$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e34QiTtO_CmFWQj5s27hAZfRQgI.roa File: e34QiTtO_CmFWQj5s27hAZfRQgI.roa (raw, json) Hash identifier: lCohuucsKWa7WdWDemB2RiXp4gmqliC3/DBg2hSN2/Y= Subject key identifier: 7B:7E:10:89:3B:4E:FC:29:85:59:08:F9:B3:6E:E1:01:97:D1:42:02 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3059 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e34QiTtO_CmFWQj5s27hAZfRQgI.roa Signing time: Mon 26 Aug 2024 05:29:23 +0000 ROA not before: Mon 26 Aug 2024 05:29:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12377 (0x3059) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7B7E10893B4EFC29855908F9B36EE10197D14202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:a5:4b:3f:23:83:28:06:36:d2:8f:d6:7e: ed:cd:f8:b5:b9:22:d7:c2:e9:d5:bd:8e:f3:4e:6c: 90:9a:59:16:30:7e:b8:7b:0d:4e:e0:15:a6:d3:78: 19:57:2e:da:ca:21:e3:ac:de:18:46:90:3f:46:23: 1d:fb:13:68:7d:5c:76:8b:db:25:e4:a7:88:7d:f4: f4:a3:f6:08:b7:58:38:44:39:45:12:7a:fc:bf:de: fa:68:44:25:27:41:b9:15:b2:e7:32:d4:d6:cb:6a: 6e:37:46:1e:58:ee:b4:d2:62:65:e1:dd:87:86:87: eb:85:58:e1:20:02:e4:6a:34:df:44:44:33:5c:d3: fd:54:d5:06:34:cd:8a:2c:75:db:5e:70:fd:06:42: c7:9a:89:ad:63:66:50:b6:75:0a:a0:2f:b2:02:f7: de:2a:dd:2e:74:64:11:35:a6:60:06:f0:38:12:c5: de:50:2d:ba:87:b9:62:1c:d7:a5:ee:52:e3:cf:b4: 48:4e:8a:17:73:ba:03:82:33:88:f6:c9:77:ac:ee: cb:0c:27:c7:aa:35:d5:bb:b6:02:42:ab:1a:0e:95: 32:58:10:24:f2:da:94:5b:10:09:15:ef:72:d9:fc: c3:f7:bb:0c:b1:28:e1:64:65:ad:78:d1:14:f9:c0: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7E:10:89:3B:4E:FC:29:85:59:08:F9:B3:6E:E1:01:97:D1:42:02 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e34QiTtO_CmFWQj5s27hAZfRQgI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.160.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:0b:d5:20:d8:82:aa:f4:3f:85:a4:81:44:f0:41:e1:0e:fb: cf:c7:d6:70:ff:d6:74:36:1c:6a:5b:1f:8d:55:81:46:3c:49: 46:49:f9:4f:09:f0:22:05:46:ba:a9:2a:2f:e5:d7:67:d9:65: 92:75:5f:23:eb:67:b6:d0:ca:d6:ad:fc:02:73:19:2a:68:94: 2b:d5:29:89:c7:20:3f:16:7f:61:87:bb:54:2e:ee:cf:cf:c7: 65:a1:38:00:b8:3d:06:bc:ac:22:55:01:dc:e9:47:5c:93:0c: ba:05:41:64:f9:a7:d3:b1:45:9d:3f:cc:68:ba:44:13:cb:22: 55:37:84:dd:e1:a6:08:46:96:fd:a4:2d:7b:f8:c4:a1:73:8e: 81:b4:b1:8c:18:79:27:f5:a7:b9:7d:1d:c2:3f:7e:f5:d6:23: 80:30:2f:0a:96:37:ed:b9:8d:8c:0a:56:9d:99:6d:e1:61:1f: 02:21:4d:a2:27:4a:db:95:06:4f:ea:dc:29:9c:df:e1:c5:c3: 8c:97:40:14:38:4e:24:18:e7:74:e3:39:af:19:cc:ab:b2:23: 30:6b:7b:78:59:e4:ce:bd:bd:65:01:e1:80:2f:3a:8c:06:0b: 09:3f:4e:31:93:d9:52:69:b0:c4:54:f6:b8:f2:db:f5:22:69: ea:4e:9d:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdCN0UxMDg5M0I0RUZD Mjk4NTU5MDhGOUIzNkVFMTAxOTdEMTQyMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR6aVLPyODKAY20o/Wfu3N+LW5ItfC6dW9jvNObJCaWRYwfrh7 DU7gFabTeBlXLtrKIeOs3hhGkD9GIx37E2h9XHaL2yXkp4h99PSj9gi3WDhEOUUS evy/3vpoRCUnQbkVsucy1NbLam43Rh5Y7rTSYmXh3YeGh+uFWOEgAuRqNN9ERDNc 0/1U1QY0zYosddtecP0GQseaia1jZlC2dQqgL7IC994q3S50ZBE1pmAG8DgSxd5Q LbqHuWIc16XuUuPPtEhOihdzugOCM4j2yXes7ssMJ8eqNdW7tgJCqxoOlTJYECTy 2pRbEAkV73LZ/MP3uwyxKOFkZa140RT5wDxpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUe34QiTtO/CmFWQj5s27hAZfRQgIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2UzNFFpVHRPX0NtRldRajVz MjdoQVpmUlFnSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sKAwDQYJKoZIhvcNAQELBQADggEBABoL1SDYgqr0P4WkgUTwQeEO+8/H1nD/1nQ2 HGpbH41VgUY8SUZJ+U8J8CIFRrqpKi/l12fZZZJ1XyPrZ7bQytat/AJzGSpolCvV KYnHID8Wf2GHu1Qu7s/Px2WhOAC4PQa8rCJVAdzpR1yTDLoFQWT5p9OxRZ0/zGi6 RBPLIlU3hN3hpghGlv2kLXv4xKFzjoG0sYwYeSf1p7l9HcI/fvXWI4AwLwqWN+25 jYwKVp2ZbeFhHwIhTaInStuVBk/q3Cmc3+HFw4yXQBQ4TiQY53TjOa8ZzKuyIzBr e3hZ5M69vWUB4YAvOowGCwk/TjGT2VJpsMRU9rjy2/UiaepOnW4= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org