$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d5fGZjyBlCc8UP0jtwZAmmaoBjI.roa File: d5fGZjyBlCc8UP0jtwZAmmaoBjI.roa (raw, json) Hash identifier: Jhl26Gfp6JwcV8YUTgGutoZycjEYrlidwC70M0Ti0GM= Subject key identifier: 77:97:C6:66:3C:81:94:27:3C:50:FD:23:B7:06:40:9A:66:A8:06:32 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 326F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d5fGZjyBlCc8UP0jtwZAmmaoBjI.roa Signing time: Mon 26 Aug 2024 05:31:39 +0000 ROA not before: Mon 26 Aug 2024 05:31:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12911 (0x326f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7797C6663C8194273C50FD23B706409A66A80632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:a7:fa:6d:7a:5b:d8:33:94:d9:7d:61:1a: 0d:90:19:66:41:4d:ad:c7:c5:47:ea:e2:b4:4e:fb: 21:bc:5a:6b:c6:c1:25:01:f8:c6:18:24:2c:fb:6c: b6:36:6a:69:ab:53:20:c1:49:68:d6:37:25:2e:7a: 5a:5e:69:8a:25:9f:74:e6:ce:1a:87:32:24:41:4b: 58:93:5e:a3:a4:48:c6:b9:39:9b:82:85:83:f2:23: 7d:5b:4a:89:bb:12:da:0e:45:d1:f7:4d:d8:50:31: 02:40:b5:e7:3d:b9:36:a6:6e:b6:52:e8:5c:aa:dc: f3:d7:9b:d3:2d:56:75:8f:bf:8c:30:1e:01:a1:1b: b9:f6:89:0b:e6:49:09:0b:0a:10:ed:fb:84:f6:95: 54:a3:8d:f3:21:96:80:7c:5d:33:50:24:78:b5:0a: e1:4e:a2:91:9f:91:84:6b:25:26:3f:61:8a:63:7b: d9:7e:0d:72:f3:bd:35:4a:bf:2b:bf:da:ad:2e:53: c1:e7:d1:78:38:af:85:6f:46:03:7c:1d:79:01:68: 43:82:f1:e4:09:9f:c8:6b:8d:6f:87:e6:b3:69:a9: 54:fa:4d:b4:5c:05:9e:d6:43:42:ad:d7:18:2b:66: 53:5c:b1:1e:55:2d:de:89:d2:a0:1c:4f:77:f5:5e: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:97:C6:66:3C:81:94:27:3C:50:FD:23:B7:06:40:9A:66:A8:06:32 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d5fGZjyBlCc8UP0jtwZAmmaoBjI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.228.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:c8:7b:73:e5:8f:00:d6:3d:fd:3c:2e:d3:08:3e:8f:a0:23: f5:7c:00:c7:2d:41:73:c6:64:d6:7f:d3:0b:6e:2e:88:0a:6b: fa:b4:ed:09:e4:f4:84:d1:69:7a:50:14:bb:cf:a5:07:07:27: d3:cb:cc:44:77:6e:08:f6:ad:7a:e2:1e:23:eb:2d:d5:4b:3d: df:8f:e7:93:fc:dc:d7:a4:1d:38:a1:40:99:e4:f6:06:2b:52: 46:c9:6f:9f:17:4b:13:1c:dd:98:f2:84:6a:0e:d0:a2:55:9d: 49:5a:4f:7b:43:80:ac:83:34:32:89:6b:94:02:2c:67:53:e3: e5:74:6c:80:8d:d2:51:00:38:e2:a5:c8:68:18:5d:36:f9:4c: c9:ed:30:40:35:ab:37:d4:f1:4d:d8:ca:d2:f2:07:6c:d9:1f: 91:5a:76:41:40:d2:fa:07:25:29:e3:7e:2e:ae:9a:22:1f:00: df:91:6b:a8:ca:90:5a:3d:ed:52:6c:f1:1e:e5:eb:6a:09:16: 8e:04:5e:12:ff:8b:a1:c5:91:07:7b:42:60:b4:d5:62:79:f0: a9:07:c5:6b:0e:cc:be:76:24:7a:a8:7b:59:0c:8d:0b:f3:eb: 43:45:03:01:4f:15:61:1e:d3:b9:c2:3c:fb:4f:47:c2:0b:0a: 05:24:9f:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3OTdDNjY2M0M4MTk0 MjczQzUwRkQyM0I3MDY0MDlBNjZBODA2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwJaf6bXpb2DOU2X1hGg2QGWZBTa3HxUfq4rRO+yG8WmvGwSUB +MYYJCz7bLY2ammrUyDBSWjWNyUuelpeaYoln3TmzhqHMiRBS1iTXqOkSMa5OZuC hYPyI31bSom7EtoORdH3TdhQMQJAtec9uTambrZS6Fyq3PPXm9MtVnWPv4wwHgGh G7n2iQvmSQkLChDt+4T2lVSjjfMhloB8XTNQJHi1CuFOopGfkYRrJSY/YYpje9l+ DXLzvTVKvyu/2q0uU8Hn0Xg4r4VvRgN8HXkBaEOC8eQJn8hrjW+H5rNpqVT6TbRc BZ7WQ0Kt1xgrZlNcsR5VLd6J0qAcT3f1XpaXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUd5fGZjyBlCc8UP0jtwZAmmaoBjIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Q1ZkdaanlCbENjOFVQMGp0 d1pBbW1hb0JqSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sOQwDQYJKoZIhvcNAQELBQADggEBAG7Ie3PljwDWPf08LtMIPo+gI/V8AMctQXPG ZNZ/0wtuLogKa/q07Qnk9ITRaXpQFLvPpQcHJ9PLzER3bgj2rXriHiPrLdVLPd+P 55P83NekHTihQJnk9gYrUkbJb58XSxMc3ZjyhGoO0KJVnUlaT3tDgKyDNDKJa5QC LGdT4+V0bICN0lEAOOKlyGgYXTb5TMntMEA1qzfU8U3YytLyB2zZH5FadkFA0voH JSnjfi6umiIfAN+Ra6jKkFo97VJs8R7l62oJFo4EXhL/i6HFkQd7QmC01WJ58KkH xWsOzL52JHqoe1kMjQvz60NFAwFPFWEe07nCPPtPR8ILCgUkn2o= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org