$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gJcHMt44F576lMyg8RlwLuwsCh8.roa File: gJcHMt44F576lMyg8RlwLuwsCh8.roa (raw, json) Hash identifier: DhM2XKd7r1c8rnFQNuQVApN5gwsBx+TZ3EdmtB/x7rQ= Subject key identifier: 80:97:07:32:DE:38:17:9E:FA:94:CC:A0:F1:19:70:2E:EC:2C:0A:1F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3174 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gJcHMt44F576lMyg8RlwLuwsCh8.roa Signing time: Mon 26 Aug 2024 05:30:28 +0000 ROA not before: Mon 26 Aug 2024 05:30:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12660 (0x3174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=80970732DE38179EFA94CCA0F119702EEC2C0A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:4b:d1:36:40:92:c8:4c:f2:20:87:54:f0: 43:5e:df:18:1e:56:4f:13:b6:75:8b:28:b4:b1:0a: 90:bb:ff:19:52:d5:ee:9f:2b:67:d3:ca:ac:d3:0a: ef:55:0f:0b:5e:28:a3:a4:61:4d:51:fe:ab:a4:89: 45:2f:d0:2e:96:54:b7:c5:3f:06:33:a3:18:2c:d4: 69:12:9d:ca:ff:06:9f:5a:bf:07:33:f3:b4:16:76: 43:6f:e5:98:ae:ac:f9:ac:0e:7e:50:d4:05:36:90: fe:08:23:e0:5f:86:5b:f9:bb:8a:f2:79:47:8f:d7: 2d:d9:67:5a:a8:a9:55:b2:b7:9b:46:0f:1b:48:79: 64:2c:9e:1a:f6:31:70:39:cc:24:e4:6b:60:a4:a4: 6a:1c:0e:8b:5e:67:9e:20:b1:35:fb:84:82:d4:46: 25:8e:08:cd:0b:9b:a6:e4:1b:b9:94:64:45:34:d9: 70:94:6a:82:4a:2e:23:4d:ec:6d:86:91:c0:60:14: 77:ce:f4:61:40:06:d0:c8:de:83:47:9f:e1:49:a1: 08:72:6e:cd:12:e3:d7:cc:48:15:07:30:67:87:10: df:2e:07:f6:ce:0f:95:71:22:39:ac:54:56:f3:8d: 2a:b4:67:80:1c:d4:4e:82:fc:77:00:87:1e:f0:01: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:97:07:32:DE:38:17:9E:FA:94:CC:A0:F1:19:70:2E:EC:2C:0A:1F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gJcHMt44F576lMyg8RlwLuwsCh8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.112.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:84:74:ec:0e:6a:7a:6b:13:83:01:04:4d:6b:e2:0f:5b:d8: ec:b1:5c:78:93:1b:58:d6:8d:84:31:40:dc:91:40:fe:1a:65: 31:4f:70:68:8f:82:0f:03:cb:17:78:cc:78:ed:2c:00:29:bc: fd:83:82:1a:40:17:25:94:0f:f3:b5:df:5c:99:a0:2d:33:ce: 59:0f:ae:c9:d6:79:0e:3e:91:17:37:0a:f4:44:b3:66:19:36: 21:99:44:f6:21:55:cc:4a:c9:ea:4e:3d:b8:ae:97:82:43:ce: 19:83:8c:8e:55:19:56:41:a9:73:f3:cc:3e:94:8b:3c:3e:f9: e4:41:b3:5f:81:1b:cb:96:53:41:d4:ec:2a:58:1d:1b:cb:3e: d5:58:97:a5:30:e0:97:98:bc:e1:6e:ec:5b:c7:07:c5:05:95: f7:f7:89:bf:91:e7:09:83:37:da:4d:00:ba:09:28:59:45:fa: 54:79:20:20:18:8a:44:25:39:22:3c:d6:d0:09:a1:86:04:17: fb:86:d7:2b:76:25:25:4d:17:c5:49:18:62:fc:ef:71:e5:76: 89:48:06:7a:08:6d:d0:80:a6:48:cd:e1:f1:ed:67:ea:f2:69: 19:22:98:75:df:cd:6a:f3:32:ac:9e:f1:bb:26:60:0b:91:5c: 0d:36:87:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwOTcwNzMyREUzODE3 OUVGQTk0Q0NBMEYxMTk3MDJFRUMyQzBBMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9GkvRNkCSyEzyIIdU8ENe3xgeVk8TtnWLKLSxCpC7/xlS1e6f K2fTyqzTCu9VDwteKKOkYU1R/qukiUUv0C6WVLfFPwYzoxgs1GkSncr/Bp9avwcz 87QWdkNv5ZiurPmsDn5Q1AU2kP4II+Bfhlv5u4ryeUeP1y3ZZ1qoqVWyt5tGDxtI eWQsnhr2MXA5zCTka2CkpGocDoteZ54gsTX7hILURiWOCM0Lm6bkG7mUZEU02XCU aoJKLiNN7G2GkcBgFHfO9GFABtDI3oNHn+FJoQhybs0S49fMSBUHMGeHEN8uB/bO D5VxIjmsVFbzjSq0Z4Ac1E6C/HcAhx7wAbuPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgJcHMt44F576lMyg8RlwLuwsCh8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dKY0hNdDQ0RjU3NmxNeWc4 Umx3THV3c0NoOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sXAwDQYJKoZIhvcNAQELBQADggEBAH6EdOwOanprE4MBBE1r4g9b2OyxXHiTG1jW jYQxQNyRQP4aZTFPcGiPgg8Dyxd4zHjtLAApvP2DghpAFyWUD/O131yZoC0zzlkP rsnWeQ4+kRc3CvREs2YZNiGZRPYhVcxKyepOPbiul4JDzhmDjI5VGVZBqXPzzD6U izw++eRBs1+BG8uWU0HU7CpYHRvLPtVYl6Uw4JeYvOFu7FvHB8UFlff3ib+R5wmD N9pNALoJKFlF+lR5ICAYikQlOSI81tAJoYYEF/uG1yt2JSVNF8VJGGL873HldolI BnoIbdCApkjN4fHtZ+ryaRkimHXfzWrzMqye8bsmYAuRXA02h94= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:40 2024 by rpki-client on console-fra.rpki-client.org