$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/US4WFO4mh2Esc9xjo2U-Fpyp4_Y.roa File: US4WFO4mh2Esc9xjo2U-Fpyp4_Y.roa (raw, json) Hash identifier: HOWugeSKDefYtrjy/RarV5nhdFeJhy2DJVetXXP5MBo= Subject key identifier: 51:2E:16:14:EE:26:87:61:2C:73:DC:63:A3:65:3E:16:9C:A9:E3:F6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3152 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/US4WFO4mh2Esc9xjo2U-Fpyp4_Y.roa Signing time: Mon 26 Aug 2024 05:30:21 +0000 ROA not before: Mon 26 Aug 2024 05:30:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12626 (0x3152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=512E1614EE2687612C73DC63A3653E169CA9E3F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:20:e9:bf:40:af:62:6e:9a:13:8f:5a:aa: d3:6c:f9:63:5c:af:c2:12:84:03:b6:51:6a:80:fd: 44:fb:f8:24:89:e2:c1:fc:66:3a:26:ba:88:0e:00: 9c:80:da:3e:37:c1:4d:0f:7a:ac:af:f0:1b:fb:9d: cb:2c:17:ec:11:85:88:1b:47:93:6c:a2:97:c7:85: e0:19:1c:0d:70:46:b7:d6:5c:9f:23:1d:42:77:6e: b6:a6:06:c9:d4:b7:6a:6b:48:84:7d:a9:67:08:2c: 13:8a:19:f0:f7:e6:f1:99:1c:37:36:cf:67:96:3d: da:2e:7c:e6:6d:70:6e:00:d8:67:e4:89:64:d0:e9: d6:1b:fb:41:78:41:0e:e1:0c:62:44:03:b3:0c:49: 02:79:53:73:38:35:f2:57:2b:71:74:bf:e2:5c:ff: aa:27:9f:12:fa:d8:45:55:21:32:42:b5:cd:75:0f: c9:0e:8c:21:74:94:f9:46:6a:ba:88:1f:2f:91:d7: e0:1d:5e:a1:1c:00:14:1f:a2:da:a4:32:6a:c4:b5: 92:e1:8b:3d:30:1f:05:1a:9a:6b:31:be:c1:d3:21: ef:2d:85:7a:cd:4d:e1:8c:cd:47:0a:00:05:b3:67: 7d:ca:5f:69:52:a6:c6:21:9c:06:0d:ed:70:60:f0: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2E:16:14:EE:26:87:61:2C:73:DC:63:A3:65:3E:16:9C:A9:E3:F6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/US4WFO4mh2Esc9xjo2U-Fpyp4_Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.152.0/21 Signature Algorithm: sha256WithRSAEncryption 64:ba:4f:4d:37:0a:3f:6f:b4:29:43:3d:04:cb:e9:97:bc:5d: 66:95:30:dd:02:fc:9c:8d:ce:d6:25:e0:38:80:f1:9f:4e:40: e9:57:63:cb:8c:46:ec:b5:3f:81:56:c5:f0:2c:ae:ef:f3:32: 98:60:84:80:d4:90:f6:0e:ae:2f:27:fa:23:cb:49:4c:ca:a1: 0e:54:e1:69:5d:25:0a:0f:2c:45:cb:b0:72:ae:f8:7a:10:bc: d5:f0:8c:55:ea:36:b0:34:5e:67:99:f0:9e:ea:78:06:76:4e: 04:f6:c1:bb:6e:fd:0b:ab:44:6d:ce:84:2e:1c:2f:1f:f9:d7: 4a:f5:21:3e:37:4d:0e:2a:f1:c3:df:49:e1:df:1c:9f:17:5f: 28:c0:89:32:be:08:1f:ec:a1:84:e4:00:50:8b:d1:73:3f:c7: b2:20:7d:e4:c1:c3:6f:c4:04:1c:06:8a:62:5c:f9:18:e1:b0: db:4b:ab:7d:4f:85:37:f8:9d:ae:60:6e:90:ba:38:5c:4f:c1: 93:9e:24:eb:30:d5:e2:f5:43:e2:ac:21:31:6a:f0:7b:28:91: 8a:1c:63:67:06:cc:ee:01:bc:c1:98:7e:54:41:09:f5:41:95: d1:b8:d0:1a:7f:3a:ae:15:73:39:be:61:0e:01:2d:1d:d0:f1: 76:6f:c6:2c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUxMkUxNjE0RUUyNjg3 NjEyQzczREM2M0EzNjUzRTE2OUNBOUUzRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtdiDpv0CvYm6aE49aqtNs+WNcr8IShAO2UWqA/UT7+CSJ4sH8 ZjomuogOAJyA2j43wU0Peqyv8Bv7ncssF+wRhYgbR5NsopfHheAZHA1wRrfWXJ8j HUJ3bramBsnUt2prSIR9qWcILBOKGfD35vGZHDc2z2eWPdoufOZtcG4A2GfkiWTQ 6dYb+0F4QQ7hDGJEA7MMSQJ5U3M4NfJXK3F0v+Jc/6onnxL62EVVITJCtc11D8kO jCF0lPlGarqIHy+R1+AdXqEcABQfotqkMmrEtZLhiz0wHwUammsxvsHTIe8thXrN TeGMzUcKAAWzZ33KX2lSpsYhnAYN7XBg8CHZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUS4WFO4mh2Esc9xjo2U+Fpyp4/YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VTNFdGTzRtaDJFc2M5eGpv MlUtRnB5cDRfWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sJgwDQYJKoZIhvcNAQELBQADggEBAGS6T003Cj9vtClDPQTL6Ze8XWaVMN0C/JyN ztYl4DiA8Z9OQOlXY8uMRuy1P4FWxfAsru/zMphghIDUkPYOri8n+iPLSUzKoQ5U 4WldJQoPLEXLsHKu+HoQvNXwjFXqNrA0XmeZ8J7qeAZ2TgT2wbtu/QurRG3OhC4c Lx/510r1IT43TQ4q8cPfSeHfHJ8XXyjAiTK+CB/soYTkAFCL0XM/x7IgfeTBw2/E BBwGimJc+RjhsNtLq31PhTf4na5gbpC6OFxPwZOeJOsw1eL1Q+KsITFq8HsokYoc Y2cGzO4BvMGYflRBCfVBldG40Bp/Oq4Vczm+YQ4BLR3Q8XZvxiw= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org