$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YlM0U2_qyCtGshetWPTTxVVU_ZQ.roa File: YlM0U2_qyCtGshetWPTTxVVU_ZQ.roa (raw, json) Hash identifier: lRt+nBGiDfdAr/nAMwUiMNUsTaeqs3OMpsD3hRQVgH0= Subject key identifier: 62:53:34:53:6F:EA:C8:2B:46:B2:17:AD:58:F4:D3:C5:55:54:FD:94 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2915 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YlM0U2_qyCtGshetWPTTxVVU_ZQ.roa Signing time: Fri 01 Sep 2023 10:06:08 +0000 ROA not before: Fri 01 Sep 2023 10:06:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10517 (0x2915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=625334536FEAC82B46B217AD58F4D3C55554FD94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:53:91:80:a6:48:91:3a:19:0d:b8:d4:5f:5b: eb:7b:93:66:0b:58:bb:02:07:03:2a:da:01:8a:b0: eb:11:90:65:8f:28:5b:f8:4b:ab:e7:db:4b:6f:d3: 5f:90:a3:8e:6e:cb:d3:a9:e1:e6:83:96:dd:ed:88: 49:a6:61:2c:3f:8c:57:9a:44:19:d8:ca:4b:bd:e0: b8:15:b7:7c:85:92:cc:aa:5a:1f:44:68:41:47:64: ac:e6:54:2e:bf:63:56:42:56:2f:5a:da:c4:f8:15: 26:97:0b:48:b7:0b:73:02:51:b0:76:37:72:0b:34: c6:80:ff:31:06:98:d9:1f:80:7a:ac:f7:06:26:a0: 44:01:e6:af:22:c5:9f:6e:a1:e0:3c:b6:92:04:80: 98:5b:b7:b7:d6:24:f0:32:50:92:da:37:8d:38:8f: 70:26:0b:68:a4:75:f2:a5:02:90:56:80:c9:6c:be: 40:3a:7b:ef:93:d1:8e:4d:df:d1:e2:d0:19:d2:d1: 2e:2d:fa:1f:b4:bb:fb:0c:32:06:20:3e:e6:15:7d: 15:1b:65:ee:89:a8:22:9c:4e:63:c0:db:18:b2:59: 3e:ed:03:7e:00:39:12:2a:1e:66:e7:f8:13:ba:02: b4:b4:cb:8d:99:99:de:2b:b3:fd:22:52:25:74:bb: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:53:34:53:6F:EA:C8:2B:46:B2:17:AD:58:F4:D3:C5:55:54:FD:94 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YlM0U2_qyCtGshetWPTTxVVU_ZQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.32.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:35:d4:6b:6b:f2:88:96:e6:a8:5c:ff:ab:11:23:42:3e:ab: 19:1d:06:bb:77:c2:32:f6:bc:9f:9e:5e:93:0a:b6:d9:53:1a: ef:8c:d9:25:cd:ea:cb:24:2f:04:31:0d:c8:0b:4b:c3:c9:b9: 38:07:09:d9:10:3a:b4:6e:29:44:9f:c0:96:db:8a:b2:7f:7d: 60:64:c3:49:63:02:b9:07:9d:6f:5f:e2:2e:49:81:e7:78:7b: 8d:9c:63:b7:46:a9:cf:32:76:ae:97:56:96:c4:23:2d:40:79: 20:55:da:79:d0:5d:87:87:e4:86:0a:c5:b7:ce:ed:f0:3e:eb: e4:86:7a:ee:6a:b4:d2:d6:36:ea:45:00:e5:97:fe:3b:59:52: 5d:b8:6e:d5:51:51:f2:b6:c2:92:0f:08:24:fe:33:84:4e:5a: 22:af:5a:81:74:f3:fe:8f:76:06:fe:f9:31:1b:e9:1a:66:8d: 4e:4b:d3:0b:b2:47:51:21:84:27:29:3b:10:7f:de:50:56:6d: 63:af:21:f8:f7:25:39:8e:ea:eb:0e:6e:ca:9d:cc:40:37:94: 5e:68:62:1a:6a:ce:d6:a0:51:c9:8a:bc:d7:1b:80:3d:cc:2e: b2:13:bc:8b:08:26:ca:98:9e:9d:4c:50:15:ad:9c:ff:cd:17: de:c7:16:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKRUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYyNTMzNDUzNkZFQUM4 MkI0NkIyMTdBRDU4RjREM0M1NTU1NEZEOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmU5GApkiROhkNuNRfW+t7k2YLWLsCBwMq2gGKsOsRkGWPKFv4 S6vn20tv01+Qo45uy9Op4eaDlt3tiEmmYSw/jFeaRBnYyku94LgVt3yFksyqWh9E aEFHZKzmVC6/Y1ZCVi9a2sT4FSaXC0i3C3MCUbB2N3ILNMaA/zEGmNkfgHqs9wYm oEQB5q8ixZ9uoeA8tpIEgJhbt7fWJPAyUJLaN404j3AmC2ikdfKlApBWgMlsvkA6 e++T0Y5N39Hi0BnS0S4t+h+0u/sMMgYgPuYVfRUbZe6JqCKcTmPA2xiyWT7tA34A ORIqHmbn+BO6ArS0y42Zmd4rs/0iUiV0uzq5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYlM0U2/qyCtGshetWPTTxVVU/ZQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lsTTBVMl9xeUN0R3NoZXRX UFRUeFZWVV9aUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0 sCAwDQYJKoZIhvcNAQELBQADggEBADw11Gtr8oiW5qhc/6sRI0I+qxkdBrt3wjL2 vJ+eXpMKttlTGu+M2SXN6sskLwQxDcgLS8PJuTgHCdkQOrRuKUSfwJbbirJ/fWBk w0ljArkHnW9f4i5Jged4e42cY7dGqc8ydq6XVpbEIy1AeSBV2nnQXYeH5IYKxbfO 7fA+6+SGeu5qtNLWNupFAOWX/jtZUl24btVRUfK2wpIPCCT+M4ROWiKvWoF08/6P dgb++TEb6RpmjU5L0wuyR1EhhCcpOxB/3lBWbWOvIfj3JTmO6usObsqdzEA3lF5o YhpqztagUcmKvNcbgD3MLrITvIsIJsqYnp1MUBWtnP/NF97HFls= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org