$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jtRqpO-KQc0FZQW_yFVWR77J82U.roa File: jtRqpO-KQc0FZQW_yFVWR77J82U.roa (raw, json) Hash identifier: Gda2PYPZiGKuyU9mgqORfa0NT1K4nTzDEKC+I8ltuJM= Subject key identifier: 8E:D4:6A:A4:EF:8A:41:CD:05:65:05:BF:C8:55:56:47:BE:C9:F3:65 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30B9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jtRqpO-KQc0FZQW_yFVWR77J82U.roa Signing time: Mon 26 Aug 2024 05:29:46 +0000 ROA not before: Mon 26 Aug 2024 05:29:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12473 (0x30b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8ED46AA4EF8A41CD056505BFC8555647BEC9F365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:4f:fc:1d:24:d3:2d:ba:bb:7e:1b:c6:2a: 46:1d:d0:d2:03:1c:8f:e0:74:27:fe:21:89:f2:25: 26:1e:8a:0f:b1:37:a8:b9:60:0c:05:6a:5e:d8:11: 22:1d:e1:cc:be:af:6a:f4:b1:e4:df:21:49:e2:fd: 10:08:8e:83:69:2c:cc:3b:a3:d2:ed:f6:a9:ac:7b: ac:c4:d8:12:c8:13:ca:58:6b:7b:b6:e4:a0:3c:f0: 71:4a:12:08:fa:03:0d:de:83:fa:89:a0:2c:9b:40: 85:65:85:1e:7d:01:da:22:54:44:76:83:44:32:5e: 59:00:58:ae:fa:b3:6b:6b:8a:d5:6e:09:fd:fa:44: db:09:20:b1:e7:d5:a9:3a:6d:0d:dc:88:69:eb:a1: a3:cf:39:41:ee:fb:49:ea:28:75:36:ff:0d:1d:3b: 59:c6:26:c9:52:d2:bc:44:96:69:7f:f8:ed:b7:e2: 06:7d:e6:98:f5:c8:e7:ed:c7:60:ac:94:68:37:da: d0:86:57:01:26:7d:c1:8c:c3:0e:41:90:09:43:f4: bf:aa:1d:f6:9e:34:2c:67:06:50:49:ba:0d:16:6c: 0d:37:27:53:8d:bb:f0:bc:36:5e:94:75:fd:08:5a: 07:ab:6c:c7:99:15:2b:77:27:a3:46:9f:21:bb:7e: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:6A:A4:EF:8A:41:CD:05:65:05:BF:C8:55:56:47:BE:C9:F3:65 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jtRqpO-KQc0FZQW_yFVWR77J82U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.120.0/23 Signature Algorithm: sha256WithRSAEncryption 15:88:01:9d:5e:b2:dc:34:fa:5a:a0:9f:fe:02:ec:69:8b:dd: d2:e9:c2:8c:4d:f6:22:54:97:1a:e5:0d:06:a2:81:89:72:26: d1:73:c6:63:8d:11:ec:4f:a1:7b:97:67:4c:8f:77:4e:fb:38: 7f:c9:12:d3:13:80:6e:1b:9b:a3:bf:13:0c:af:aa:2b:53:2c: 13:01:8f:ab:7c:f5:95:7a:86:f0:27:5d:b2:64:96:d7:11:1e: 1e:77:8d:a8:af:46:c8:2a:6b:90:07:d4:70:61:cc:d6:96:92: 08:a2:8c:2e:3f:b2:c5:24:cf:d4:01:86:ca:df:9f:1a:0e:da: 5b:4a:c6:15:c3:ac:3b:62:aa:d0:7d:54:ad:df:60:ed:73:d6: d7:0e:23:3b:06:ab:c8:83:06:d4:e9:ef:ca:73:04:ef:59:62: 3e:7b:0e:bb:3c:d0:d8:7c:69:df:43:cb:28:f8:53:75:81:9f: 31:b5:f3:4c:db:06:f8:4d:bd:d2:c1:64:9c:fd:de:f3:0a:9f: d8:28:26:20:1b:e6:90:1a:84:9a:a5:4d:06:e8:c3:e2:f5:81: af:1d:d2:d3:09:2a:eb:c1:83:4b:59:ae:d4:a1:9d:bd:2b:ba: db:72:dc:f2:b7:19:a4:39:72:2f:da:7d:73:4d:2b:c1:14:a2: 3c:34:fe:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhFRDQ2QUE0RUY4QTQx Q0QwNTY1MDVCRkM4NTU1NjQ3QkVDOUYzNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/xU/8HSTTLbq7fhvGKkYd0NIDHI/gdCf+IYnyJSYeig+xN6i5 YAwFal7YESId4cy+r2r0seTfIUni/RAIjoNpLMw7o9Lt9qmse6zE2BLIE8pYa3u2 5KA88HFKEgj6Aw3eg/qJoCybQIVlhR59AdoiVER2g0QyXlkAWK76s2tritVuCf36 RNsJILHn1ak6bQ3ciGnroaPPOUHu+0nqKHU2/w0dO1nGJslS0rxElml/+O234gZ9 5pj1yOftx2CslGg32tCGVwEmfcGMww5BkAlD9L+qHfaeNCxnBlBJug0WbA03J1ON u/C8Nl6Udf0IWgerbMeZFSt3J6NGnyG7fmbDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjtRqpO+KQc0FZQW/yFVWR77J82UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2p0UnFwTy1LUWMwRlpRV195 RlZXUjc3SjgyVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sXgwDQYJKoZIhvcNAQELBQADggEBABWIAZ1estw0+lqgn/4C7GmL3dLpwoxN9iJU lxrlDQaigYlyJtFzxmONEexPoXuXZ0yPd077OH/JEtMTgG4bm6O/EwyvqitTLBMB j6t89ZV6hvAnXbJkltcRHh53jaivRsgqa5AH1HBhzNaWkgiijC4/ssUkz9QBhsrf nxoO2ltKxhXDrDtiqtB9VK3fYO1z1tcOIzsGq8iDBtTp78pzBO9ZYj57Drs80Nh8 ad9Dyyj4U3WBnzG180zbBvhNvdLBZJz93vMKn9goJiAb5pAahJqlTQbow+L1ga8d 0tMJKuvBg0tZrtShnb0rutty3PK3GaQ5ci/afXNNK8EUojw0/os= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org