$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lcytR53hHesKs1w4TpJswx7Hw7I.roa File: lcytR53hHesKs1w4TpJswx7Hw7I.roa (raw, json) Hash identifier: DMKAjAfi2KljgPwQbY5PuYj/26S2ZMQfZ2FeEoVt4EE= Subject key identifier: 95:CC:AD:47:9D:E1:1D:EB:0A:B3:5C:38:4E:92:6C:C3:1E:C7:C3:B2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2ACC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lcytR53hHesKs1w4TpJswx7Hw7I.roa Signing time: Fri 01 Sep 2023 10:08:18 +0000 ROA not before: Fri 01 Sep 2023 10:08:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10956 (0x2acc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=95CCAD479DE11DEB0AB35C384E926CC31EC7C3B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:52:a2:02:24:9f:31:3a:6b:31:53:56:3f: dd:05:cc:10:f8:6f:db:48:f1:46:fb:77:b1:69:cb: 45:b6:a6:de:59:29:5c:90:e7:83:1b:5c:65:c9:08: fd:cd:48:93:26:35:65:b0:8e:c5:d5:db:df:1f:e9: 49:2d:2b:cd:b8:0d:96:6f:60:8d:5f:c7:42:fd:f1: c2:d8:d1:94:83:d5:ab:eb:2a:e2:42:f8:13:44:7a: 80:ba:f5:8f:38:ba:d9:9c:23:43:ef:3e:0e:11:86: 85:5a:2d:ac:26:7a:7c:a7:d2:43:c8:27:5f:f4:fb: fc:04:9a:c1:d5:53:fd:ab:9a:98:12:9e:56:d7:b1: eb:fa:43:72:70:e1:74:c8:2d:d8:39:c7:a8:4b:46: f2:f1:8b:ff:84:5f:b6:bf:b2:6e:ec:9a:d6:49:82: dc:2f:83:28:92:40:67:a5:2d:97:2d:3c:07:96:d1: 0e:b3:59:fe:de:66:5c:75:0c:63:fa:00:ef:c2:d2: dc:a8:6a:48:0b:d1:cb:b3:c7:03:7e:f0:20:93:4e: cf:d2:d6:c4:b9:1a:66:61:c5:83:c7:e6:ab:2e:45: 0d:4e:b2:7d:48:f2:e2:0b:6b:d4:de:6a:33:e7:d8: d3:d7:1d:b2:0d:08:8a:34:58:ff:b5:65:26:62:64: a8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CC:AD:47:9D:E1:1D:EB:0A:B3:5C:38:4E:92:6C:C3:1E:C7:C3:B2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lcytR53hHesKs1w4TpJswx7Hw7I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.48.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:04:91:ad:cd:3c:c1:08:ee:93:f4:f6:c8:ec:19:d8:66:a5: 87:1a:fa:bd:a2:60:64:19:51:e7:b0:12:bb:fb:bc:af:df:21: ee:8c:77:25:ff:e3:3f:04:1e:7c:98:b5:bb:e1:a9:e3:65:86: db:b2:16:2e:f1:f6:df:be:e0:64:8a:7e:26:52:8a:fe:3f:cd: e9:ad:ff:1c:fe:c8:0b:85:de:47:b8:2f:e6:34:73:ac:44:c6: 9c:86:2d:98:e2:db:ee:86:46:eb:14:74:5a:9c:12:64:5b:0c: d3:1c:89:ec:6a:78:36:f4:85:b8:0e:49:1e:65:84:f1:f9:f4: fb:5e:e8:77:7d:be:62:ab:17:44:3f:d2:da:03:f9:ab:33:4b: 7c:60:a7:0b:15:97:e0:82:64:87:7b:63:8f:27:03:f8:22:72: 4b:9e:94:4f:6f:67:09:a4:f3:59:0d:4e:ed:c9:d8:a8:e2:3f: 8e:d3:a1:e0:8a:c4:31:c8:c2:c4:b6:f4:ab:28:36:a8:c4:d2: 33:54:61:6d:59:0b:7d:d9:55:97:f4:55:64:3d:72:0b:37:f7: 59:04:e4:77:10:13:ef:e4:e3:3e:93:1e:ce:d2:a7:79:76:17: f7:62:7c:5f:22:33:a6:e5:58:69:c5:f5:48:5e:e4:6f:5e:62: 6d:27:f0:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk1Q0NBRDQ3OURFMTFE RUIwQUIzNUMzODRFOTI2Q0MzMUVDN0MzQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6ilKiAiSfMTprMVNWP90FzBD4b9tI8Ub7d7Fpy0W2pt5ZKVyQ 54MbXGXJCP3NSJMmNWWwjsXV298f6UktK824DZZvYI1fx0L98cLY0ZSD1avrKuJC +BNEeoC69Y84utmcI0PvPg4RhoVaLawmenyn0kPIJ1/0+/wEmsHVU/2rmpgSnlbX sev6Q3Jw4XTILdg5x6hLRvLxi/+EX7a/sm7smtZJgtwvgyiSQGelLZctPAeW0Q6z Wf7eZlx1DGP6AO/C0tyoakgL0cuzxwN+8CCTTs/S1sS5GmZhxYPH5qsuRQ1Osn1I 8uILa9TeajPn2NPXHbINCIo0WP+1ZSZiZKibAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlcytR53hHesKs1w4TpJswx7Hw7IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xjeXRSNTNoSGVzS3MxdzRU cEpzd3g3SHc3SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sTAwDQYJKoZIhvcNAQELBQADggEBAH0Eka3NPMEI7pP09sjsGdhmpYca+r2iYGQZ UeewErv7vK/fIe6MdyX/4z8EHnyYtbvhqeNlhtuyFi7x9t++4GSKfiZSiv4/zemt /xz+yAuF3ke4L+Y0c6xExpyGLZji2+6GRusUdFqcEmRbDNMciexqeDb0hbgOSR5l hPH59Pte6Hd9vmKrF0Q/0toD+aszS3xgpwsVl+CCZId7Y48nA/gickuelE9vZwmk 81kNTu3J2KjiP47ToeCKxDHIwsS29KsoNqjE0jNUYW1ZC33ZVZf0VWQ9cgs391kE 5HcQE+/k4z6THs7Sp3l2F/difF8iM6blWGnF9Uhe5G9eYm0n8O4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org