$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YiH5DNm0Yhmg60JH0HYQasIa_vE.roa File: YiH5DNm0Yhmg60JH0HYQasIa_vE.roa (raw, json) Hash identifier: FfuaXJfKgeT6RPxOEf1yQJ+2rLm8hx3UfmerpT/Jdj4= Subject key identifier: 62:21:F9:0C:D9:B4:62:19:A0:EB:42:47:D0:76:10:6A:C2:1A:FE:F1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A3B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YiH5DNm0Yhmg60JH0HYQasIa_vE.roa Signing time: Fri 01 Sep 2023 10:07:39 +0000 ROA not before: Fri 01 Sep 2023 10:07:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10811 (0x2a3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6221F90CD9B46219A0EB4247D076106AC21AFEF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:80:24:fc:0f:97:15:54:2a:9b:f0:be:89: 35:3b:b0:f1:99:8c:51:c4:7c:09:54:48:57:64:93: 7c:b1:2e:99:81:8f:76:c7:52:82:67:7b:e2:17:23: b9:6c:53:92:80:78:ab:c4:a6:3a:49:1a:c7:f4:7b: 1e:c4:ea:d1:f7:d3:7e:db:c4:25:68:62:13:4b:d3: 80:0b:b7:78:5b:3c:55:75:cf:04:87:e5:05:dc:6a: 9e:6a:fc:46:3c:51:94:70:d9:90:a7:c5:19:9f:6e: a0:e2:5b:de:2f:0f:cc:33:4a:f2:ef:14:d5:17:98: f5:b2:36:7b:5f:05:40:8d:d4:e9:d2:19:c5:7b:37: 0a:80:6f:91:15:44:08:46:56:0d:dc:02:2f:f9:1e: d5:9f:f7:2f:64:7d:e8:25:42:4e:0e:1a:0c:65:4b: 9c:91:6b:90:6b:2c:f6:0f:ed:70:51:aa:b4:40:8c: 5c:69:ac:60:7e:4f:c2:cf:53:57:51:87:40:9d:ef: 77:c4:90:38:ec:49:5a:ae:7e:42:6b:ec:28:f8:29: d6:4c:06:00:c6:33:d7:02:a7:dd:75:a5:15:d0:63: 64:72:c7:c1:7a:8f:94:89:d7:11:c0:6d:a0:b6:08: a3:f4:89:f5:78:8c:2b:ea:c2:4d:29:6f:e4:f6:7c: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:21:F9:0C:D9:B4:62:19:A0:EB:42:47:D0:76:10:6A:C2:1A:FE:F1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YiH5DNm0Yhmg60JH0HYQasIa_vE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 99:6c:3b:9d:98:e9:e6:48:71:17:cf:57:7f:9b:4c:b2:88:93: 25:c5:aa:81:70:84:2c:57:ad:5c:a5:8e:c9:50:ff:40:d2:80: 31:80:17:50:2f:4f:d3:cd:11:89:a4:9d:55:6b:f1:3b:b0:6e: 2c:f3:30:c4:d7:e3:cf:f5:f2:9c:f4:3d:32:b0:48:a5:e2:83: 3a:ff:20:44:b2:62:aa:f5:49:9d:5d:f0:2e:0a:39:5b:69:f9: 98:84:5d:83:18:22:5f:09:11:73:98:16:f8:b1:b4:e3:5e:fa: c6:fe:75:c9:57:49:a5:7e:f1:ee:d0:9a:e4:0a:8e:88:12:e5: 5a:5b:46:9b:81:f0:4d:0d:78:82:28:aa:6f:0a:d4:0f:4a:a9: a8:f7:7c:4f:c4:0b:2e:58:1e:e5:2c:5d:45:f8:8a:ac:a5:37: 97:44:a5:3a:02:30:27:22:5a:e8:f4:45:65:c4:2f:d6:c2:4e: 2b:5e:88:a9:2f:a4:72:98:74:5e:69:1e:e0:0b:13:11:ba:08: 68:be:c0:11:1a:6f:51:49:a6:b5:a2:55:f3:f4:f0:1d:07:81: 26:34:8e:a2:fe:bb:6c:ba:22:e7:92:38:04:cc:30:be:95:10: 0c:53:9d:96:ff:2c:69:72:ad:aa:b4:6e:43:5c:0f:31:d0:0b: 6b:e2:76:30 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICKjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYyMjFGOTBDRDlCNDYy MTlBMEVCNDI0N0QwNzYxMDZBQzIxQUZFRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFooAk/A+XFVQqm/C+iTU7sPGZjFHEfAlUSFdkk3yxLpmBj3bH UoJne+IXI7lsU5KAeKvEpjpJGsf0ex7E6tH3037bxCVoYhNL04ALt3hbPFV1zwSH 5QXcap5q/EY8UZRw2ZCnxRmfbqDiW94vD8wzSvLvFNUXmPWyNntfBUCN1OnSGcV7 NwqAb5EVRAhGVg3cAi/5HtWf9y9kfeglQk4OGgxlS5yRa5BrLPYP7XBRqrRAjFxp rGB+T8LPU1dRh0Cd73fEkDjsSVqufkJr7Cj4KdZMBgDGM9cCp911pRXQY2Ryx8F6 j5SJ1xHAbaC2CKP0ifV4jCvqwk0pb+T2fBy5AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUYiH5DNm0Yhmg60JH0HYQasIa/vEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lpSDVETm0wWWhtZzYwSkgw SFlRYXNJYV92RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG0 sDANBgkqhkiG9w0BAQsFAAOCAQEAmWw7nZjp5khxF89Xf5tMsoiTJcWqgXCELFet XKWOyVD/QNKAMYAXUC9P080RiaSdVWvxO7BuLPMwxNfjz/XynPQ9MrBIpeKDOv8g RLJiqvVJnV3wLgo5W2n5mIRdgxgiXwkRc5gW+LG04176xv51yVdJpX7x7tCa5AqO iBLlWltGm4HwTQ14giiqbwrUD0qpqPd8T8QLLlge5SxdRfiKrKU3l0SlOgIwJyJa 6PRFZcQv1sJOK16IqS+kcph0Xmke4AsTEboIaL7AERpvUUmmtaJV8/TwHQeBJjSO ov67bLoi55I4BMwwvpUQDFOdlv8saXKtqrRuQ1wPMdALa+J2MA== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org