$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a02M0VtLqhBhqD3Uek2A3cWOU_M.roa File: a02M0VtLqhBhqD3Uek2A3cWOU_M.roa (raw, json) Hash identifier: oEDbCHWhUfZYU2/sStRFvK6v9lMff2hs62AA2xWokVs= Subject key identifier: 6B:4D:8C:D1:5B:4B:AA:10:61:A8:3D:D4:7A:4D:80:DD:C5:8E:53:F3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32DB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a02M0VtLqhBhqD3Uek2A3cWOU_M.roa Signing time: Mon 26 Aug 2024 05:32:05 +0000 ROA not before: Mon 26 Aug 2024 05:32:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13019 (0x32db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6B4D8CD15B4BAA1061A83DD47A4D80DDC58E53F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ac:84:2d:71:91:9d:30:59:cf:20:4f:57:61: 08:44:f3:3a:4f:0f:4a:c9:ee:c4:b4:7f:1f:26:0f: 0d:8e:d7:52:0e:8f:14:45:53:4c:66:aa:f9:8b:68: d4:e4:5a:c4:13:77:d8:a2:b5:7c:e2:a3:d2:6d:3d: fe:e9:6e:8e:1b:47:52:11:9d:63:bd:d8:9c:44:ed: 80:a3:ca:5b:27:72:40:93:88:21:2c:f1:48:60:38: b5:48:84:d2:dc:26:2c:1b:f9:e9:6a:3e:dc:ea:44: 91:15:ea:a0:01:07:0f:df:56:10:c0:2f:b9:0c:d2: 33:9c:96:73:52:b8:d7:13:7c:e9:e2:3f:52:02:8f: 4b:2d:87:1c:38:ef:79:31:47:fe:09:0b:a7:26:50: b4:ba:32:c1:f2:09:ba:56:19:29:08:23:f6:e9:8c: fa:f3:a1:e1:76:83:af:58:1d:f7:c0:2a:7c:71:5c: 8b:35:38:6a:d9:3a:67:ac:19:f4:65:f3:ef:65:c0: 1c:eb:30:83:35:f8:48:d3:d5:20:c2:3b:77:d9:a1: a7:35:71:db:55:fa:c4:ec:cf:c7:b0:00:80:a8:9c: 22:e4:77:8f:4c:59:f5:45:13:3e:44:98:1a:0d:94: 3e:eb:30:86:58:3c:f9:40:88:73:43:b1:24:31:3e: d3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4D:8C:D1:5B:4B:AA:10:61:A8:3D:D4:7A:4D:80:DD:C5:8E:53:F3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a02M0VtLqhBhqD3Uek2A3cWOU_M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.172.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:f3:a9:af:aa:f6:bf:4e:2d:94:bb:48:a8:82:c1:c6:91:d2: 6a:02:2f:97:73:fe:d7:dd:21:ad:fa:3e:2a:b9:d5:c7:8a:31: ce:dd:ab:d6:dc:1c:6f:0b:3f:2d:2f:88:a7:04:4e:20:49:09: be:63:15:47:78:62:09:a8:c0:e6:b5:61:a8:a4:7b:de:d9:b8: e7:74:e9:59:d9:5f:58:43:cb:7f:57:7e:d1:e2:d3:01:91:6e: 6a:bc:f7:76:64:97:43:0c:97:86:08:64:ad:81:8c:9b:a7:53: 2c:02:3b:8d:4a:b3:7c:4f:20:4f:b7:3f:ee:d2:23:f8:64:0a: 35:be:5a:02:97:8b:25:2b:78:05:6e:d5:71:76:5f:54:ec:7d: e2:0a:39:db:43:a0:8e:b0:c4:e2:c4:5f:b7:90:82:ca:84:5c: dc:9f:95:e3:3f:c5:de:2d:b8:3a:0e:43:05:eb:13:21:c9:a7: 01:a3:f4:dc:3d:5a:5b:fc:58:19:a9:48:63:3d:35:72:83:c9: 29:e8:a3:93:c0:b1:3c:f1:ed:a4:7a:fe:e7:1f:8e:37:de:2c: fa:ee:0c:0b:47:3f:a5:03:8d:8e:69:a0:e5:d0:42:4d:98:83: f0:e6:24:a6:90:30:ae:31:6c:b9:bb:bd:26:3a:86:b0:cc:d7: 72:0c:41:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCNEQ4Q0QxNUI0QkFB MTA2MUE4M0RENDdBNEQ4MEREQzU4RTUzRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgrIQtcZGdMFnPIE9XYQhE8zpPD0rJ7sS0fx8mDw2O11IOjxRF U0xmqvmLaNTkWsQTd9iitXzio9JtPf7pbo4bR1IRnWO92JxE7YCjylsnckCTiCEs 8UhgOLVIhNLcJiwb+elqPtzqRJEV6qABBw/fVhDAL7kM0jOclnNSuNcTfOniP1IC j0sthxw473kxR/4JC6cmULS6MsHyCbpWGSkII/bpjPrzoeF2g69YHffAKnxxXIs1 OGrZOmesGfRl8+9lwBzrMIM1+EjT1SDCO3fZoac1cdtV+sTsz8ewAIConCLkd49M WfVFEz5EmBoNlD7rMIZYPPlAiHNDsSQxPtP5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUa02M0VtLqhBhqD3Uek2A3cWOU/MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2EwMk0wVnRMcWhCaHFEM1Vl azJBM2NXT1VfTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sawwDQYJKoZIhvcNAQELBQADggEBAFvzqa+q9r9OLZS7SKiCwcaR0moCL5dz/tfd Ia36Piq51ceKMc7dq9bcHG8LPy0viKcETiBJCb5jFUd4YgmowOa1Yaike97ZuOd0 6VnZX1hDy39XftHi0wGRbmq893Zkl0MMl4YIZK2BjJunUywCO41Ks3xPIE+3P+7S I/hkCjW+WgKXiyUreAVu1XF2X1TsfeIKOdtDoI6wxOLEX7eQgsqEXNyfleM/xd4t uDoOQwXrEyHJpwGj9Nw9Wlv8WBmpSGM9NXKDySnoo5PAsTzx7aR6/ucfjjfeLPru DAtHP6UDjY5poOXQQk2Yg/DmJKaQMK4xbLm7vSY6hrDM13IMQSk= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org