$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvwBAc2498V1Q8N6eXLSCZcsqM8.roa File: xvwBAc2498V1Q8N6eXLSCZcsqM8.roa (raw, json) Hash identifier: oWVsdFKBumDT8X0f3/KBKHMwfPli6qBEdftm8cA6TgU= Subject key identifier: C6:FC:01:01:CD:B8:F7:C5:75:43:C3:7A:79:72:D2:09:97:2C:A8:CF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29AF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvwBAc2498V1Q8N6eXLSCZcsqM8.roa Signing time: Fri 01 Sep 2023 10:06:56 +0000 ROA not before: Fri 01 Sep 2023 10:06:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10671 (0x29af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C6FC0101CDB8F7C57543C37A7972D209972CA8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:c5:33:e8:6c:b1:3f:00:f1:2a:b2:4c:93: ae:bb:11:46:6a:4e:b3:f2:56:d8:51:6e:22:78:79: ab:b3:42:70:c8:2c:54:26:95:b4:3d:68:ef:ac:18: 15:ac:f2:82:25:ef:88:d1:9c:a8:fb:b0:f3:ba:f4: 14:39:a5:26:77:8b:05:18:81:b1:c1:1b:61:1c:04: b7:a4:72:5a:ba:7b:bf:3b:ea:2f:b6:43:8d:41:0e: 71:d5:e0:e4:8e:79:32:0a:03:58:0b:61:27:a6:ff: 19:11:fd:7f:32:79:db:2b:96:ef:33:00:f6:d3:b7: e7:99:77:f0:ab:70:fb:7a:8c:e0:61:a0:34:95:78: 76:c0:68:19:88:18:10:ad:ec:75:74:e5:1b:d4:8f: 60:dd:22:0d:64:88:08:6b:d5:38:6c:54:60:2d:29: ef:4f:1d:2d:14:9a:96:d3:d0:f1:f5:64:3b:72:ce: 89:75:9d:1d:ac:6e:24:bb:8a:00:5a:e8:ff:f7:47: c4:2e:ae:7f:4e:e3:4c:78:96:16:14:50:c8:89:fb: c9:4b:d3:04:59:ff:f3:60:61:72:64:8e:e5:7e:23: 5e:9c:be:5c:01:0c:27:3b:e2:10:e5:af:1d:91:eb: 96:ea:dd:c4:a6:c5:fe:ac:46:1b:35:ca:22:74:ee: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FC:01:01:CD:B8:F7:C5:75:43:C3:7A:79:72:D2:09:97:2C:A8:CF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvwBAc2498V1Q8N6eXLSCZcsqM8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.80.0/21 Signature Algorithm: sha256WithRSAEncryption 34:b6:74:c8:eb:f1:4f:ad:a6:11:89:7e:20:52:9b:54:80:d1: 1b:1d:ca:4b:4b:26:87:c8:c4:22:85:f9:b0:24:b8:cd:67:89: e9:ca:0d:c7:2f:de:6b:d3:bf:c2:5f:75:11:81:96:56:91:9e: 7d:a3:a2:3d:ee:ad:83:83:2a:05:0b:8c:28:f8:61:d1:5f:ac: 8d:d7:2a:d2:20:93:67:09:88:a0:67:75:31:e1:9f:bd:7e:68: b6:7a:f4:24:0b:f9:5e:7a:fa:a9:35:b9:8b:8a:05:d4:fd:c9: 55:7c:4d:55:c2:74:98:24:c0:4f:84:b1:1e:b5:cd:e0:58:45: 31:be:5e:14:18:21:d0:3e:2c:ca:43:63:2f:3d:28:b5:7d:d9: 54:f1:9d:a7:04:49:c0:59:38:fb:78:56:b3:8e:a8:dc:b5:d8: cb:5a:f4:5f:d4:41:03:4c:6a:6b:76:51:6e:b5:1d:fb:c2:f5: 0b:7f:86:df:66:06:26:9d:9e:1d:3a:37:c2:32:f2:8c:ea:2a: aa:80:32:8e:b9:93:69:a6:3a:15:21:3c:c9:cf:88:a8:94:e9: 86:28:c2:d4:b6:fb:e4:b2:06:e0:e3:b2:4a:66:5e:c6:ef:f9: a8:02:f3:41:1f:87:a0:3f:15:6c:86:71:8a:f4:20:e2:ab:6b: 6a:29:16:f1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM2RkMwMTAxQ0RCOEY3 QzU3NTQzQzM3QTc5NzJEMjA5OTcyQ0E4Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLt8Uz6GyxPwDxKrJMk667EUZqTrPyVthRbiJ4eauzQnDILFQm lbQ9aO+sGBWs8oIl74jRnKj7sPO69BQ5pSZ3iwUYgbHBG2EcBLekclq6e7876i+2 Q41BDnHV4OSOeTIKA1gLYSem/xkR/X8yedsrlu8zAPbTt+eZd/CrcPt6jOBhoDSV eHbAaBmIGBCt7HV05RvUj2DdIg1kiAhr1ThsVGAtKe9PHS0UmpbT0PH1ZDtyzol1 nR2sbiS7igBa6P/3R8Qurn9O40x4lhYUUMiJ+8lL0wRZ//NgYXJkjuV+I16cvlwB DCc74hDlrx2R65bq3cSmxf6sRhs1yiJ07mcbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxvwBAc2498V1Q8N6eXLSCZcsqM8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3h2d0JBYzI0OThWMVE4TjZl WExTQ1pjc3FNOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sFAwDQYJKoZIhvcNAQELBQADggEBADS2dMjr8U+tphGJfiBSm1SA0RsdyktLJofI xCKF+bAkuM1nienKDccv3mvTv8JfdRGBllaRnn2joj3urYODKgULjCj4YdFfrI3X KtIgk2cJiKBndTHhn71+aLZ69CQL+V56+qk1uYuKBdT9yVV8TVXCdJgkwE+EsR61 zeBYRTG+XhQYIdA+LMpDYy89KLV92VTxnacEScBZOPt4VrOOqNy12Mta9F/UQQNM amt2UW61HfvC9Qt/ht9mBiadnh06N8Iy8ozqKqqAMo65k2mmOhUhPMnPiKiU6YYo wtS2++SyBuDjskpmXsbv+agC80Efh6A/FWyGcYr0IOKra2opFvE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org