$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UMOruTS1yubLVniPz9urNgNvHYk.roa File: UMOruTS1yubLVniPz9urNgNvHYk.roa (raw, json) Hash identifier: xTQGRacrPwvC3KAG5/FxhLMCgxJ2CQNjQVy+MUXpi9I= Subject key identifier: 50:C3:AB:B9:34:B5:CA:E6:CB:56:78:8F:CF:DB:AB:36:03:6F:1D:89 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2863 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UMOruTS1yubLVniPz9urNgNvHYk.roa Signing time: Fri 01 Sep 2023 10:05:17 +0000 ROA not before: Fri 01 Sep 2023 10:05:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10339 (0x2863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=50C3ABB934B5CAE6CB56788FCFDBAB36036F1D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:88:7b:f3:7b:c5:09:e4:40:b9:3a:b2:94: 98:42:84:0d:53:24:0a:ac:ec:3b:18:38:23:2c:63: f0:c0:ce:e4:0e:47:9a:14:ec:3b:ea:88:c8:7c:ce: a8:db:d7:05:0d:8f:f8:d8:be:7c:bd:01:17:2f:2c: 3e:17:8f:86:46:05:b6:70:91:f0:84:cd:0a:c1:eb: 09:08:f6:1d:a7:09:95:f2:73:b0:2c:0d:13:0a:9e: 2e:a0:7b:8a:73:71:4e:cb:3d:25:6e:57:8e:5b:2f: 5d:b2:c3:1d:e8:62:23:d5:1b:9c:fb:89:a6:2f:02: 57:17:a2:e3:e6:04:32:9f:48:70:f2:84:a6:a9:f7: 6b:35:e2:08:8c:d2:42:3f:7a:3f:c7:3f:94:21:79: 27:74:4a:3a:d3:6e:81:e5:9b:f3:75:ac:51:a7:56: 9e:8e:31:4b:2c:a2:31:05:af:44:c8:13:5b:55:85: b1:91:fa:8e:61:54:87:89:02:37:0e:ba:5d:18:c2: 7a:26:e0:da:82:b9:85:9c:7e:8b:bb:e5:fc:1f:83: 6c:2f:d0:be:89:07:1f:b0:54:38:55:6f:6a:bd:1e: 4d:18:e1:34:e8:d5:ea:cf:63:2b:51:53:d6:4f:21: a2:f2:d1:a0:f7:55:0c:16:0d:39:d7:01:da:09:00: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C3:AB:B9:34:B5:CA:E6:CB:56:78:8F:CF:DB:AB:36:03:6F:1D:89 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UMOruTS1yubLVniPz9urNgNvHYk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.118.0/23 Signature Algorithm: sha256WithRSAEncryption b1:23:e8:a4:bc:54:41:76:56:64:de:47:9f:ca:4b:6b:a4:cf: 41:6b:12:27:63:a1:d4:f3:6a:9c:b3:46:d6:f2:7b:0c:8b:41: 72:f2:be:e0:6b:fe:bd:9f:1d:b8:04:0b:74:39:15:98:c4:d4: 2b:6d:a1:4e:e9:e5:8d:01:e2:c8:3b:a5:7e:d3:7f:48:27:64: df:cd:37:36:7b:eb:cf:21:e1:07:46:0d:56:6e:c0:1f:a5:1b: db:23:c6:09:bd:6d:50:99:e6:5d:8f:07:a7:3e:b9:6f:dc:d8: 02:1e:93:c3:f3:61:2b:38:3a:d7:1d:dd:da:47:fb:3b:b7:d2: 5f:8d:da:54:b5:ae:c5:0b:30:45:54:a2:d6:be:62:8f:8a:65: 68:b7:66:e6:89:c8:16:38:3b:25:c0:72:73:16:16:0b:c9:c9: 8d:78:a7:2d:23:66:0a:40:65:15:59:cd:e1:bc:80:2a:e4:83: 7d:e2:54:53:1c:dd:a8:92:db:6a:64:ea:25:97:31:12:9d:b9: 91:94:17:26:7a:02:d6:ff:7e:cf:77:af:5c:c9:15:5c:e8:45: 2c:28:ae:ac:ca:2f:91:5c:be:6e:3a:f8:ce:99:60:a7:c5:3c: 34:01:1b:54:d6:94:12:83:3c:82:d6:bc:70:13:46:84:e0:00: 92:0f:25:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUwQzNBQkI5MzRCNUNB RTZDQjU2Nzg4RkNGREJBQjM2MDM2RjFEODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAH4h783vFCeRAuTqylJhChA1TJAqs7DsYOCMsY/DAzuQOR5oU 7DvqiMh8zqjb1wUNj/jYvny9ARcvLD4Xj4ZGBbZwkfCEzQrB6wkI9h2nCZXyc7As DRMKni6ge4pzcU7LPSVuV45bL12ywx3oYiPVG5z7iaYvAlcXouPmBDKfSHDyhKap 92s14giM0kI/ej/HP5QheSd0SjrTboHlm/N1rFGnVp6OMUssojEFr0TIE1tVhbGR +o5hVIeJAjcOul0Ywnom4NqCuYWcfou75fwfg2wv0L6JBx+wVDhVb2q9Hk0Y4TTo 1erPYytRU9ZPIaLy0aD3VQwWDTnXAdoJAAlfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUMOruTS1yubLVniPz9urNgNvHYkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VNT3J1VFMxeXViTFZuaVB6 OXVyTmdOdkhZay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sXYwDQYJKoZIhvcNAQELBQADggEBALEj6KS8VEF2VmTeR5/KS2ukz0FrEidjodTz apyzRtbyewyLQXLyvuBr/r2fHbgEC3Q5FZjE1CttoU7p5Y0B4sg7pX7Tf0gnZN/N NzZ7688h4QdGDVZuwB+lG9sjxgm9bVCZ5l2PB6c+uW/c2AIek8PzYSs4Otcd3dpH +zu30l+N2lS1rsULMEVUota+Yo+KZWi3ZuaJyBY4OyXAcnMWFgvJyY14py0jZgpA ZRVZzeG8gCrkg33iVFMc3aiS22pk6iWXMRKduZGUFyZ6Atb/fs93r1zJFVzoRSwo rqzKL5Fcvm46+M6ZYKfFPDQBG1TWlBKDPILWvHATRoTgAJIPJQE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org