$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/swA9axnh-yNQVtyHbKGVj2hpeDU.roa File: swA9axnh-yNQVtyHbKGVj2hpeDU.roa (raw, json) Hash identifier: hT8eTW9A/0qMRw1Gcbt7sEYU4UKE3bhzYJoTwz5QWEA= Subject key identifier: B3:00:3D:6B:19:E1:FB:23:50:56:DC:87:6C:A1:95:8F:68:69:78:35 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31BD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/swA9axnh-yNQVtyHbKGVj2hpeDU.roa Signing time: Mon 26 Aug 2024 05:30:53 +0000 ROA not before: Mon 26 Aug 2024 05:30:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12733 (0x31bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B3003D6B19E1FB235056DC876CA1958F68697835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:02:58:21:a1:0d:c7:ab:65:a0:6c:31:fc: 02:3c:db:fe:c0:33:d7:32:a4:77:38:af:69:62:89: a4:88:d5:3f:81:3b:6b:51:4e:e0:f2:ed:07:ed:2f: 9c:4b:c3:15:fa:5e:23:f0:62:97:b9:5b:74:3c:6d: 88:14:b5:48:56:cc:93:8f:c9:f1:58:bc:7a:39:77: e0:80:04:d8:de:40:ce:c1:57:2b:18:07:c9:8e:56: e3:7a:d1:4e:a6:bf:59:46:54:75:d7:79:e4:9c:08: c0:0b:40:fb:15:2a:c1:4f:09:27:ef:ae:90:5f:e9: 40:ce:f3:12:ce:b7:ab:a2:4e:13:be:a2:c4:dd:ab: 54:e3:9f:b8:fe:57:60:6d:78:6b:6f:ef:24:e6:49: 2f:56:a3:c3:a9:98:1d:00:a2:22:a7:95:f1:13:ff: ad:42:f8:be:52:54:8f:f4:04:f3:a6:1a:22:d9:13: c8:80:c6:b3:d8:c8:89:f7:4b:bf:b5:b2:c1:83:79: 8a:7f:c5:0f:07:9a:b9:fe:96:f7:67:44:f6:6d:fd: ad:95:87:39:a2:5a:49:02:1a:ee:a7:ea:12:20:2f: 4e:a3:c5:e6:c3:1a:ce:4e:66:ca:f3:f3:c3:aa:21: f9:b0:c1:d6:19:b3:7e:64:ea:b5:1d:b5:55:13:38: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:00:3D:6B:19:E1:FB:23:50:56:DC:87:6C:A1:95:8F:68:69:78:35 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/swA9axnh-yNQVtyHbKGVj2hpeDU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.40.0/21 Signature Algorithm: sha256WithRSAEncryption 50:12:ba:b6:5f:53:69:65:4a:93:cd:99:b2:a3:f3:e6:b0:96: 5b:17:6a:83:f4:b7:89:5e:be:74:9f:da:f8:eb:45:0b:b0:a5: 1e:ea:a1:ff:fd:a6:45:02:a7:01:40:f3:69:67:d9:40:07:7d: 32:23:ae:59:a8:83:9c:f2:23:37:8f:17:4c:6c:9d:50:be:43: 9c:a5:1d:b2:85:b1:59:1e:f9:41:ab:45:fd:7d:64:a1:a8:1a: f0:c1:be:1c:47:05:94:1f:bc:fc:8d:24:57:c8:3a:9a:de:b4: b2:77:a1:82:5d:4b:e6:d0:81:df:2c:d4:9d:b6:34:bd:1e:25: fc:d8:da:ef:61:45:8c:e2:ba:38:6c:2f:22:62:f9:aa:41:c9: 1f:33:53:ec:a0:d1:7a:0e:f7:6a:98:28:41:b8:0b:26:4e:82: 53:5c:a4:ac:f2:9d:91:76:80:6d:12:20:85:94:95:d0:47:31: 1d:c9:3c:c9:c0:d0:eb:99:0a:51:b5:0c:34:16:1b:df:da:ae: 74:14:2b:89:3e:95:3a:28:df:8b:32:50:0e:d3:4e:a4:b2:69: 13:96:e8:ed:70:b0:35:03:e8:e1:57:7d:ef:1a:fc:0d:74:a7: 28:e9:09:ea:fb:f6:de:dd:89:b7:43:cf:6b:cd:0c:40:1f:cb: a7:23:21:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIzMDAzRDZCMTlFMUZC MjM1MDU2REM4NzZDQTE5NThGNjg2OTc4MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0XwJYIaENx6tloGwx/AI82/7AM9cypHc4r2liiaSI1T+BO2tR TuDy7QftL5xLwxX6XiPwYpe5W3Q8bYgUtUhWzJOPyfFYvHo5d+CABNjeQM7BVysY B8mOVuN60U6mv1lGVHXXeeScCMALQPsVKsFPCSfvrpBf6UDO8xLOt6uiThO+osTd q1Tjn7j+V2BteGtv7yTmSS9Wo8OpmB0AoiKnlfET/61C+L5SVI/0BPOmGiLZE8iA xrPYyIn3S7+1ssGDeYp/xQ8Hmrn+lvdnRPZt/a2VhzmiWkkCGu6n6hIgL06jxebD Gs5OZsrz88OqIfmwwdYZs35k6rUdtVUTOKKNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUswA9axnh+yNQVtyHbKGVj2hpeDUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3N3QTlheG5oLXlOUVZ0eUhi S0dWajJocGVEVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sCgwDQYJKoZIhvcNAQELBQADggEBAFASurZfU2llSpPNmbKj8+awllsXaoP0t4le vnSf2vjrRQuwpR7qof/9pkUCpwFA82ln2UAHfTIjrlmog5zyIzePF0xsnVC+Q5yl HbKFsVke+UGrRf19ZKGoGvDBvhxHBZQfvPyNJFfIOpretLJ3oYJdS+bQgd8s1J22 NL0eJfzY2u9hRYziujhsLyJi+apByR8zU+yg0XoO92qYKEG4CyZOglNcpKzynZF2 gG0SIIWUldBHMR3JPMnA0OuZClG1DDQWG9/arnQUK4k+lToo34syUA7TTqSyaROW 6O1wsDUD6OFXfe8a/A10pyjpCer79t7dibdDz2vNDEAfy6cjIas= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org