c:c8:4f:9f:c5:9d:41:41:bb:ee:2d:2f: a7:0a:27:3e:0b:42:cf:51:4a:52:5c:67:92:ca:a3: 6c:7a:cd:0f:ed:ab:55:f6:59:a2:7a:fa:d3:c3:ea: 31:9e:a0:f3:8e:34:63:93:d4:01:e2:d1:8f:10:b3: c6:7f:88:f4:22:1a:60:dc:46:7f:71:2a:c0:be:2d: 53:e0:4d:b1:6b:3f:ae:40:b7:4c:9d:ac:d3:2c:44: 0e:12:20:48:fa:2c:26:80:8f:1e:68:38:4e:fb:6f: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:31:CE:9F:01:15:3F:DD:1F:56:EB:7C:13:58:32:15:76:9E:EA:EA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDHOnwEVP90fVut8E1gyFXae6uo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.84.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:5e:80:79:d6:a0:49:13:ba:28:dd:e3:6f:01:1b:7a:96:9c: 5f:eb:2e:76:c9:b4:8a:f9:bc:f0:f8:87:67:26:50:65:51:c7: 77:a7:f4:1f:51:03:2a:d1:fc:b7:aa:97:14:1a:19:cb:08:59: 66:62:30:39:73:68:45:5e:b2:0f:e6:12:bb:6b:8c:f4:ca:97: 81:ca:1d:07:e5:f7:6c:bc:36:df:0f:69:5e:3a:d6:ed:60:1d: 3d:9e:d5:cc:7d:53:29:a1:8f:b5:4d:21:70:3a:71:71:cf:00: 87:70:64:77:a8:33:46:bb:ba:a0:00:af:c7:78:92:d1:3c:aa: c0:ce:3f:c2:4e:63:0a:26:db:7a:ed:8b:03:e0:38:89:e7:38: d6:f8:87:04:2c:a9:95:56:e0:4d:3c:eb:7b:75:bb:55:7a:0b: 4e:a1:23:60:6e:b7:09:6d:23:40:87:e5:96:7c:07:b3:33:50: fa:3e:24:5c:82:7e:39:bd:ad:b4:e0:53:be:da:45:48:f4:ae: cc:76:66:5e:a0:1b:90:0d:50:49:d4:d8:b4:08:2d:cd:45:ef: a8:0b:8d:65:e5:de:7b:52:b8:58:af:1f:07:f0:64:23:32:dc: 5e:5f:f1:6e:ac:98:35:95:67:75:d2:91:ba:ee:0c:24:7a:42: 38:4a:e7:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRDMzFDRTlGMDExNTNG REQxRjU2RUI3QzEzNTgzMjE1NzY5RUVBRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS2WJEy1L4ysK8xu9IuOIevzAzxXRU9ad9hS4wnVG5lz5zjgHO obsR5bQWA8t2IJAN/dFOqfKL4BYwTEdppDUzkkb/I794gFyqUd5DRbqTVkn742ey oAadu0B9iSOw3Tg5u63X/8og31rssEg7payJlgOrP+rj6uB+MbN5MJiZCin3449h FIbgsHO66WfU0yIttyC7lTln4ozIT5/FnUFBu+4tL6cKJz4LQs9RSlJcZ5LKo2x6 zQ/tq1X2WaJ6+tPD6jGeoPOONGOT1AHi0Y8Qs8Z/iPQiGmDcRn9xKsC+LVPgTbFr P65At0ydrNMsRA4SIEj6LCaAjx5oOE77b56ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTDHOnwEVP90fVut8E1gyFXae6uowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RESE9ud0VWUDkwZlZ1dDhF MWd5RlhhZTZ1by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sFQwDQYJKoZIhvcNAQELBQADggEBAJ9egHnWoEkTuijd428BG3qWnF/rLnbJtIr5 vPD4h2cmUGVRx3en9B9RAyrR/LeqlxQaGcsIWWZiMDlzaEVesg/mErtrjPTKl4HK HQfl92y8Nt8PaV461u1gHT2e1cx9Uymhj7VNIXA6cXHPAIdwZHeoM0a7uqAAr8d4 ktE8qsDOP8JOYwom23rtiwPgOInnONb4hwQsqZVW4E0863t1u1V6C06hI2Butwlt I0CH5ZZ8B7MzUPo+JFyCfjm9rbTgU77aRUj0rsx2Zl6gG5ANUEnU2LQILc1F76gL jWXl3ntSuFivHwfwZCMy3F5f8W6smDWVZ3XSkbruDCR6QjhK55Q= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org