$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d8FAhxwE9OjXTTmhBgUhHrKc3NQ.roa File: d8FAhxwE9OjXTTmhBgUhHrKc3NQ.roa (raw, json) Hash identifier: lT8Du1otNgi5mjIuewycSFrgVAwV8UJGOgaSLLbFHNo= Subject key identifier: 77:C1:40:87:1C:04:F4:E8:D7:4D:39:A1:06:05:21:1E:B2:9C:DC:D4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27E2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d8FAhxwE9OjXTTmhBgUhHrKc3NQ.roa Signing time: Fri 01 Sep 2023 10:04:41 +0000 ROA not before: Fri 01 Sep 2023 10:04:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 180.177.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10210 (0x27e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:41 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=77C140871C04F4E8D74D39A10605211EB29CDCD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:de:2d:f5:fb:22:5f:0c:5d:c5:0a:20:dd: bc:a1:9b:41:bd:10:18:70:77:e5:09:53:d9:12:4a: 29:15:6e:08:7a:ee:81:36:a5:f1:c0:5d:c3:bb:95: a5:db:6a:ff:d8:9d:fa:1e:4d:eb:18:6d:90:00:c3: b2:62:35:8a:4f:d4:4c:ea:91:ae:03:22:1b:e8:9d: a3:99:73:1c:0b:32:21:20:a1:28:a8:cc:ea:79:05: fe:c6:13:d0:a7:a8:a3:5f:53:86:a6:f9:e2:02:8c: 0a:da:67:19:40:9c:f5:19:e8:33:3f:7b:87:9b:ca: aa:d9:e9:83:80:80:96:96:82:18:80:f1:50:25:39: 95:4e:00:30:ab:8b:c1:c0:85:ab:97:dc:c5:2f:92: 89:e8:a1:9e:c8:fe:a3:84:1b:36:b4:08:10:59:a7: 54:1f:1e:00:d8:52:09:af:c5:94:43:23:23:34:5f: fa:08:e9:0d:09:2e:78:91:0b:ca:73:be:9d:0b:f2: 05:3a:ca:14:80:af:0a:f3:37:97:70:f8:ca:e9:48: 43:6e:6f:11:8b:64:04:e8:6c:8d:b8:b1:7b:37:6b: 21:9c:93:f1:c2:0a:ba:cd:b4:5c:e8:b4:04:3c:9e: a2:26:c8:0f:5a:f5:cd:bd:82:ec:20:8c:13:bd:75: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C1:40:87:1C:04:F4:E8:D7:4D:39:A1:06:05:21:1E:B2:9C:DC:D4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d8FAhxwE9OjXTTmhBgUhHrKc3NQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.46.0/23 Signature Algorithm: sha256WithRSAEncryption 47:37:33:70:bf:98:f5:5b:48:d7:7c:fa:25:8e:38:c5:d9:14: de:c8:8e:a6:c3:0e:47:1b:2b:c3:83:75:79:6d:a9:11:62:4d: 9b:2f:51:bd:81:21:09:1a:c2:16:0e:ac:ea:b1:e2:38:a0:d6: 0d:6c:f0:e9:b3:24:ee:44:7c:70:98:89:1c:5f:aa:de:e3:d7: 45:0d:46:68:c7:41:2f:de:90:c8:bd:7c:00:98:90:7f:bc:f4: da:43:e9:84:ff:af:b0:8b:d0:1b:f5:1c:e8:3c:eb:c7:5a:11: a3:05:bf:7d:4e:7c:25:3e:3f:94:a6:03:ac:fe:55:44:b2:89: c9:3c:bf:f1:59:63:ec:05:ee:37:09:a9:a9:fa:4a:96:69:1c: dc:61:ae:91:7b:e7:6b:f5:95:f6:76:ef:e4:9c:3a:4b:b3:69: 59:a9:69:21:03:d8:08:4a:e8:ef:6e:13:26:4b:10:7b:af:0a: 43:8d:75:6f:63:b3:7e:01:b2:16:84:df:3c:3f:ab:91:97:07: 34:06:7b:dd:07:ba:bc:56:c1:2a:c2:4e:4e:df:08:78:83:b1: f0:75:40:f2:29:03:1d:c1:d9:a6:95:0b:fb:8c:28:04:05:be: 60:20:ce:92:ac:bd:78:0e:4c:0c:21:dc:7d:af:e1:42:c2:44: 8d:41:64:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc3QzE0MDg3MUMwNEY0 RThENzREMzlBMTA2MDUyMTFFQjI5Q0RDRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYcd4t9fsiXwxdxQog3byhm0G9EBhwd+UJU9kSSikVbgh67oE2 pfHAXcO7laXbav/YnfoeTesYbZAAw7JiNYpP1Ezqka4DIhvonaOZcxwLMiEgoSio zOp5Bf7GE9CnqKNfU4am+eICjAraZxlAnPUZ6DM/e4ebyqrZ6YOAgJaWghiA8VAl OZVOADCri8HAhauX3MUvkonooZ7I/qOEGza0CBBZp1QfHgDYUgmvxZRDIyM0X/oI 6Q0JLniRC8pzvp0L8gU6yhSArwrzN5dw+MrpSENubxGLZATobI24sXs3ayGck/HC CrrNtFzotAQ8nqImyA9a9c29guwgjBO9des1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUd8FAhxwE9OjXTTmhBgUhHrKc3NQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Q4RkFoeHdFOU9qWFRUbWhC Z1VoSHJLYzNOUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sS4wDQYJKoZIhvcNAQELBQADggEBAEc3M3C/mPVbSNd8+iWOOMXZFN7IjqbDDkcb K8ODdXltqRFiTZsvUb2BIQkawhYOrOqx4jig1g1s8OmzJO5EfHCYiRxfqt7j10UN RmjHQS/ekMi9fACYkH+89NpD6YT/r7CL0Bv1HOg868daEaMFv31OfCU+P5SmA6z+ VUSyick8v/FZY+wF7jcJqan6SpZpHNxhrpF752v1lfZ27+ScOkuzaVmpaSED2AhK 6O9uEyZLEHuvCkONdW9js34BshaE3zw/q5GXBzQGe90HurxWwSrCTk7fCHiDsfB1 QPIpAx3B2aaVC/uMKAQFvmAgzpKsvXgOTAwh3H2v4ULCRI1BZOI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org