$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qFGpZuhfW34JYK1kns1gmxrGdCY.roa File: qFGpZuhfW34JYK1kns1gmxrGdCY.roa (raw, json) Hash identifier: cXZ2f7y1+IT1aHNiyzQCsZPNNVcyxVQpHNItYiW7GSY= Subject key identifier: A8:51:A9:66:E8:5F:5B:7E:09:60:AD:64:9E:CD:60:9B:1A:C6:74:26 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3144 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qFGpZuhfW34JYK1kns1gmxrGdCY.roa Signing time: Mon 26 Aug 2024 05:30:17 +0000 ROA not before: Mon 26 Aug 2024 05:30:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12612 (0x3144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A851A966E85F5B7E0960AD649ECD609B1AC67426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:17:2b:8b:0f:53:55:0a:a7:4c:48:b4:7a: 8e:06:0b:a3:75:a3:b0:1c:01:79:12:81:0b:ae:bc: 48:2b:95:0a:94:76:ce:35:e0:e4:bb:22:d6:b1:53: 4d:19:ff:ec:2d:4d:8f:b6:d7:9b:ab:14:6e:70:56: cf:90:66:f0:a9:76:bc:37:a2:f4:d8:61:d8:70:5d: 97:97:8b:8b:19:b9:09:8b:ab:bb:8a:e6:31:d1:d4: a7:e0:b9:1b:6f:b3:f4:a6:54:12:df:7d:ee:12:b7: a6:29:94:01:12:ab:2f:61:c5:64:91:d6:52:ca:2b: 30:fc:36:35:b0:c1:71:63:ba:a2:e6:1f:38:7c:06: dc:3d:ff:ac:fd:13:f4:1a:41:ce:79:98:39:d4:2b: e9:ab:e9:05:0f:34:82:a6:ab:15:41:0f:f3:2b:f3: eb:43:29:ba:5a:8e:ba:1c:13:eb:f1:55:fe:57:a6: 12:80:5c:11:39:f7:80:2c:b8:b5:eb:3f:90:a5:fd: c4:b4:6f:a2:15:16:7f:d3:91:0e:97:c2:1c:e9:26: f3:b4:7c:f1:72:b5:f5:d0:ca:d9:b8:1a:9e:37:c6: 35:3a:9d:45:07:36:f2:59:1c:d1:52:99:20:bb:ac: 62:80:87:1a:89:07:21:b1:aa:75:bb:8f:54:ca:61: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:51:A9:66:E8:5F:5B:7E:09:60:AD:64:9E:CD:60:9B:1A:C6:74:26 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qFGpZuhfW34JYK1kns1gmxrGdCY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.253.0/24 Signature Algorithm: sha256WithRSAEncryption 01:da:53:37:28:a6:bf:2f:ea:20:10:2c:b0:69:39:3f:06:7f: 3f:87:f1:d7:b1:a0:ee:23:74:e9:ac:77:9f:b6:f0:7a:85:af: 4b:6b:b2:0e:22:9b:b5:66:07:b3:9c:31:38:a7:34:6a:b9:d5: 0b:eb:0c:7b:e2:a4:be:ca:3c:8b:96:59:04:bc:45:3e:95:9d: 81:a5:c2:0c:e8:01:cb:f8:55:c7:3a:80:e0:44:62:7d:df:5a: 14:84:aa:c6:b7:7c:ec:b6:71:96:c6:aa:df:14:18:90:3f:08: 1e:e9:bd:74:f2:12:72:4b:8e:41:a1:83:d4:84:c9:fa:a0:32: de:5b:03:55:54:53:ec:23:bf:23:1e:45:b4:f8:64:12:f5:cc: b0:d2:71:bd:c2:8b:8d:b5:78:3c:11:08:72:5d:0c:ac:fe:08: 69:f9:aa:1c:02:47:00:fc:6d:1a:48:ab:f5:77:52:42:40:02: 85:0e:bb:2b:1d:48:6d:d3:9c:b1:a6:9e:9a:78:cd:48:e7:0f: e0:84:f5:e3:75:54:ac:31:d1:58:4b:c5:ce:7b:79:8c:59:c7: 03:b9:68:85:52:ae:26:db:55:64:78:9e:4a:09:f7:9c:87:df: 53:d8:e7:74:e1:a3:79:16:38:7e:86:ce:aa:27:f3:12:9c:6f: 28:d1:12:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE4NTFBOTY2RTg1RjVC N0UwOTYwQUQ2NDlFQ0Q2MDlCMUFDNjc0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq1hcriw9TVQqnTEi0eo4GC6N1o7AcAXkSgQuuvEgrlQqUds41 4OS7ItaxU00Z/+wtTY+215urFG5wVs+QZvCpdrw3ovTYYdhwXZeXi4sZuQmLq7uK 5jHR1KfguRtvs/SmVBLffe4St6YplAESqy9hxWSR1lLKKzD8NjWwwXFjuqLmHzh8 Btw9/6z9E/QaQc55mDnUK+mr6QUPNIKmqxVBD/Mr8+tDKbpajrocE+vxVf5XphKA XBE594AsuLXrP5Cl/cS0b6IVFn/TkQ6XwhzpJvO0fPFytfXQytm4Gp43xjU6nUUH NvJZHNFSmSC7rGKAhxqJByGxqnW7j1TKYZylAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqFGpZuhfW34JYK1kns1gmxrGdCYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FGR3BadWhmVzM0SllLMWtu czFnbXhyR2RDWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sP0wDQYJKoZIhvcNAQELBQADggEBAAHaUzcopr8v6iAQLLBpOT8Gfz+H8dexoO4j dOmsd5+28HqFr0trsg4im7VmB7OcMTinNGq51QvrDHvipL7KPIuWWQS8RT6VnYGl wgzoAcv4Vcc6gOBEYn3fWhSEqsa3fOy2cZbGqt8UGJA/CB7pvXTyEnJLjkGhg9SE yfqgMt5bA1VUU+wjvyMeRbT4ZBL1zLDScb3Ci421eDwRCHJdDKz+CGn5qhwCRwD8 bRpIq/V3UkJAAoUOuysdSG3TnLGmnpp4zUjnD+CE9eN1VKwx0VhLxc57eYxZxwO5 aIVSribbVWR4nkoJ95yH31PY53Tho3kWOH6Gzqon8xKcbyjREpQ= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org