$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDEWAaxIeZI9bgcrDyuCwkvoKa8.roa File: kDEWAaxIeZI9bgcrDyuCwkvoKa8.roa (raw, json) Hash identifier: vNXxBKgeiFCQou3+M8HNSZ11TsuKRSfGN7vgH4EB3uE= Subject key identifier: 90:31:16:01:AC:48:79:92:3D:6E:07:2B:0F:2B:82:C2:4B:E8:29:AF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3254 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDEWAaxIeZI9bgcrDyuCwkvoKa8.roa Signing time: Mon 26 Aug 2024 05:31:33 +0000 ROA not before: Mon 26 Aug 2024 05:31:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.184.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12884 (0x3254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=90311601AC4879923D6E072B0F2B82C24BE829AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:28:1d:45:12:2c:54:20:26:35:4d:8a:65: 9b:d2:da:02:5b:5d:37:31:1d:dd:4b:c6:b3:bc:9f: db:0c:f1:e1:1f:2c:9a:5e:ed:5d:ee:d4:ef:c5:d5: 81:aa:3a:c3:b4:cd:4d:6b:ee:e8:9a:b7:74:ba:1c: ff:95:04:d6:3b:e2:d0:62:f8:16:9c:13:0e:04:ce: bd:10:73:2a:ce:ac:7e:6a:48:de:87:28:25:51:b8: a8:80:b5:02:57:89:08:cd:de:7a:27:5e:c6:dd:87: b4:8c:13:8b:91:fa:a2:4b:17:ab:7a:67:d1:d5:7d: 14:a4:c2:0f:13:60:8c:0c:61:a7:56:0b:69:3c:25: cf:bd:27:12:7c:a9:50:6d:6c:37:f2:6a:c7:76:59: 9f:87:2c:cb:6b:9a:52:e5:f9:f4:20:a7:11:fe:fb: 12:70:3b:29:b2:3f:5e:08:ad:b3:47:94:fd:93:9f: 39:cb:ce:4e:95:74:44:69:11:fe:fb:03:59:13:40: c9:a7:86:ec:32:7c:18:49:b9:5c:5b:d8:e7:2e:a5: b0:79:37:ed:d7:66:46:61:29:93:9f:cc:9b:0f:ed: 6e:57:7c:74:ba:9f:db:77:91:5f:07:ed:80:c6:1e: 6e:40:8e:9a:3f:ad:f6:ea:0a:0e:ec:3b:ca:d6:ca: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:31:16:01:AC:48:79:92:3D:6E:07:2B:0F:2B:82:C2:4B:E8:29:AF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDEWAaxIeZI9bgcrDyuCwkvoKa8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.184.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:0c:94:91:75:dc:d5:4f:c3:58:e4:2c:e9:d3:8d:91:34:fb: e8:68:b4:11:77:be:01:54:64:a4:83:9c:49:34:25:9a:57:fb: 5a:75:c8:cc:d6:7f:90:d8:6b:3f:69:02:07:1d:80:25:62:0b: 1a:eb:96:dd:79:c4:e0:29:9a:11:55:ce:73:ea:18:fc:c0:a9: 05:24:61:35:b2:e9:5b:7a:0f:e1:73:e9:95:2a:48:86:6a:56: a5:0f:c7:c8:f9:b7:7a:cc:0b:dd:b8:23:4a:c7:19:55:77:07: 51:73:5e:b9:1c:a2:36:7b:77:8e:ef:cd:93:a5:a5:28:e6:05: c8:83:86:a5:65:9b:70:60:1e:f4:53:db:86:82:f0:63:8b:0c: 0e:8a:28:f4:f2:83:5c:e1:c5:34:90:79:b3:a8:80:41:c6:17: 93:af:50:a2:7b:71:06:54:56:a5:e1:92:94:45:56:6e:d7:7a: 86:74:fa:ad:3e:f5:f4:2a:ba:0c:2f:1c:06:36:79:e7:72:fb: e6:55:70:6d:b9:f3:2e:cc:0f:11:b2:5b:d3:b7:21:81:20:7c: 21:74:c6:03:28:bb:84:0f:ed:94:5d:bf:89:2d:65:d5:ce:1a: 0f:e8:1e:cb:0a:33:8e:e0:53:0a:09:01:9e:e0:4b:03:7e:d7: ec:3e:aa:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMlQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwMzExNjAxQUM0ODc5 OTIzRDZFMDcyQjBGMkI4MkMyNEJFODI5QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCuCgdRRIsVCAmNU2KZZvS2gJbXTcxHd1LxrO8n9sM8eEfLJpe 7V3u1O/F1YGqOsO0zU1r7uiat3S6HP+VBNY74tBi+BacEw4Ezr0QcyrOrH5qSN6H KCVRuKiAtQJXiQjN3nonXsbdh7SME4uR+qJLF6t6Z9HVfRSkwg8TYIwMYadWC2k8 Jc+9JxJ8qVBtbDfyasd2WZ+HLMtrmlLl+fQgpxH++xJwOymyP14IrbNHlP2TnznL zk6VdERpEf77A1kTQMmnhuwyfBhJuVxb2OcupbB5N+3XZkZhKZOfzJsP7W5XfHS6 n9t3kV8H7YDGHm5Ajpo/rfbqCg7sO8rWyoYBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkDEWAaxIeZI9bgcrDyuCwkvoKa8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tERVdBYXhJZVpJOWJnY3JE eXVDd2t2b0thOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sbgwDQYJKoZIhvcNAQELBQADggEBAI8MlJF13NVPw1jkLOnTjZE0++hotBF3vgFU ZKSDnEk0JZpX+1p1yMzWf5DYaz9pAgcdgCViCxrrlt15xOApmhFVznPqGPzAqQUk YTWy6Vt6D+Fz6ZUqSIZqVqUPx8j5t3rMC924I0rHGVV3B1FzXrkcojZ7d47vzZOl pSjmBciDhqVlm3BgHvRT24aC8GOLDA6KKPTyg1zhxTSQebOogEHGF5OvUKJ7cQZU VqXhkpRFVm7XeoZ0+q0+9fQqugwvHAY2eedy++ZVcG258y7MDxGyW9O3IYEgfCF0 xgMou4QP7ZRdv4ktZdXOGg/oHssKM47gUwoJAZ7gSwN+1+w+qpk= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org