$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wiDEhNmW9Z4-AFLqXkJ8UNpqE-A.roa File: wiDEhNmW9Z4-AFLqXkJ8UNpqE-A.roa (raw, json) Hash identifier: 7WOMit1450wzZgxfbS+DoFmDf0DpKKJ+XjOWKr0ybpk= Subject key identifier: C2:20:C4:84:D9:96:F5:9E:3E:00:52:EA:5E:42:7C:50:DA:6A:13:E0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2805 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wiDEhNmW9Z4-AFLqXkJ8UNpqE-A.roa Signing time: Fri 01 Sep 2023 10:04:50 +0000 ROA not before: Fri 01 Sep 2023 10:04:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10245 (0x2805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C220C484D996F59E3E0052EA5E427C50DA6A13E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:57:aa:11:25:d5:74:a3:b7:c7:54:82:bd: 1a:97:fa:7e:1e:4a:ea:98:cb:df:c0:a9:6d:ec:c9: 95:04:3e:1d:18:74:9e:3e:ba:8b:64:7e:ac:cf:bf: 81:b0:e6:1c:af:a2:97:32:f7:1f:36:a6:6a:58:43: cd:d3:2b:b8:29:69:3f:fe:92:29:c6:f6:13:55:02: e8:d0:9f:93:0a:2f:df:9d:1b:0c:2c:a7:a1:2d:4e: fb:8e:25:26:94:6d:5d:bf:17:89:fd:b7:b7:bb:2d: 26:af:ef:f0:34:ec:7d:63:2b:21:3b:e2:19:7d:3c: b5:e2:7e:30:77:21:26:45:47:0c:c9:c3:46:28:ac: a7:21:45:b9:34:63:55:c9:ee:3e:19:2b:b7:b8:78: b0:5b:b7:53:41:10:d5:42:fe:e1:dc:77:bf:ef:c5: 2a:ac:30:a5:3f:2a:aa:a6:bf:ad:bb:29:71:fa:68: 9a:48:54:ed:c7:61:8c:fa:4d:91:00:f7:0d:5c:1d: 93:8c:6f:cb:c5:e1:08:7b:64:6d:6b:75:d8:96:1c: a6:ba:55:42:16:68:45:0d:34:a0:63:d8:9f:a9:63: 37:a9:f8:9e:bc:1f:d8:68:34:b9:23:4a:cd:ac:61: 4b:93:d7:43:10:aa:16:0a:e3:6e:b8:72:be:e9:15: 18:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:20:C4:84:D9:96:F5:9E:3E:00:52:EA:5E:42:7C:50:DA:6A:13:E0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wiDEhNmW9Z4-AFLqXkJ8UNpqE-A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.200.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:2e:b1:41:7d:f0:3f:e8:83:86:e4:8e:c4:b0:35:be:c0:70: 0f:8d:2a:bc:62:26:b3:06:46:ab:f4:44:14:fb:f1:dc:ba:e9: af:c7:f8:1d:25:d5:a7:23:00:cf:f6:cd:54:cc:f3:fc:f9:b8: a2:f5:21:27:c6:2d:15:1e:fc:43:7c:31:97:c6:a1:69:e1:e5: ea:84:e5:4c:a8:a0:ec:c5:18:7b:e6:26:61:5f:f3:1b:ff:08: 53:72:a2:72:5d:ae:f2:c5:f4:c7:1c:33:ae:1c:c5:09:3a:8f: 83:12:ae:c7:e3:40:05:e4:9d:7a:ac:5f:53:ec:5d:d1:ad:9a: 10:a2:4a:6d:5e:c8:7d:ac:ce:7d:03:b4:60:a3:37:e2:49:26: 49:7a:fa:2e:43:24:de:da:48:8d:72:97:15:83:6a:3e:33:10: 91:e1:64:77:f9:be:fb:a1:ad:f9:3a:35:37:25:44:c3:5c:cf: b6:c4:d6:5e:79:24:b5:e5:b8:01:a5:b3:f5:fb:d0:a6:da:7d: a2:1a:f6:2f:2e:5c:c6:a4:31:bd:28:a4:3e:57:a6:76:52:d4: f8:e5:18:30:43:ca:e6:4c:7c:69:42:bf:69:e6:4d:e9:df:80: 0e:20:31:8c:23:ae:72:82:99:d7:18:a4:36:f1:08:f4:53:ca: 8c:09:cd:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMyMjBDNDg0RDk5NkY1 OUUzRTAwNTJFQTVFNDI3QzUwREE2QTEzRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgNFeqESXVdKO3x1SCvRqX+n4eSuqYy9/AqW3syZUEPh0YdJ4+ uotkfqzPv4Gw5hyvopcy9x82pmpYQ83TK7gpaT/+kinG9hNVAujQn5MKL9+dGwws p6EtTvuOJSaUbV2/F4n9t7e7LSav7/A07H1jKyE74hl9PLXifjB3ISZFRwzJw0Yo rKchRbk0Y1XJ7j4ZK7e4eLBbt1NBENVC/uHcd7/vxSqsMKU/Kqqmv627KXH6aJpI VO3HYYz6TZEA9w1cHZOMb8vF4Qh7ZG1rddiWHKa6VUIWaEUNNKBj2J+pYzep+J68 H9hoNLkjSs2sYUuT10MQqhYK4264cr7pFRinAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwiDEhNmW9Z4+AFLqXkJ8UNpqE+AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dpREVoTm1XOVo0LUFGTHFY a0o4VU5wcUUtQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sMgwDQYJKoZIhvcNAQELBQADggEBAI8usUF98D/og4bkjsSwNb7AcA+NKrxiJrMG Rqv0RBT78dy66a/H+B0l1acjAM/2zVTM8/z5uKL1ISfGLRUe/EN8MZfGoWnh5eqE 5UyooOzFGHvmJmFf8xv/CFNyonJdrvLF9MccM64cxQk6j4MSrsfjQAXknXqsX1Ps XdGtmhCiSm1eyH2szn0DtGCjN+JJJkl6+i5DJN7aSI1ylxWDaj4zEJHhZHf5vvuh rfk6NTclRMNcz7bE1l55JLXluAGls/X70KbafaIa9i8uXMakMb0opD5XpnZS1Pjl GDBDyuZMfGlCv2nmTenfgA4gMYwjrnKCmdcYpDbxCPRTyowJzWk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org