$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wSRc5lsd3wPMyEBgBj2_zCmkVQE.roa File: wSRc5lsd3wPMyEBgBj2_zCmkVQE.roa (raw, json) Hash identifier: G+0MPMBUTMspIWmKKL2+xvmna/p96ox3ujGd1aR46Ks= Subject key identifier: C1:24:5C:E6:5B:1D:DF:03:CC:C8:40:60:06:3D:BF:CC:29:A4:55:01 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A73 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wSRc5lsd3wPMyEBgBj2_zCmkVQE.roa Signing time: Fri 01 Sep 2023 10:07:55 +0000 ROA not before: Fri 01 Sep 2023 10:07:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 180.176.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10867 (0x2a73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C1245CE65B1DDF03CCC84060063DBFCC29A45501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:56:5d:6a:19:f6:a8:a3:e0:cd:76:f2:bc: 1f:3d:91:ff:18:e9:a0:76:d8:8b:3a:99:dd:bc:63: 76:a4:7e:55:9e:69:ad:ef:c8:77:13:51:7f:1b:5a: 5a:58:9c:bd:4f:0d:ee:38:5e:e8:86:1c:9a:c8:db: eb:b9:aa:b5:d5:b9:86:11:54:05:fa:f7:4b:d4:f2: 2b:b3:50:41:c2:97:d4:e5:44:7b:c1:90:86:b8:b6: d0:d8:dd:25:1f:7b:80:49:eb:cf:d5:30:7e:c8:03: 21:fc:0e:b6:a3:55:36:16:0a:39:10:27:ed:ee:af: 73:9e:0d:9f:8c:53:8c:89:a9:b0:47:83:b4:5c:a7: a2:99:31:e3:43:bb:6c:b5:1a:c6:aa:91:fd:94:ad: d3:53:45:43:0d:00:a2:da:c5:8c:9a:04:4f:dc:e1: 4e:b1:f6:b9:56:77:73:5e:0e:40:dd:68:11:92:97: 02:3c:90:a3:d4:e4:bc:63:65:94:1c:4a:e0:90:8e: f2:e4:ff:6f:fb:06:5c:b7:af:2c:31:77:d3:8e:f3: 07:5e:fc:1c:fe:af:3c:ea:12:bc:c8:4f:d2:96:61: a9:e9:43:ee:7c:21:ac:c6:1f:9d:48:3c:96:0b:da: 41:d1:cd:e1:dd:0f:b3:50:71:59:c6:e5:4a:d5:24: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:5C:E6:5B:1D:DF:03:CC:C8:40:60:06:3D:BF:CC:29:A4:55:01 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wSRc5lsd3wPMyEBgBj2_zCmkVQE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1e:df:ce:8c:af:ea:65:03:53:fd:3a:2a:33:cd:d2:dd:9d:75: 4d:eb:d5:64:7d:87:59:3a:6a:ea:0a:4b:d9:73:fd:20:c7:b9: 32:33:70:c7:dd:11:6a:74:51:0a:7f:f4:98:a1:29:0c:23:b5: db:0d:49:8a:91:34:b0:c2:d7:91:e5:b6:c0:64:b0:07:fb:b1: a3:53:a1:89:ab:24:5c:ed:30:2d:2c:0e:e7:ee:4d:bd:08:9f: 73:0d:69:1b:e9:2b:a1:13:e1:9f:2a:0b:2b:7f:90:01:10:98: d5:45:96:4a:ef:c8:a0:82:a9:18:ef:79:af:ee:d2:65:51:3d: d7:a8:73:3c:56:e8:7a:05:7f:d7:58:2f:bc:a3:98:8e:c4:33: 8f:12:9d:6f:ac:38:45:70:de:1d:7a:34:c6:3b:c1:ff:9d:83: 29:9c:e8:24:65:bb:1d:99:3d:b4:04:64:54:dd:9e:2f:06:14: d5:6a:ca:9c:11:cf:dd:b4:86:ba:40:6c:ad:c7:f6:0a:c0:c9: 76:99:be:14:01:2f:ea:50:2f:3f:5a:67:61:4d:1d:ec:4a:10: ff:4c:ce:e5:86:05:82:32:2f:2e:76:b2:95:67:ce:0d:74:9b: 30:8e:22:c6:77:0e:c0:30:01:54:cb:14:0c:cb:f2:80:4b:bd: f7:4c:c4:09 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICKnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMxMjQ1Q0U2NUIxRERG MDNDQ0M4NDA2MDA2M0RCRkNDMjlBNDU1MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnGlZdahn2qKPgzXbyvB89kf8Y6aB22Is6md28Y3akflWeaa3v yHcTUX8bWlpYnL1PDe44XuiGHJrI2+u5qrXVuYYRVAX690vU8iuzUEHCl9TlRHvB kIa4ttDY3SUfe4BJ68/VMH7IAyH8DrajVTYWCjkQJ+3ur3OeDZ+MU4yJqbBHg7Rc p6KZMeNDu2y1Gsaqkf2UrdNTRUMNAKLaxYyaBE/c4U6x9rlWd3NeDkDdaBGSlwI8 kKPU5LxjZZQcSuCQjvLk/2/7Bly3rywxd9OO8wde/Bz+rzzqErzIT9KWYanpQ+58 IazGH51IPJYL2kHRzeHdD7NQcVnG5UrVJCzFAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUwSRc5lsd3wPMyEBgBj2/zCmkVQEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dTUmM1bHNkM3dQTXlFQmdC ajJfekNta1ZRRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG0 sDANBgkqhkiG9w0BAQsFAAOCAQEAHt/OjK/qZQNT/ToqM83S3Z11TevVZH2HWTpq 6gpL2XP9IMe5MjNwx90RanRRCn/0mKEpDCO12w1JipE0sMLXkeW2wGSwB/uxo1Oh iaskXO0wLSwO5+5NvQifcw1pG+kroRPhnyoLK3+QARCY1UWWSu/IoIKpGO95r+7S ZVE916hzPFboegV/11gvvKOYjsQzjxKdb6w4RXDeHXo0xjvB/52DKZzoJGW7HZk9 tARkVN2eLwYU1WrKnBHP3bSGukBsrcf2CsDJdpm+FAEv6lAvP1pnYU0d7EoQ/0zO 5YYFgjIvLnaylWfODXSbMI4ixncOwDABVMsUDMvygEu990zECQ== -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:32 2024 by rpki-client on console-fra.rpki-client.org