$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/njJT6kTirwKu_MaFfPDa3Xx8q9A.roa File: njJT6kTirwKu_MaFfPDa3Xx8q9A.roa (raw, json) Hash identifier: 4rI0OHjDev8bNJ2uUIGQ3MLsNQ/kcvdnT3EnOCxgXcg= Subject key identifier: 9E:32:53:EA:44:E2:AF:02:AE:FC:C6:85:7C:F0:DA:DD:7C:7C:AB:D0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3287 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/njJT6kTirwKu_MaFfPDa3Xx8q9A.roa Signing time: Mon 26 Aug 2024 05:31:45 +0000 ROA not before: Mon 26 Aug 2024 05:31:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12935 (0x3287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9E3253EA44E2AF02AEFCC6857CF0DADD7C7CABD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:78:9e:68:0a:10:39:50:ae:64:99:d2:70: 21:e5:02:91:16:0d:55:ec:ea:a8:48:84:40:c4:16: 9b:08:36:ff:48:b9:aa:ff:6d:0c:19:71:33:a2:f7: e3:ce:1b:b4:27:55:55:a4:d0:ba:6d:51:c5:ae:54: 6f:3b:82:2f:77:5a:11:1e:98:28:bd:95:26:f4:09: de:55:09:22:80:97:1a:aa:b7:df:58:79:1f:e4:9e: 89:9f:1f:42:30:6f:69:8c:ce:4c:11:19:66:9f:46: 70:f1:eb:e0:36:53:64:a7:0f:24:eb:f4:ca:89:c6: fe:3a:ae:cc:5a:ed:86:7b:8a:68:c1:8f:cb:ef:36: 05:6a:67:ec:b9:1d:f3:74:4d:a4:d4:88:d5:97:31: d7:10:5e:7e:5a:0e:eb:02:9b:79:3a:c6:66:1a:f3: 0f:dd:ab:79:5a:af:42:2a:9d:6f:23:6b:31:19:0f: bf:84:91:3b:32:e2:63:94:0d:8d:09:e1:42:fd:27: f6:7c:82:11:0b:a5:f9:a2:87:b6:07:d9:01:a0:25: 8c:e7:c4:ae:f9:43:d8:ed:9f:44:ba:cc:f6:d0:d8: a7:10:48:64:9c:d0:10:a5:79:35:5f:67:25:e8:47: d7:55:ad:4c:a1:cb:df:80:ba:9b:69:ef:44:50:a5: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:32:53:EA:44:E2:AF:02:AE:FC:C6:85:7C:F0:DA:DD:7C:7C:AB:D0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/njJT6kTirwKu_MaFfPDa3Xx8q9A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.88.0/22 Signature Algorithm: sha256WithRSAEncryption 29:16:4c:a6:a3:13:11:98:93:b5:b0:fd:1c:48:f8:67:9c:ef: 74:ab:65:22:15:61:39:0b:fd:a9:20:a1:3f:24:a8:ab:e8:d2: 84:cb:fd:61:05:7d:53:a5:ae:ca:3d:9d:e6:fb:61:ba:53:db: 4a:92:e5:7f:0a:43:10:78:3d:54:ca:86:45:b5:73:16:d5:c4: b2:fa:5e:2c:41:a9:44:9e:a7:18:c3:32:b3:6a:9d:0f:ca:28: c5:98:45:d5:25:4f:19:f3:fe:10:ce:45:39:c7:97:9e:bd:ec: 80:77:cb:77:28:97:3f:c9:a8:8d:fd:a4:44:a3:bb:9e:b2:52: 2b:a0:37:05:22:08:33:73:0d:f2:b9:21:92:ef:41:dc:df:a8: 65:3e:fd:01:76:71:e3:43:8d:a6:36:a4:e9:d7:53:b6:a3:fe: b8:ca:35:48:11:0a:13:c6:8f:e5:ab:a6:79:e4:e0:e5:44:0f: 00:4a:78:af:14:4e:bf:44:89:bb:1c:c7:31:79:08:62:da:9c: fc:63:26:51:86:01:6e:9d:c8:fc:77:28:76:33:1d:38:bb:57: 0f:68:4d:54:08:2f:78:9d:8b:e3:23:09:12:12:f8:07:59:4b: f8:17:00:ff:a4:5e:25:77:6e:14:b2:d3:ed:2f:ba:6e:31:84: 00:21:ac:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlFMzI1M0VBNDRFMkFG MDJBRUZDQzY4NTdDRjBEQUREN0M3Q0FCRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRSHieaAoQOVCuZJnScCHlApEWDVXs6qhIhEDEFpsINv9Iuar/ bQwZcTOi9+POG7QnVVWk0LptUcWuVG87gi93WhEemCi9lSb0Cd5VCSKAlxqqt99Y eR/knomfH0Iwb2mMzkwRGWafRnDx6+A2U2SnDyTr9MqJxv46rsxa7YZ7imjBj8vv NgVqZ+y5HfN0TaTUiNWXMdcQXn5aDusCm3k6xmYa8w/dq3lar0IqnW8jazEZD7+E kTsy4mOUDY0J4UL9J/Z8ghELpfmih7YH2QGgJYznxK75Q9jtn0S6zPbQ2KcQSGSc 0BCleTVfZyXoR9dVrUyhy9+Auptp70RQpemDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnjJT6kTirwKu/MaFfPDa3Xx8q9AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25qSlQ2a1RpcndLdV9NYUZm UERhM1h4OHE5QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sVgwDQYJKoZIhvcNAQELBQADggEBACkWTKajExGYk7Ww/RxI+Gec73SrZSIVYTkL /akgoT8kqKvo0oTL/WEFfVOlrso9neb7YbpT20qS5X8KQxB4PVTKhkW1cxbVxLL6 XixBqUSepxjDMrNqnQ/KKMWYRdUlTxnz/hDORTnHl5697IB3y3colz/JqI39pESj u56yUiugNwUiCDNzDfK5IZLvQdzfqGU+/QF2ceNDjaY2pOnXU7aj/rjKNUgRChPG j+Wrpnnk4OVEDwBKeK8UTr9EibscxzF5CGLanPxjJlGGAW6dyPx3KHYzHTi7Vw9o TVQIL3idi+MjCRIS+AdZS/gXAP+kXiV3bhSy0+0vum4xhAAhrEQ= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org