$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksyXd6FI04-0qB3zDheFl2Uiltg.roa File: ksyXd6FI04-0qB3zDheFl2Uiltg.roa (raw, json) Hash identifier: k6JTze/J1OeiWdUa708jIApxhtKOOCPN7vMHp9smaFE= Subject key identifier: 92:CC:97:77:A1:48:D3:8F:B4:A8:1D:F3:0E:17:85:97:65:22:96:D8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3250 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksyXd6FI04-0qB3zDheFl2Uiltg.roa Signing time: Mon 26 Aug 2024 05:31:32 +0000 ROA not before: Mon 26 Aug 2024 05:31:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12880 (0x3250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=92CC9777A148D38FB4A81DF30E178597652296D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:de:49:94:dd:fb:98:8d:ff:ee:73:ee:ce: 20:9d:28:f8:2a:36:9f:ee:1b:3f:51:df:b4:6b:22: e6:79:16:47:1a:01:8f:f7:e0:e2:45:47:a8:80:64: bb:d1:35:4a:86:68:39:67:5f:ab:57:d6:12:98:d0: 08:12:5d:77:dd:96:03:af:60:81:79:dd:3a:a6:f6: 50:cb:fc:67:4f:6d:ca:d8:ef:2f:cd:d8:e4:50:09: 20:8c:77:43:4c:87:ed:1d:9d:01:f8:a9:eb:12:c3: 79:56:85:6e:4d:b9:3f:4a:61:0f:0d:a5:e9:24:6a: bb:85:93:6c:5f:f6:6e:8a:05:9c:d2:a2:e4:a4:ed: b6:e7:f8:e1:b2:7b:3c:7a:0e:7f:3f:c5:d5:8d:90: c6:c6:fc:bd:3b:35:6c:c5:2e:71:00:d5:1f:02:ae: ff:e2:d3:b7:a7:57:ef:8e:55:3b:1d:72:df:2a:d2: eb:f6:03:4c:9f:6f:b9:75:55:3c:24:f9:2e:38:45: db:13:b6:96:13:78:e6:22:32:c3:37:2d:02:7a:e2: d3:a4:a7:c9:83:67:4c:55:6d:9e:2a:95:e5:f8:e3: b3:28:d3:06:1c:b5:25:7b:de:8f:c2:c0:f0:b2:d3: bc:84:f3:4b:10:9f:69:25:8d:04:30:72:ea:e3:70: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CC:97:77:A1:48:D3:8F:B4:A8:1D:F3:0E:17:85:97:65:22:96:D8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksyXd6FI04-0qB3zDheFl2Uiltg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.222.0/24 Signature Algorithm: sha256WithRSAEncryption ac:a9:1c:58:41:d7:d9:99:8a:07:25:ec:93:30:e2:ac:42:a4: 7c:d7:d4:0c:8b:64:f7:18:4d:fa:0f:22:ab:35:99:a8:4e:c9: c0:0b:74:fd:9c:47:61:2a:59:e8:0c:b6:8f:ec:43:c3:e5:a9: 30:37:da:46:05:da:82:23:f9:31:75:f6:32:45:0d:be:13:ef: 50:01:3f:d2:60:62:70:9a:59:b6:7f:d6:f3:5c:41:ae:0c:7f: da:5c:91:65:05:de:a7:57:ff:ed:b7:54:ed:42:e4:ce:c2:16: 8d:a5:7c:b5:48:a3:45:8b:e6:7c:f1:c6:5a:c8:c7:97:d1:42: 9d:13:ca:43:7a:c6:f4:75:4a:10:b5:f3:c7:f5:9f:aa:45:95: f7:6b:e7:72:1c:7b:88:5b:a4:9f:75:fb:45:9f:85:f8:0c:e0: 13:d5:0e:b3:d2:61:5a:38:93:1d:cf:51:4d:9f:77:68:dc:4d: 48:4e:be:52:97:48:78:f9:21:90:dc:52:47:2f:2b:f4:b3:19: f6:c9:96:f0:7a:b2:ba:7b:b8:25:01:19:3d:cd:ae:73:6c:08: 85:3f:b7:b5:5e:3b:79:69:d1:e5:4e:e3:e3:48:cc:b4:ac:26: 4b:d0:c8:22:97:3d:a9:2a:dc:2d:8c:b5:7f:bb:63:21:0e:1d: 7d:95:c1:d9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkyQ0M5Nzc3QTE0OEQz OEZCNEE4MURGMzBFMTc4NTk3NjUyMjk2RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu4t5JlN37mI3/7nPuziCdKPgqNp/uGz9R37RrIuZ5FkcaAY/3 4OJFR6iAZLvRNUqGaDlnX6tX1hKY0AgSXXfdlgOvYIF53Tqm9lDL/GdPbcrY7y/N 2ORQCSCMd0NMh+0dnQH4qesSw3lWhW5NuT9KYQ8NpekkaruFk2xf9m6KBZzSouSk 7bbn+OGyezx6Dn8/xdWNkMbG/L07NWzFLnEA1R8Crv/i07enV++OVTsdct8q0uv2 A0yfb7l1VTwk+S44RdsTtpYTeOYiMsM3LQJ64tOkp8mDZ0xVbZ4qleX447Mo0wYc tSV73o/CwPCy07yE80sQn2kljQQwcurjcBJnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUksyXd6FI04+0qB3zDheFl2UiltgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tzeVhkNkZJMDQtMHFCM3pE aGVGbDJVaWx0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sd4wDQYJKoZIhvcNAQELBQADggEBAKypHFhB19mZigcl7JMw4qxCpHzX1AyLZPcY TfoPIqs1mahOycALdP2cR2EqWegMto/sQ8PlqTA32kYF2oIj+TF19jJFDb4T71AB P9JgYnCaWbZ/1vNcQa4Mf9pckWUF3qdX/+23VO1C5M7CFo2lfLVIo0WL5nzxxlrI x5fRQp0TykN6xvR1ShC188f1n6pFlfdr53Ice4hbpJ91+0WfhfgM4BPVDrPSYVo4 kx3PUU2fd2jcTUhOvlKXSHj5IZDcUkcvK/SzGfbJlvB6srp7uCUBGT3NrnNsCIU/ t7VeO3lp0eVO4+NIzLSsJkvQyCKXPakq3C2MtX+7YyEOHX2Vwdk= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org