$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zz5GhlCf7MsCLNKGUdGgTXqzJP0.roa File: Zz5GhlCf7MsCLNKGUdGgTXqzJP0.roa (raw, json) Hash identifier: A+jCQhnj4EV2I0t2TJ5qfFHrQoF4Ac/gpbcsbcyF8jE= Subject key identifier: 67:3E:46:86:50:9F:EC:CB:02:2C:D2:86:51:D1:A0:4D:7A:B3:24:FD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 301F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zz5GhlCf7MsCLNKGUdGgTXqzJP0.roa Signing time: Mon 26 Aug 2024 05:29:09 +0000 ROA not before: Mon 26 Aug 2024 05:29:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12319 (0x301f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=673E4686509FECCB022CD28651D1A04D7AB324FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:23:2b:55:f2:ba:05:61:a2:e0:c4:56:50: 50:f3:59:e5:52:de:97:83:7f:cd:9a:12:a1:fd:da: bd:f9:01:2f:3c:15:b8:7f:18:06:91:e7:8e:a7:c3: c8:29:10:9d:9a:03:77:ae:71:b0:17:3e:f9:84:df: 5e:0a:4f:86:86:cd:ce:c5:d3:19:bd:e2:34:0d:61: 7b:99:0a:08:84:49:a5:42:a4:16:d7:7b:f8:be:7d: 59:d0:a2:3f:3a:8f:03:7d:68:9d:6d:21:30:ea:ce: 97:5e:85:b3:35:26:d5:0b:17:f2:04:b1:2a:35:22: 35:a5:69:ea:84:ae:30:d0:12:61:06:47:ed:95:33: cc:8c:6a:6f:46:f2:d6:61:8e:70:d6:10:d1:7b:28: 57:0a:36:cd:26:a4:0c:49:d0:28:79:1d:4f:c4:77: c9:7e:74:bf:0d:85:29:44:a3:37:2b:de:51:8b:56: 2f:43:27:7d:76:99:cc:c2:a3:7c:f4:78:11:17:7e: 7a:f1:84:6a:e3:d8:16:d8:46:d9:4a:b8:66:08:49: f8:61:29:8d:d5:d5:d1:62:2f:0c:d2:2f:d6:24:51: 2f:b0:be:73:b0:06:29:2f:5d:e9:4f:b3:cc:0a:fd: 3a:8f:19:63:f2:3a:55:a9:a5:f1:89:23:27:05:b6: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3E:46:86:50:9F:EC:CB:02:2C:D2:86:51:D1:A0:4D:7A:B3:24:FD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zz5GhlCf7MsCLNKGUdGgTXqzJP0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.16.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:f7:89:62:c2:c7:86:40:54:5a:11:e6:d6:2b:8b:65:04:ee: 72:61:9c:10:1a:84:bb:b4:83:5e:7d:17:ee:8a:e9:30:63:de: 63:2e:0b:54:92:e0:71:a6:00:be:f9:80:ef:a1:47:43:1c:18: d0:b4:3b:cf:c0:0e:8a:c5:90:9a:a8:58:5c:34:96:b1:b2:89: ce:60:33:45:7b:1c:5c:f6:20:4c:e7:09:f5:64:36:63:29:5b: 7d:67:90:b3:31:8c:9f:79:1b:5d:c3:94:da:f2:16:26:33:fe: c4:87:c1:36:4d:08:b9:41:cc:d4:fe:ff:4e:34:6e:21:5e:89: 47:1c:5d:b2:d7:3a:2a:87:b9:8f:be:63:15:3e:63:0b:e5:c5: 81:c4:56:11:f3:85:c5:be:9f:59:84:56:3d:1b:09:c4:13:f1: 81:18:86:e0:df:3e:ea:f9:b2:5a:6e:22:f5:65:af:ba:de:45: 84:0b:d2:d4:80:ce:f8:47:c5:9e:6e:5e:62:bc:9f:af:94:96: ba:5d:39:6e:b0:5f:87:d4:bc:b8:6b:d3:6b:27:83:4b:da:9e: 7b:b4:0d:3c:02:42:4a:a1:60:97:21:11:36:df:1b:d0:2a:2a: ae:84:8b:87:f2:ef:0a:40:55:9d:a1:a5:10:e2:21:f1:c5:16: 6c:d1:c9:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY3M0U0Njg2NTA5RkVD Q0IwMjJDRDI4NjUxRDFBMDREN0FCMzI0RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCevCMrVfK6BWGi4MRWUFDzWeVS3peDf82aEqH92r35AS88Fbh/ GAaR546nw8gpEJ2aA3eucbAXPvmE314KT4aGzc7F0xm94jQNYXuZCgiESaVCpBbX e/i+fVnQoj86jwN9aJ1tITDqzpdehbM1JtULF/IEsSo1IjWlaeqErjDQEmEGR+2V M8yMam9G8tZhjnDWENF7KFcKNs0mpAxJ0Ch5HU/Ed8l+dL8NhSlEozcr3lGLVi9D J312mczCo3z0eBEXfnrxhGrj2BbYRtlKuGYISfhhKY3V1dFiLwzSL9YkUS+wvnOw BikvXelPs8wK/TqPGWPyOlWppfGJIycFtiJ9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZz5GhlCf7MsCLNKGUdGgTXqzJP0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1p6NUdobENmN01zQ0xOS0dV ZEdnVFhxekpQMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sRAwDQYJKoZIhvcNAQELBQADggEBAF33iWLCx4ZAVFoR5tYri2UE7nJhnBAahLu0 g159F+6K6TBj3mMuC1SS4HGmAL75gO+hR0McGNC0O8/ADorFkJqoWFw0lrGyic5g M0V7HFz2IEznCfVkNmMpW31nkLMxjJ95G13DlNryFiYz/sSHwTZNCLlBzNT+/040 biFeiUccXbLXOiqHuY++YxU+YwvlxYHEVhHzhcW+n1mEVj0bCcQT8YEYhuDfPur5 slpuIvVlr7reRYQL0tSAzvhHxZ5uXmK8n6+UlrpdOW6wX4fUvLhr02sng0vannu0 DTwCQkqhYJchETbfG9AqKq6Ei4fy7wpAVZ2hpRDiIfHFFmzRySU= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org