$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q3bGlKoODzXSN8docu4htqxDxlw.roa File: q3bGlKoODzXSN8docu4htqxDxlw.roa (raw, json) Hash identifier: iupckbugtIm8jjqsnFl/mt++UqK3CGjJvFWn+5qYXXc= Subject key identifier: AB:76:C6:94:AA:0E:0F:35:D2:37:C7:68:72:EE:21:B6:AC:43:C6:5C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29A2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q3bGlKoODzXSN8docu4htqxDxlw.roa Signing time: Fri 01 Sep 2023 10:06:52 +0000 ROA not before: Fri 01 Sep 2023 10:06:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10658 (0x29a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AB76C694AA0E0F35D237C76872EE21B6AC43C65C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:66:57:e0:54:bf:fc:0a:e4:25:f7:b7:3a: 65:ae:b0:35:1b:d1:40:5b:4d:3b:50:59:f5:1f:4f: f7:4a:5b:f0:b1:b2:43:a9:2e:48:dd:4e:00:03:a4: cb:2f:a5:3d:72:48:e9:f8:f0:f3:d1:b9:29:d0:f3: 6e:d3:bc:e5:e9:d5:18:d1:dc:e9:20:2a:87:02:8c: 3f:86:5d:23:5f:7a:13:a6:0f:ec:15:1a:da:28:a9: 9e:0d:80:1c:2f:e8:41:c2:a4:64:af:7b:47:f4:1d: c4:c8:64:21:d7:49:9f:52:ad:16:e3:7c:a7:b2:5b: 75:52:16:65:23:43:9d:90:7f:47:fb:05:c2:8c:e8: 92:b0:dd:d6:1f:b8:fe:77:2e:85:33:3d:63:0f:3c: 32:51:56:76:10:59:28:aa:df:48:3e:0d:64:eb:8b: 9d:48:9f:f1:92:60:b4:c4:7d:d1:0e:ff:f9:0b:49: 42:67:cb:3c:81:6d:12:dd:67:8e:00:d2:77:ab:2f: de:3e:0a:0f:f7:1b:e8:f5:9c:ab:6c:98:ca:2f:f2: 23:11:6c:94:82:cd:c0:9a:e2:33:db:70:9c:2b:e1: 5e:f6:cd:53:94:b2:36:f7:e1:b4:58:e2:d1:b3:6c: f1:23:09:5a:45:bd:c3:c1:74:72:be:a6:c2:08:b8: 65:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:76:C6:94:AA:0E:0F:35:D2:37:C7:68:72:EE:21:B6:AC:43:C6:5C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q3bGlKoODzXSN8docu4htqxDxlw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:9f:24:74:46:8e:e8:e2:4b:8a:50:b9:5e:07:b5:77:f4:d0: 71:46:fa:59:ec:c3:e8:26:74:3f:e5:e0:80:a8:44:a1:72:92: f4:68:f9:fb:c8:5d:86:c0:34:0f:8d:7d:31:86:b8:28:c9:38: f4:66:ca:af:c8:f9:7e:7a:91:ff:6c:07:d1:ba:75:25:08:99: 9b:be:f4:cc:03:07:ef:09:fd:8d:bf:d3:c0:be:01:98:ff:dd: 52:7b:6f:f6:a5:81:9c:c2:f8:44:08:30:e1:20:bf:4d:85:8d: ce:08:72:8d:0d:55:41:6f:a9:95:cb:30:83:0f:4c:10:15:6e: f3:93:c9:32:f0:44:9f:b0:82:46:45:12:bf:3a:87:58:55:a9: 33:17:12:5b:83:e8:ed:d8:99:eb:1b:6b:85:41:d6:62:5d:d5: 5e:4e:7d:19:1b:f7:67:39:a2:34:0f:e5:90:a5:2c:c1:78:44: 93:93:31:92:ad:8e:81:07:cb:9b:e8:35:33:06:a1:d0:6b:5f: e7:ff:5d:ea:13:e1:b3:6b:5a:7e:aa:13:65:ba:aa:df:5c:f3: 22:1e:25:7f:a9:04:92:3b:31:79:bc:07:91:3b:89:8d:89:17: c4:79:35:77:e6:a2:04:fb:51:1a:4e:20:3d:90:c1:50:1e:3f: f7:16:0e:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFCNzZDNjk0QUEwRTBG MzVEMjM3Qzc2ODcyRUUyMUI2QUM0M0M2NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCV0mZX4FS//ArkJfe3OmWusDUb0UBbTTtQWfUfT/dKW/CxskOp LkjdTgADpMsvpT1ySOn48PPRuSnQ827TvOXp1RjR3OkgKocCjD+GXSNfehOmD+wV GtooqZ4NgBwv6EHCpGSve0f0HcTIZCHXSZ9SrRbjfKeyW3VSFmUjQ52Qf0f7BcKM 6JKw3dYfuP53LoUzPWMPPDJRVnYQWSiq30g+DWTri51In/GSYLTEfdEO//kLSUJn yzyBbRLdZ44A0nerL94+Cg/3G+j1nKtsmMov8iMRbJSCzcCa4jPbcJwr4V72zVOU sjb34bRY4tGzbPEjCVpFvcPBdHK+psIIuGU3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUq3bGlKoODzXSN8docu4htqxDxlwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3EzYkdsS29PRHpYU044ZG9j dTRodHF4RHhsdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sAQwDQYJKoZIhvcNAQELBQADggEBAF+fJHRGjujiS4pQuV4HtXf00HFG+lnsw+gm dD/l4ICoRKFykvRo+fvIXYbANA+NfTGGuCjJOPRmyq/I+X56kf9sB9G6dSUImZu+ 9MwDB+8J/Y2/08C+AZj/3VJ7b/algZzC+EQIMOEgv02Fjc4Ico0NVUFvqZXLMIMP TBAVbvOTyTLwRJ+wgkZFEr86h1hVqTMXEluD6O3Ymesba4VB1mJd1V5OfRkb92c5 ojQP5ZClLMF4RJOTMZKtjoEHy5voNTMGodBrX+f/XeoT4bNrWn6qE2W6qt9c8yIe JX+pBJI7MXm8B5E7iY2JF8R5NXfmogT7URpOID2QwVAeP/cWDk8= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org