$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvJiGt7Yd8lNZpFiTL1rFMN967M.roa File: xvJiGt7Yd8lNZpFiTL1rFMN967M.roa (raw, json) Hash identifier: RfwNp/d8ksfh+ff0dqszugdt7/0hnCgxEgEl7cbHBYY= Subject key identifier: C6:F2:62:1A:DE:D8:77:C9:4D:66:91:62:4C:BD:6B:14:C3:7D:EB:B3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32D2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvJiGt7Yd8lNZpFiTL1rFMN967M.roa Signing time: Mon 26 Aug 2024 05:32:03 +0000 ROA not before: Mon 26 Aug 2024 05:32:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13010 (0x32d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C6F2621ADED877C94D6691624CBD6B14C37DEBB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:c7:55:a1:f9:97:8e:1d:27:fa:60:78:2f: 67:28:9b:5b:35:04:eb:8f:b9:4e:a4:b7:6f:eb:17: cd:83:dd:3e:6b:bc:88:9c:24:5f:27:5b:a8:e3:29: 11:19:02:a0:7e:16:f8:74:c3:03:46:fd:80:44:c1: 0e:63:c0:38:c4:f8:e0:8d:9b:91:5f:04:00:dc:d9: 67:3c:a3:f1:a7:38:3c:de:9f:31:42:84:d8:11:fb: 85:b5:6f:e5:41:34:9b:a3:a7:4b:7d:9a:75:17:fd: ef:3d:01:06:ca:dc:c7:75:eb:56:3a:d1:00:b5:f0: 04:f9:33:75:ce:49:1c:ab:91:f9:9d:10:3f:7a:c4: ab:e8:e2:6b:88:d5:59:e4:b4:8b:5b:d9:08:0c:53: 26:9c:ae:65:46:00:63:51:2e:d3:12:63:cb:5b:4f: c1:41:37:46:f4:f2:37:ba:cc:92:85:d1:98:47:38: 52:e2:95:70:98:20:ae:b3:55:60:ec:d2:d4:3b:03: f1:ce:14:04:b3:27:db:4e:2d:70:32:e0:96:de:43: 32:86:74:04:ef:c4:d2:a9:e8:53:90:11:31:12:49: 5f:5c:9e:87:5f:11:e5:71:41:35:6c:f4:9e:b2:01: a9:b5:ac:bf:55:2b:8c:89:f3:50:02:f1:12:bb:f1: 1b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F2:62:1A:DE:D8:77:C9:4D:66:91:62:4C:BD:6B:14:C3:7D:EB:B3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvJiGt7Yd8lNZpFiTL1rFMN967M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.216.0/22 Signature Algorithm: sha256WithRSAEncryption 82:0d:45:dd:7a:c5:7d:9d:de:2b:10:62:d9:90:d3:f4:eb:5d: 83:b3:e2:51:5e:e7:29:65:dd:4b:74:8e:5c:36:a4:07:21:65: 79:c3:eb:17:dc:f0:9b:3f:f0:10:08:4d:56:3c:f4:bf:54:00: 56:e3:aa:13:3d:88:fb:d7:bf:83:cf:2f:bd:b7:2f:1e:23:84: 37:d0:7f:f4:7d:06:17:75:81:c5:c8:b9:59:2e:1c:a0:9e:f0: 00:05:28:59:20:90:49:4d:1c:0c:08:5e:c2:d0:e4:37:0d:e1: 67:d1:2f:0a:49:47:aa:d9:c3:8e:c5:09:5d:58:1e:0d:94:b5: 23:d3:be:95:41:a4:1d:2c:ae:3d:2f:cf:30:94:81:94:f8:92: 41:70:1d:75:60:03:24:81:41:19:fc:1c:3b:28:a9:93:db:f2: b9:8a:50:f5:0f:75:c7:9c:24:09:3e:9f:a3:76:6b:30:a9:ff: bd:16:87:16:3c:87:41:49:9a:a0:ce:d7:ae:cb:00:38:bd:15: 49:e7:4f:51:b9:27:33:ff:36:af:34:7d:fc:5a:68:5a:3e:6f: bc:6d:79:0d:f4:93:c0:83:81:31:2d:8d:8c:70:be:f7:02:e5: d8:be:09:b6:00:59:75:d6:29:41:8d:4c:fa:08:65:93:91:25: 53:3e:83:09 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM2RjI2MjFBREVEODc3 Qzk0RDY2OTE2MjRDQkQ2QjE0QzM3REVCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/LsdVofmXjh0n+mB4L2com1s1BOuPuU6kt2/rF82D3T5rvIic JF8nW6jjKREZAqB+Fvh0wwNG/YBEwQ5jwDjE+OCNm5FfBADc2Wc8o/GnODzenzFC hNgR+4W1b+VBNJujp0t9mnUX/e89AQbK3Md161Y60QC18AT5M3XOSRyrkfmdED96 xKvo4muI1VnktItb2QgMUyacrmVGAGNRLtMSY8tbT8FBN0b08je6zJKF0ZhHOFLi lXCYIK6zVWDs0tQ7A/HOFASzJ9tOLXAy4JbeQzKGdATvxNKp6FOQETESSV9cnodf EeVxQTVs9J6yAam1rL9VK4yJ81AC8RK78RvpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxvJiGt7Yd8lNZpFiTL1rFMN967MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3h2SmlHdDdZZDhsTlpwRmlU TDFyRk1OOTY3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sdgwDQYJKoZIhvcNAQELBQADggEBAIINRd16xX2d3isQYtmQ0/TrXYOz4lFe5yll 3Ut0jlw2pAchZXnD6xfc8Js/8BAITVY89L9UAFbjqhM9iPvXv4PPL723Lx4jhDfQ f/R9Bhd1gcXIuVkuHKCe8AAFKFkgkElNHAwIXsLQ5DcN4WfRLwpJR6rZw47FCV1Y Hg2UtSPTvpVBpB0srj0vzzCUgZT4kkFwHXVgAySBQRn8HDsoqZPb8rmKUPUPdcec JAk+n6N2azCp/70WhxY8h0FJmqDO167LADi9FUnnT1G5JzP/Nq80ffxaaFo+b7xt eQ30k8CDgTEtjYxwvvcC5di+CbYAWXXWKUGNTPoIZZORJVM+gwk= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org