$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ouVGkGNI0oCb8enFGGHKi3ElgAw.roa File: ouVGkGNI0oCb8enFGGHKi3ElgAw.roa (raw, json) Hash identifier: +MGKXoMWVqjdDeX9dW8blM7n3lQ+ew2xOyJzbsoX5ss= Subject key identifier: A2:E5:46:90:63:48:D2:80:9B:F1:E9:C5:18:61:CA:8B:71:25:80:0C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3040 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ouVGkGNI0oCb8enFGGHKi3ElgAw.roa Signing time: Mon 26 Aug 2024 05:29:17 +0000 ROA not before: Mon 26 Aug 2024 05:29:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12352 (0x3040) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A2E546906348D2809BF1E9C51861CA8B7125800C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4f:3f:67:b6:7e:6e:64:9b:fc:8b:d5:d4:cf: c2:15:7f:e9:8d:30:c0:df:1c:4e:d7:a2:7f:3b:55: 23:0a:25:86:65:dd:b3:05:90:5d:49:ce:f9:8a:7e: 18:02:ee:85:ea:7c:4b:aa:38:6a:da:9e:b9:10:40: 1a:a1:79:f8:27:d2:b2:af:4c:a3:77:46:0e:c8:c9: 76:c4:02:a4:8a:c7:e6:ff:7d:0a:ad:de:a7:d6:a2: e8:71:c1:f0:82:3a:52:9a:9f:4f:9b:67:86:d8:d7: 94:67:af:92:fe:9a:9c:40:67:31:d8:24:46:9f:6b: 99:10:47:5e:0d:1f:e2:aa:43:a9:55:a5:80:9e:16: 9c:05:2b:a7:3e:1c:18:7c:22:7e:a5:4b:96:33:cf: 18:5e:8a:92:b5:10:b0:83:bf:07:9c:60:83:bc:1c: f2:8f:86:34:ef:74:83:4f:cb:59:23:aa:05:d6:74: d7:3e:34:40:dd:87:11:f5:ed:9e:42:22:9c:82:a2: 91:15:d0:a2:15:c7:b2:39:c4:2c:af:48:ef:33:2d: ed:b3:4e:fb:10:da:69:6f:a9:97:74:b0:09:32:f6: bb:27:d6:4d:03:39:da:d5:41:d8:2d:e2:d7:c3:aa: d6:3c:c9:bb:27:e4:a1:da:bc:d6:1c:42:22:67:78: e1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E5:46:90:63:48:D2:80:9B:F1:E9:C5:18:61:CA:8B:71:25:80:0C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ouVGkGNI0oCb8enFGGHKi3ElgAw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.144.0/21 Signature Algorithm: sha256WithRSAEncryption 74:55:08:59:60:e7:58:d3:61:1d:ce:c3:b3:f1:3a:ac:21:78: 29:01:d9:b1:62:30:ad:b3:df:92:4b:9c:2d:08:7b:45:99:06: b4:35:f2:c9:1d:b8:79:aa:89:d3:65:06:e0:0b:a6:13:d8:e1: f4:68:12:03:8a:d7:71:14:cf:ff:05:60:ad:26:02:59:20:7b: 58:83:80:a2:4e:5e:cd:28:81:21:55:55:f5:5e:03:5d:ca:45: 89:d8:48:12:e9:4d:0e:29:a9:56:14:ac:5c:a1:fd:0f:82:b0: de:86:d8:ca:db:fa:5f:83:88:58:b0:24:60:a3:4c:a6:59:b1: 95:be:6b:f3:62:e7:aa:da:97:4a:f6:db:ce:61:51:b1:f8:00: 88:89:a4:22:29:60:06:44:6e:67:6f:09:65:04:7a:2c:ac:45: 12:ba:10:71:fa:bc:0e:f4:a2:a1:dc:67:d8:ee:7b:4b:77:3b: c5:82:d7:5f:47:b7:92:d3:f9:70:b3:df:a5:9f:68:65:b9:6d: b9:57:fa:f3:0b:02:1f:0e:23:8f:b2:7e:75:24:52:04:44:19: cc:f5:6c:77:da:65:3f:b0:6e:33:97:74:9c:6e:1a:3a:a8:28: 8b:45:7c:f7:03:8b:74:f7:42:78:03:12:b8:4b:fa:54:10:5a: fc:f2:7e:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyRTU0NjkwNjM0OEQy ODA5QkYxRTlDNTE4NjFDQThCNzEyNTgwMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLTz9ntn5uZJv8i9XUz8IVf+mNMMDfHE7Xon87VSMKJYZl3bMF kF1JzvmKfhgC7oXqfEuqOGranrkQQBqhefgn0rKvTKN3Rg7IyXbEAqSKx+b/fQqt 3qfWouhxwfCCOlKan0+bZ4bY15Rnr5L+mpxAZzHYJEafa5kQR14NH+KqQ6lVpYCe FpwFK6c+HBh8In6lS5YzzxheipK1ELCDvwecYIO8HPKPhjTvdINPy1kjqgXWdNc+ NEDdhxH17Z5CIpyCopEV0KIVx7I5xCyvSO8zLe2zTvsQ2mlvqZd0sAky9rsn1k0D OdrVQdgt4tfDqtY8ybsn5KHavNYcQiJneOHxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUouVGkGNI0oCb8enFGGHKi3ElgAwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL291VkdrR05JMG9DYjhlbkZH R0hLaTNFbGdBdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sZAwDQYJKoZIhvcNAQELBQADggEBAHRVCFlg51jTYR3Ow7PxOqwheCkB2bFiMK2z 35JLnC0Ie0WZBrQ18skduHmqidNlBuALphPY4fRoEgOK13EUz/8FYK0mAlkge1iD gKJOXs0ogSFVVfVeA13KRYnYSBLpTQ4pqVYUrFyh/Q+CsN6G2Mrb+l+DiFiwJGCj TKZZsZW+a/Ni56ral0r2285hUbH4AIiJpCIpYAZEbmdvCWUEeiysRRK6EHH6vA70 oqHcZ9jue0t3O8WC119Ht5LT+XCz36WfaGW5bblX+vMLAh8OI4+yfnUkUgREGcz1 bHfaZT+wbjOXdJxuGjqoKItFfPcDi3T3QngDErhL+lQQWvzyfpE= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org