$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yyi3-CiVNWdpFVMj7dqDpHyjoYY.roa File: Yyi3-CiVNWdpFVMj7dqDpHyjoYY.roa (raw, json) Hash identifier: bUaEj8rsMrWnRBa43J7m2/P6Rs3eSo/b/9gCwPiaZtI= Subject key identifier: 63:28:B7:F8:28:95:35:67:69:15:53:23:ED:DA:83:A4:7C:A3:A1:86 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30A7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yyi3-CiVNWdpFVMj7dqDpHyjoYY.roa Signing time: Mon 26 Aug 2024 05:29:41 +0000 ROA not before: Mon 26 Aug 2024 05:29:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12455 (0x30a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6328B7F82895356769155323EDDA83A47CA3A186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:65:d3:db:94:9c:69:5f:33:e9:a7:c7:dc: 0d:9c:19:68:a6:d3:1d:11:fc:99:e5:5b:a5:84:87: 83:d8:d4:2d:6b:de:f4:b5:67:8f:4b:07:fe:e7:d7: 55:1d:a1:97:97:e2:60:9b:a5:d0:0e:a0:cf:c3:3c: c9:e8:5a:35:43:b4:a4:99:7e:a0:d8:c9:94:89:ec: 63:f5:cd:81:c3:d6:eb:8c:dc:c1:23:7e:ad:0e:f7: c5:87:be:8d:ef:57:72:e0:6f:cd:e3:bb:5e:e9:e1: b6:4c:bd:b8:3d:ef:a3:4f:a4:3a:39:43:e9:b3:88: 43:36:2e:1b:8b:de:ee:32:91:7c:66:8b:03:4b:08: 75:a2:25:40:5e:3d:85:3e:13:78:d1:c5:b7:f5:a3: 1b:f1:48:fd:f3:74:5c:3d:e6:43:e3:93:80:2a:46: 66:db:aa:60:ef:6a:2d:77:33:98:c4:ed:ff:16:bb: e9:b9:da:d1:6d:4a:4e:70:3e:b1:ac:65:cc:95:28: 45:49:24:16:4c:00:8c:3f:ac:89:cd:04:f0:2a:61: 7a:05:16:19:68:dc:ea:32:11:9b:c1:b6:b0:ca:77: b8:1f:e3:f9:ec:d4:83:51:74:de:02:a5:15:0e:e8: 5e:9f:91:cd:b8:c4:b4:45:b9:64:c9:9f:d7:d2:f2: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:28:B7:F8:28:95:35:67:69:15:53:23:ED:DA:83:A4:7C:A3:A1:86 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yyi3-CiVNWdpFVMj7dqDpHyjoYY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.56.0/21 Signature Algorithm: sha256WithRSAEncryption 1c:0e:9f:ee:06:b8:aa:82:fc:0b:3a:19:b7:09:b2:a0:61:d1: 5f:22:57:7b:6f:7d:b8:a4:7d:06:3d:ec:e6:9b:94:17:44:66: 75:0e:16:4f:3e:2e:b0:90:69:c5:c1:2f:bb:8d:fc:5c:3c:b6: 4b:87:8f:30:c2:16:18:86:df:7a:83:8b:72:83:da:f8:6f:b3: 1a:da:39:37:24:bb:3a:95:d1:ea:a1:f0:cd:24:e6:8a:1e:29: 91:a4:55:9f:67:00:f0:dd:ab:bd:b1:b9:4d:c4:e4:81:31:5b: 81:ca:6a:a1:ae:6f:5a:53:90:88:2f:c1:17:15:bd:c0:ac:d8: e3:ab:11:58:15:73:6d:8c:42:ad:9f:47:eb:69:55:05:81:26: b1:30:42:bc:63:de:2d:d9:81:e5:9b:ce:25:b9:f0:c7:24:40: 2d:54:15:77:22:8a:80:a4:d9:c6:24:28:3c:dc:34:10:be:47: 19:0c:8b:26:53:e6:88:b0:5b:75:8a:d8:fa:5d:80:04:c8:4c: bd:d5:9a:a2:4e:68:e1:ae:3c:18:c4:03:0f:83:82:0c:ee:8b: b8:df:96:5d:1e:74:e7:eb:5f:1c:25:f3:f0:f6:b3:6f:7b:7a: 32:b3:d0:90:90:d0:aa:5e:07:1c:a0:b1:e8:a5:38:fe:01:14: b1:47:0f:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzMjhCN0Y4Mjg5NTM1 Njc2OTE1NTMyM0VEREE4M0E0N0NBM0ExODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3uGXT25ScaV8z6afH3A2cGWim0x0R/JnlW6WEh4PY1C1r3vS1 Z49LB/7n11UdoZeX4mCbpdAOoM/DPMnoWjVDtKSZfqDYyZSJ7GP1zYHD1uuM3MEj fq0O98WHvo3vV3Lgb83ju17p4bZMvbg976NPpDo5Q+mziEM2LhuL3u4ykXxmiwNL CHWiJUBePYU+E3jRxbf1oxvxSP3zdFw95kPjk4AqRmbbqmDvai13M5jE7f8Wu+m5 2tFtSk5wPrGsZcyVKEVJJBZMAIw/rInNBPAqYXoFFhlo3OoyEZvBtrDKd7gf4/ns 1INRdN4CpRUO6F6fkc24xLRFuWTJn9fS8patAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYyi3+CiVNWdpFVMj7dqDpHyjoYYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1l5aTMtQ2lWTldkcEZWTWo3 ZHFEcEh5am9ZWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sTgwDQYJKoZIhvcNAQELBQADggEBABwOn+4GuKqC/As6GbcJsqBh0V8iV3tvfbik fQY97OablBdEZnUOFk8+LrCQacXBL7uN/Fw8tkuHjzDCFhiG33qDi3KD2vhvsxra OTckuzqV0eqh8M0k5ooeKZGkVZ9nAPDdq72xuU3E5IExW4HKaqGub1pTkIgvwRcV vcCs2OOrEVgVc22MQq2fR+tpVQWBJrEwQrxj3i3ZgeWbziW58MckQC1UFXciioCk 2cYkKDzcNBC+RxkMiyZT5oiwW3WK2PpdgATITL3VmqJOaOGuPBjEAw+Dggzui7jf ll0edOfrXxwl8/D2s297ejKz0JCQ0KpeBxygseilOP4BFLFHDww= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:20 2024 by rpki-client on console-ams.rpki-client.org