$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa File: zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa (raw, json) Hash identifier: v4OE7SMoGyEucSiHwiGfQ5WqGnqY8GGlG3Xwq9taLq8= Subject key identifier: CE:69:71:86:46:E2:F9:C0:54:C1:DA:93:EC:3A:C7:95:BF:60:86:C6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FD1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa Signing time: Mon 26 Aug 2024 05:28:53 +0000 ROA not before: Mon 26 Aug 2024 05:28:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12241 (0x2fd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CE69718646E2F9C054C1DA93EC3AC795BF6086C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:df:e9:a0:7b:58:3f:4d:d0:f1:31:d7:da:f2: e6:c2:f9:65:6d:05:6f:54:4e:46:ee:98:90:ef:36: 65:6c:57:b4:cf:af:0d:12:25:e0:2c:dc:33:b0:3d: d5:a0:4d:30:1d:6c:21:3c:2f:91:f3:7a:b5:74:39: c7:d7:4f:e9:df:a3:c9:25:43:7c:8a:d6:3e:41:38: 87:76:f1:5f:03:ad:1e:e9:4c:0d:cd:fb:1e:0f:84: 91:2a:d9:86:13:26:5e:87:7b:c9:66:51:f2:55:14: 3b:41:fd:7e:0e:3a:2b:58:2c:f7:b4:c0:dc:0a:94: 82:f9:20:86:b6:9f:70:3f:84:70:d2:b1:e8:ad:70: 35:ff:c9:d2:7e:ee:f5:18:d9:d1:92:ee:08:09:56: 56:4c:32:a5:6a:fe:73:d2:e4:ac:c1:82:14:de:2b: 3b:a5:60:cf:68:4a:4c:43:e2:95:b4:c7:d8:a9:24: bd:9f:3f:2b:55:01:cf:1a:3f:0d:66:b8:18:7c:6c: d9:a0:c1:92:98:0f:e3:5c:f3:4e:e7:c0:ca:b5:a4: 95:45:32:96:0c:fe:1c:d3:80:dc:96:24:78:9b:dc: 15:d5:41:ee:6d:08:c1:3f:3d:85:ea:0a:ac:e4:93: b2:41:9c:e4:d8:aa:49:d0:e2:1d:a4:6c:81:0e:0c: 08:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:69:71:86:46:E2:F9:C0:54:C1:DA:93:EC:3A:C7:95:BF:60:86:C6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmlxhkbi-cBUwdqT7DrHlb9ghsY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.0.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:cf:42:d5:70:6d:a9:5a:61:ed:4e:48:37:5c:e9:88:bf:49: ad:2c:d0:20:09:5e:8b:47:0a:58:6d:af:38:6c:1f:96:e1:d6: 03:f9:6f:a8:be:64:3f:1a:7b:24:2e:5d:e8:29:3d:c7:9a:2f: 34:f9:21:c1:89:1a:7b:d8:83:21:30:01:2a:3a:2f:67:d5:81: 3a:e2:b6:de:f4:ed:6a:7b:e3:b9:2d:8a:ad:5b:01:d6:1c:93: 3d:a4:9c:28:ed:e1:b1:2f:ab:6a:6d:33:86:07:2e:df:16:83: 77:de:1c:56:ed:f8:30:14:aa:ff:68:ac:bd:9d:fc:17:17:4e: 17:8f:ad:fc:60:78:5d:e0:76:ea:7d:f0:95:69:5a:d9:18:7a: 75:21:7c:ad:40:71:74:ec:7d:62:a5:a1:4e:dd:41:77:3d:dd: 88:9f:69:d6:22:6e:b3:74:bd:47:fd:26:53:98:2e:78:09:b0: f5:6f:1b:01:e2:4e:13:a5:a6:68:05:a3:f0:17:15:c6:d0:60: 81:04:17:05:0a:c7:72:a0:b3:2f:07:df:be:ce:be:82:a9:35: 42:d0:3d:ff:6b:23:51:82:23:1b:a8:87:bb:51:ab:56:9c:6d: 40:cd:2b:b6:77:02:d9:f1:8a:cd:7f:ca:82:d1:f8:6d:82:84: 5d:51:b0:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFNjk3MTg2NDZFMkY5 QzA1NEMxREE5M0VDM0FDNzk1QkY2MDg2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi3+mge1g/TdDxMdfa8ubC+WVtBW9UTkbumJDvNmVsV7TPrw0S JeAs3DOwPdWgTTAdbCE8L5HzerV0OcfXT+nfo8klQ3yK1j5BOId28V8DrR7pTA3N +x4PhJEq2YYTJl6He8lmUfJVFDtB/X4OOitYLPe0wNwKlIL5IIa2n3A/hHDSseit cDX/ydJ+7vUY2dGS7ggJVlZMMqVq/nPS5KzBghTeKzulYM9oSkxD4pW0x9ipJL2f PytVAc8aPw1muBh8bNmgwZKYD+Nc807nwMq1pJVFMpYM/hzTgNyWJHib3BXVQe5t CME/PYXqCqzkk7JBnOTYqknQ4h2kbIEODAgDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzmlxhkbi+cBUwdqT7DrHlb9ghsYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ptbHhoa2JpLWNCVXdkcVQ3 RHJIbGI5Z2hzWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0 sAAwDQYJKoZIhvcNAQELBQADggEBABvPQtVwbalaYe1OSDdc6Yi/Sa0s0CAJXotH ClhtrzhsH5bh1gP5b6i+ZD8aeyQuXegpPceaLzT5IcGJGnvYgyEwASo6L2fVgTri tt707Wp747ktiq1bAdYckz2knCjt4bEvq2ptM4YHLt8Wg3feHFbt+DAUqv9orL2d /BcXThePrfxgeF3gdup98JVpWtkYenUhfK1AcXTsfWKloU7dQXc93YifadYibrN0 vUf9JlOYLngJsPVvGwHiThOlpmgFo/AXFcbQYIEEFwUKx3Kgsy8H377OvoKpNULQ Pf9rI1GCIxuoh7tRq1acbUDNK7Z3Atnxis1/yoLR+G2ChF1RsJI= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:24 2024 by rpki-client on console-ams.rpki-client.org