$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rYM0QUDPI7EZZg7h2SPOAVa7Mzs.roa File: rYM0QUDPI7EZZg7h2SPOAVa7Mzs.roa (raw, json) Hash identifier: I2Qj/Ou/Nypgt+stWao/9mv0oGtN0yhN8vDKcJ2DG0o= Subject key identifier: AD:83:34:41:40:CF:23:B1:19:66:0E:E1:D9:23:CE:01:56:BB:33:3B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30CA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rYM0QUDPI7EZZg7h2SPOAVa7Mzs.roa Signing time: Mon 26 Aug 2024 05:29:50 +0000 ROA not before: Mon 26 Aug 2024 05:29:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 180.176.184.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12490 (0x30ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AD83344140CF23B119660EE1D923CE0156BB333B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fd:58:bb:b5:bf:95:83:8a:dc:81:bd:2c:15: fd:5d:ec:05:d8:ae:7a:b8:5e:df:63:7e:af:02:cb: ef:55:bb:63:1e:18:a3:db:04:b7:8b:05:98:1b:e1: a7:ab:cf:82:e4:a5:81:23:53:05:37:11:e3:25:97: f1:24:e8:90:0b:a5:4a:ca:48:db:7d:f1:40:34:64: 41:24:0c:f7:cb:d0:21:77:ec:20:74:19:d7:85:53: 5a:8d:b0:f0:a0:2e:5b:5d:e9:a3:5c:c3:c7:e3:2c: c8:82:b4:f0:bf:04:1d:64:1c:93:de:45:03:98:72: f7:66:d9:0e:64:66:92:6e:09:09:5b:26:26:b6:ba: 94:20:cb:9f:be:08:8c:cc:b5:73:49:d0:af:33:96: e7:41:bf:1a:1c:b7:3e:98:65:83:be:31:43:99:70: bf:8b:a4:83:4c:d8:01:3a:02:82:54:7a:a4:2c:60: d0:44:a3:4e:32:58:ed:54:90:44:12:8b:41:fe:ef: d2:05:e0:80:81:b0:85:97:9d:17:64:cb:00:e3:02: 66:44:04:2d:77:ab:bf:92:d0:98:a7:30:20:c4:f1: 90:76:68:3c:0b:04:33:e2:0e:b2:65:b5:55:cd:76: 26:32:49:51:05:c5:e3:c0:40:ae:5c:22:d4:ec:d3: 15:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:83:34:41:40:CF:23:B1:19:66:0E:E1:D9:23:CE:01:56:BB:33:3B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rYM0QUDPI7EZZg7h2SPOAVa7Mzs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.184.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:9f:9f:8c:3a:d2:58:26:67:5e:b8:a2:79:2b:ea:e3:54:3f: ce:dd:b5:6e:4f:85:35:4c:70:cc:c3:93:86:f5:73:3a:4a:07: b7:53:44:4f:2e:13:65:72:c1:d7:d1:dd:a0:54:d7:07:e7:c5: 72:9a:07:92:00:1a:e6:cd:fa:c4:87:96:dd:a2:c7:60:5c:46: f2:0b:c6:b7:28:b7:08:31:3f:43:49:1a:0f:59:72:7a:b4:bf: 1d:f8:03:5f:39:f2:62:30:0e:63:b8:a9:e2:30:a9:f9:34:1a: d2:53:6c:c0:5c:29:c7:0f:18:25:02:16:a0:8a:32:ee:87:99: 3a:12:3b:f0:d1:f6:1d:3a:de:82:81:17:76:33:06:c7:61:84: 57:e5:06:81:8a:d0:a5:1e:5a:01:81:a4:c6:86:ce:b7:f3:27: a2:39:52:da:00:08:8e:58:f0:82:1a:36:21:d1:de:a8:69:9c: ae:09:1a:c4:77:64:b5:91:ea:23:8b:9f:2e:25:37:37:02:3e: df:00:76:7a:a3:23:36:84:c6:db:94:2c:5b:5f:cb:70:03:8b: 1e:58:07:33:a1:a0:ad:34:97:2a:5f:c6:a5:48:e1:76:4b:17: ce:c4:03:51:2a:4e:f4:6b:9f:ef:26:90:9e:73:98:8d:de:bf: a8:cd:14:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFEODMzNDQxNDBDRjIz QjExOTY2MEVFMUQ5MjNDRTAxNTZCQjMzM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd/Vi7tb+Vg4rcgb0sFf1d7AXYrnq4Xt9jfq8Cy+9Vu2MeGKPb BLeLBZgb4aerz4LkpYEjUwU3EeMll/Ek6JALpUrKSNt98UA0ZEEkDPfL0CF37CB0 GdeFU1qNsPCgLltd6aNcw8fjLMiCtPC/BB1kHJPeRQOYcvdm2Q5kZpJuCQlbJia2 upQgy5++CIzMtXNJ0K8zludBvxoctz6YZYO+MUOZcL+LpINM2AE6AoJUeqQsYNBE o04yWO1UkEQSi0H+79IF4ICBsIWXnRdkywDjAmZEBC13q7+S0JinMCDE8ZB2aDwL BDPiDrJltVXNdiYySVEFxePAQK5cItTs0xWFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrYM0QUDPI7EZZg7h2SPOAVa7MzswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JZTTBRVURQSTdFWlpnN2gy U1BPQVZhN016cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sLgwDQYJKoZIhvcNAQELBQADggEBAI2fn4w60lgmZ164onkr6uNUP87dtW5PhTVM cMzDk4b1czpKB7dTRE8uE2VywdfR3aBU1wfnxXKaB5IAGubN+sSHlt2ix2BcRvIL xrcotwgxP0NJGg9Zcnq0vx34A1858mIwDmO4qeIwqfk0GtJTbMBcKccPGCUCFqCK Mu6HmToSO/DR9h063oKBF3YzBsdhhFflBoGK0KUeWgGBpMaGzrfzJ6I5UtoACI5Y 8IIaNiHR3qhpnK4JGsR3ZLWR6iOLny4lNzcCPt8AdnqjIzaExtuULFtfy3ADix5Y BzOhoK00lypfxqVI4XZLF87EA1EqTvRrn+8mkJ5zmI3ev6jNFNw= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:39 2024 by rpki-client on console-ams.rpki-client.org