$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kcrApf24vlDtWW_wt3kPsSk3Ddw.roa File: kcrApf24vlDtWW_wt3kPsSk3Ddw.roa (raw, json) Hash identifier: 0REmz+t1A1Z8Lv0u4B+3JFHh2zhFgiwrkJUFzd+gJMQ= Subject key identifier: 91:CA:C0:A5:FD:B8:BE:50:ED:59:6F:F0:B7:79:0F:B1:29:37:0D:DC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A31 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kcrApf24vlDtWW_wt3kPsSk3Ddw.roa Signing time: Fri 01 Sep 2023 10:07:36 +0000 ROA not before: Fri 01 Sep 2023 10:07:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10801 (0x2a31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=91CAC0A5FDB8BE50ED596FF0B7790FB129370DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6a:b9:9b:5b:18:d8:5d:f2:a7:a3:3b:66:99: 48:33:8e:52:b6:00:bf:01:5b:1c:e7:36:b1:52:af: 4d:a4:9f:42:1e:33:39:09:eb:88:a7:c4:f9:f7:77: fd:af:6b:6f:fa:16:e5:75:cb:c2:d4:de:0d:90:f2: 33:04:df:cd:f4:31:0b:87:09:fb:4f:1a:5f:af:47: 6f:41:02:e0:c4:d8:6c:86:39:24:7b:c7:a2:92:1d: 6d:45:71:c6:a3:92:a7:a9:cc:1e:70:3e:65:b2:18: b6:01:7b:a4:83:11:b7:d8:22:cc:c3:73:61:55:16: 6d:0b:ba:ea:3f:97:0f:f8:e8:7a:3e:b1:fd:40:84: 1f:6b:1d:b4:0e:d7:9b:a2:d2:e5:c7:0a:cf:41:d3: 73:37:f7:13:4d:74:8b:0b:ab:46:51:6a:f6:96:cf: 5b:e4:5a:19:35:ba:b1:d6:57:86:72:3c:ad:5d:f6: ac:e9:fe:75:7d:6a:d5:b6:6b:72:60:3f:bf:77:50: e1:e3:32:3b:9d:75:71:24:e7:f5:b8:5f:63:7d:77: be:c4:64:1e:b1:13:ab:ca:d7:05:1a:20:34:c5:81: 9a:4d:e3:27:a4:80:a4:8e:6a:13:17:bb:09:40:94: 43:85:6c:bc:76:6b:1d:f2:91:84:66:cb:1f:bd:d4: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CA:C0:A5:FD:B8:BE:50:ED:59:6F:F0:B7:79:0F:B1:29:37:0D:DC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kcrApf24vlDtWW_wt3kPsSk3Ddw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.192.0/21 Signature Algorithm: sha256WithRSAEncryption 1f:c4:10:08:b5:0b:fd:81:c4:5c:3a:95:86:57:f3:50:9e:aa: c9:d7:91:f8:36:32:a7:9e:be:bf:04:2c:3b:ba:83:f5:9b:d2: b5:6d:3b:85:2b:91:c5:60:a0:76:91:a5:32:ff:5b:6b:0f:d6: b6:90:a2:7f:a4:44:51:7d:6c:ac:97:87:3d:56:f9:f9:60:36: f1:21:5f:8f:49:1a:f4:7a:47:4e:e6:90:d4:ab:01:d2:c0:5a: fa:85:f5:42:6b:fa:a1:92:fc:f3:2f:41:e9:d0:6f:43:3c:16: 9a:83:b6:3b:84:41:7f:f4:1f:a4:23:54:55:27:de:d0:7d:6d: df:27:96:09:3c:04:df:4f:db:e9:ab:39:e0:74:15:34:73:53: 9d:50:fb:67:18:7c:46:8c:a8:e5:73:75:58:ee:0d:c5:f0:ed: c5:28:65:5c:5c:27:7a:d2:7e:33:2c:dc:ab:f5:e0:ff:3b:2a: ea:12:51:d4:d2:95:56:c8:58:81:3c:76:ea:b2:e4:39:35:d6: df:ae:34:f8:ca:cb:7b:e0:13:9b:e0:ee:06:7d:d4:54:4d:b3: e9:91:86:4a:75:72:50:74:15:c8:93:a1:7a:e5:99:1b:aa:38: 8a:8e:22:29:9d:23:cc:50:cf:2a:4d:2d:5e:db:10:2e:e4:2e: 13:3d:65:2c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkxQ0FDMEE1RkRCOEJF NTBFRDU5NkZGMEI3NzkwRkIxMjkzNzBEREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgarmbWxjYXfKnoztmmUgzjlK2AL8BWxznNrFSr02kn0IeMzkJ 64inxPn3d/2va2/6FuV1y8LU3g2Q8jME3830MQuHCftPGl+vR29BAuDE2GyGOSR7 x6KSHW1FccajkqepzB5wPmWyGLYBe6SDEbfYIszDc2FVFm0Luuo/lw/46Ho+sf1A hB9rHbQO15ui0uXHCs9B03M39xNNdIsLq0ZRavaWz1vkWhk1urHWV4ZyPK1d9qzp /nV9atW2a3JgP793UOHjMjuddXEk5/W4X2N9d77EZB6xE6vK1wUaIDTFgZpN4yek gKSOahMXuwlAlEOFbLx2ax3ykYRmyx+91HO1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkcrApf24vlDtWW/wt3kPsSk3DdwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tjckFwZjI0dmxEdFdXX3d0 M2tQc1NrM0Rkdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 scAwDQYJKoZIhvcNAQELBQADggEBAB/EEAi1C/2BxFw6lYZX81CeqsnXkfg2Mqee vr8ELDu6g/Wb0rVtO4UrkcVgoHaRpTL/W2sP1raQon+kRFF9bKyXhz1W+flgNvEh X49JGvR6R07mkNSrAdLAWvqF9UJr+qGS/PMvQenQb0M8FpqDtjuEQX/0H6QjVFUn 3tB9bd8nlgk8BN9P2+mrOeB0FTRzU51Q+2cYfEaMqOVzdVjuDcXw7cUoZVxcJ3rS fjMs3Kv14P87KuoSUdTSlVbIWIE8duqy5Dk11t+uNPjKy3vgE5vg7gZ91FRNs+mR hkp1clB0FciToXrlmRuqOIqOIimdI8xQzypNLV7bEC7kLhM9ZSw= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org