$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/twT5JSsI2aJPk8j1M1M8WBMvpxc.roa File: twT5JSsI2aJPk8j1M1M8WBMvpxc.roa (raw, json) Hash identifier: 98Y/HeoGy5zh63tdJ++5M1vdsqOePvNB7RjEcHgwkjo= Subject key identifier: B7:04:F9:25:2B:08:D9:A2:4F:93:C8:F5:33:53:3C:58:13:2F:A7:17 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3171 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/twT5JSsI2aJPk8j1M1M8WBMvpxc.roa Signing time: Mon 26 Aug 2024 05:30:28 +0000 ROA not before: Mon 26 Aug 2024 05:30:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12657 (0x3171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B704F9252B08D9A24F93C8F533533C58132FA717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:18:42:bb:35:c5:2c:c1:f0:2b:a2:2c:bb: 83:be:e3:6c:09:7b:16:cd:f3:85:dc:4b:a5:a8:79: a0:98:ce:89:60:76:bf:37:74:ca:53:db:c4:6a:7c: 37:66:68:24:db:f0:d5:9a:ca:8a:f9:fd:8c:63:dd: 4c:95:34:2f:2f:22:83:a5:3d:67:c1:a2:b5:e1:6f: d3:67:b6:d9:13:cf:8d:f2:9c:0f:05:f7:17:4e:42: d3:a8:f7:3d:74:06:b2:bb:9c:65:a6:6c:16:39:c6: b3:db:4a:b3:be:ed:12:35:99:cc:00:5b:ac:4f:e3: 0e:2e:b5:3f:61:f7:c6:7f:9f:82:8b:3b:da:03:e1: 16:56:d2:c7:15:6b:b9:1e:2b:53:c6:6d:b9:57:41: 53:e0:2c:50:c9:60:2d:26:c2:e5:7d:43:86:c0:cd: 82:52:0e:b1:60:c0:f0:f7:aa:19:2b:55:54:f7:6e: 86:60:47:0b:aa:d3:7d:3d:df:6e:12:31:7a:be:08: 39:2e:5c:fe:e8:52:3b:e1:96:f3:ba:40:f3:5f:2e: 91:4d:f8:4a:da:5f:8a:60:73:29:0f:48:d2:62:38: a8:bd:99:1d:33:22:0c:91:57:03:c1:f6:bd:19:e9: b9:11:a8:10:96:ea:7b:ba:ba:d1:0e:9a:21:4c:02: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:04:F9:25:2B:08:D9:A2:4F:93:C8:F5:33:53:3C:58:13:2F:A7:17 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/twT5JSsI2aJPk8j1M1M8WBMvpxc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.232.0/21 Signature Algorithm: sha256WithRSAEncryption 32:8a:47:8b:21:55:83:51:28:c2:5e:a5:57:8a:7b:b9:9c:6c: cf:33:a8:2c:41:8d:a8:db:84:17:59:8f:75:49:6e:7b:6b:04: 4e:9f:65:09:d5:64:1f:99:ab:5a:45:f9:68:20:fe:72:12:dc: 14:f5:86:8d:3b:9a:e2:cd:c7:63:6e:5d:12:c8:27:df:01:8c: bd:bc:31:b1:16:98:cf:a6:d9:04:26:07:0f:a3:09:3b:18:b5: ed:b3:a4:5a:fe:d0:0e:14:4f:b8:c4:66:5b:38:c8:26:86:62: 45:45:6b:7e:0a:0a:d9:f9:85:a2:1b:ff:19:fe:d8:21:c9:f7: c8:a5:0b:bf:e1:f0:4e:48:03:b2:4e:16:ef:80:27:ff:62:58: 72:bb:26:8d:4a:cc:2a:e3:ec:2f:0a:f8:4d:16:09:2b:85:c3: 64:54:7a:d8:6b:f8:7d:3e:7d:4a:f5:31:f9:81:39:bb:91:47: ed:ee:61:5c:45:c6:ad:67:25:f9:8e:c8:22:77:5e:e1:52:02: f4:2f:af:eb:68:16:6e:f5:cf:8d:ba:9e:43:d3:0d:07:f6:bf: c7:70:15:23:36:6e:07:6d:c7:e2:a3:78:e1:15:93:ed:74:56: 1b:60:22:ea:a1:4f:06:a2:8e:f3:ee:bf:1a:47:ec:46:f2:5a: 8d:1c:e6:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3MDRGOTI1MkIwOEQ5 QTI0RjkzQzhGNTMzNTMzQzU4MTMyRkE3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4AhhCuzXFLMHwK6Isu4O+42wJexbN84XcS6WoeaCYzolgdr83 dMpT28RqfDdmaCTb8NWayor5/Yxj3UyVNC8vIoOlPWfBorXhb9NnttkTz43ynA8F 9xdOQtOo9z10BrK7nGWmbBY5xrPbSrO+7RI1mcwAW6xP4w4utT9h98Z/n4KLO9oD 4RZW0scVa7keK1PGbblXQVPgLFDJYC0mwuV9Q4bAzYJSDrFgwPD3qhkrVVT3boZg Rwuq0309324SMXq+CDkuXP7oUjvhlvO6QPNfLpFN+EraX4pgcykPSNJiOKi9mR0z IgyRVwPB9r0Z6bkRqBCW6nu6utEOmiFMAozNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtwT5JSsI2aJPk8j1M1M8WBMvpxcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R3VDVKU3NJMmFKUGs4ajFN MU04V0JNdnB4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sOgwDQYJKoZIhvcNAQELBQADggEBADKKR4shVYNRKMJepVeKe7mcbM8zqCxBjajb hBdZj3VJbntrBE6fZQnVZB+Zq1pF+Wgg/nIS3BT1ho07muLNx2NuXRLIJ98BjL28 MbEWmM+m2QQmBw+jCTsYte2zpFr+0A4UT7jEZls4yCaGYkVFa34KCtn5haIb/xn+ 2CHJ98ilC7/h8E5IA7JOFu+AJ/9iWHK7Jo1KzCrj7C8K+E0WCSuFw2RUethr+H0+ fUr1MfmBObuRR+3uYVxFxq1nJfmOyCJ3XuFSAvQvr+toFm71z426nkPTDQf2v8dw FSM2bgdtx+KjeOEVk+10VhtgIuqhTwaijvPuvxpH7EbyWo0c5oo= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org