$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6XTQ-O1Jlo_LHGCjlMDUig1ziE.roa File: w6XTQ-O1Jlo_LHGCjlMDUig1ziE.roa (raw, json) Hash identifier: auTU7CousrLvTj3ADYzi9Rk6nS8f7heJUZ1bv9Z/Ucs= Subject key identifier: C3:A5:D3:43:E3:B5:26:5A:3F:2C:71:82:8E:53:03:52:28:35:CE:21 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29AD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6XTQ-O1Jlo_LHGCjlMDUig1ziE.roa Signing time: Fri 01 Sep 2023 10:06:54 +0000 ROA not before: Fri 01 Sep 2023 10:06:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10669 (0x29ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C3A5D343E3B5265A3F2C71828E5303522835CE21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:02:1a:35:03:23:e4:66:f6:5a:a3:88:bf: 24:6b:50:b8:d7:ee:83:8a:e8:16:6f:9b:78:14:5d: 32:58:b6:ef:c1:d8:ab:46:be:b9:22:9e:c9:7a:32: 4a:ab:82:f1:5f:bf:ec:b3:83:d8:34:93:0e:7e:63: 88:7b:a1:90:41:71:0a:78:56:64:97:e6:c0:2b:f8: 26:3c:dd:fc:7e:61:9a:fb:65:cb:40:3c:9e:b6:61: ec:73:c5:12:3e:79:57:9b:9b:c2:3d:bf:af:4f:26: 70:59:7c:41:e5:e0:34:2b:5c:bd:79:37:c6:98:b0: 61:b6:9f:82:f9:1b:7d:84:c9:24:7a:e6:cd:6e:38: a8:2d:f6:96:eb:4b:66:c6:61:d6:d4:39:57:ad:32: 3d:76:d3:6e:61:34:88:3f:5f:f6:94:2f:3a:74:36: 2d:8d:19:d9:35:31:84:79:cd:f5:28:10:8d:9d:47: ec:75:a6:a3:85:20:7d:4f:01:7e:94:4e:37:86:83: 13:da:c3:59:9e:2f:d6:1a:e6:cc:e9:e5:86:4d:58: b7:7b:7a:6b:60:66:20:4b:1a:f8:45:2f:74:5d:91: 83:b0:0c:f5:59:3e:13:27:89:8a:8e:d0:50:5b:19: fb:60:1c:03:2c:bc:62:e6:af:55:f4:28:94:ec:f9: ab:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A5:D3:43:E3:B5:26:5A:3F:2C:71:82:8E:53:03:52:28:35:CE:21 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6XTQ-O1Jlo_LHGCjlMDUig1ziE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.88.0/22 Signature Algorithm: sha256WithRSAEncryption 20:91:68:ce:75:cd:49:83:9a:d1:e7:0a:5c:b8:e3:80:a2:7b: 0e:68:20:07:82:30:90:d0:2a:c2:9f:fe:47:4c:52:81:5c:24: 47:32:9a:82:81:79:0a:fd:6b:ca:a0:0a:d5:78:da:c1:46:d5: 5b:73:be:33:7a:bc:f1:1e:35:92:e5:e5:02:3d:5a:a2:d9:cc: 40:b2:b0:c5:35:09:b5:91:18:86:2c:7a:30:35:6e:da:3c:f0: 58:09:44:26:56:34:d7:b1:41:ba:e4:0e:94:98:65:3d:fc:89: cb:3d:ef:1e:b9:ff:6e:46:81:25:71:fa:6c:ef:9f:55:25:46: db:7b:16:ca:07:f2:b7:3a:71:be:e1:30:c3:a9:10:b4:e0:ef: 95:39:db:e7:48:c1:b6:7f:69:a1:c4:55:3a:13:fb:6e:8e:56: 2e:8c:53:f0:f4:0d:f3:f3:3a:7d:ab:63:fa:c6:51:71:be:ae: f6:21:11:14:c0:0b:d9:67:71:d2:1c:ca:51:5e:b8:4e:1e:d7: 5b:e7:cb:f4:f8:0b:09:45:2f:d9:75:51:1a:a2:1f:04:a2:ee: 9b:66:6c:0c:b0:1f:b8:84:b4:f1:62:0a:5f:48:16:d1:9a:72: 2c:43:65:4f:e5:3b:21:13:f4:f1:07:6b:cf:e0:da:1b:98:fd: 50:f8:cb:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMzQTVEMzQzRTNCNTI2 NUEzRjJDNzE4MjhFNTMwMzUyMjgzNUNFMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9OwIaNQMj5Gb2WqOIvyRrULjX7oOK6BZvm3gUXTJYtu/B2KtG vrkinsl6MkqrgvFfv+yzg9g0kw5+Y4h7oZBBcQp4VmSX5sAr+CY83fx+YZr7ZctA PJ62YexzxRI+eVebm8I9v69PJnBZfEHl4DQrXL15N8aYsGG2n4L5G32EySR65s1u OKgt9pbrS2bGYdbUOVetMj12025hNIg/X/aULzp0Ni2NGdk1MYR5zfUoEI2dR+x1 pqOFIH1PAX6UTjeGgxPaw1meL9Ya5szp5YZNWLd7emtgZiBLGvhFL3RdkYOwDPVZ PhMniYqO0FBbGftgHAMsvGLmr1X0KJTs+avhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUw6XTQ+O1Jlo/LHGCjlMDUig1ziEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3c2WFRRLU8xSmxvX0xIR0Nq bE1EVWlnMXppRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sFgwDQYJKoZIhvcNAQELBQADggEBACCRaM51zUmDmtHnCly444Ciew5oIAeCMJDQ KsKf/kdMUoFcJEcymoKBeQr9a8qgCtV42sFG1VtzvjN6vPEeNZLl5QI9WqLZzECy sMU1CbWRGIYsejA1bto88FgJRCZWNNexQbrkDpSYZT38ics97x65/25GgSVx+mzv n1UlRtt7FsoH8rc6cb7hMMOpELTg75U52+dIwbZ/aaHEVToT+26OVi6MU/D0DfPz On2rY/rGUXG+rvYhERTAC9lncdIcylFeuE4e11vny/T4CwlFL9l1URqiHwSi7ptm bAywH7iEtPFiCl9IFtGacixDZU/lOyET9PEHa8/g2huY/VD4y7M= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org