$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1b8lPq6ySGCEkVeIMmHmWGZUZtc.roa File: 1b8lPq6ySGCEkVeIMmHmWGZUZtc.roa (raw, json) Hash identifier: T/PLe4M7KqU7Xluexg6srIpn6Vc66PjLLGCf/qQj1kU= Subject key identifier: D5:BF:25:3E:AE:B2:48:60:84:91:57:88:32:61:E6:58:66:54:66:D7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3442 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1b8lPq6ySGCEkVeIMmHmWGZUZtc.roa Signing time: Mon 10 Feb 2025 13:52:12 +0000 ROA not before: Mon 10 Feb 2025 13:52:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13378 (0x3442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D5BF253EAEB24860849157883261E658665466D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:95:37:47:77:cd:0a:f1:84:b0:71:41:75:b0: a2:c6:50:52:5e:aa:9d:56:7b:ba:dc:a1:9a:20:dc: 6f:3e:4b:17:a2:83:dc:de:bc:75:ec:7c:0b:0d:80: c3:69:c4:2c:ef:99:08:ae:00:32:5f:b3:8a:f2:36: 1a:b4:32:51:04:28:c7:76:0e:bd:ec:ff:2e:7b:d5: 0a:7f:90:5b:fd:8d:10:da:c4:a1:87:50:da:f1:9c: 12:c1:63:eb:25:ba:93:7e:83:e9:e2:bd:fb:8a:cc: bd:96:77:bc:ed:a5:60:ac:65:ea:f5:e1:c6:37:6b: a4:56:14:0d:60:52:24:85:0a:7b:a1:14:67:bf:32: 58:3a:68:1b:96:1c:de:0b:00:71:17:9b:48:b9:8a: f0:89:c4:5e:0e:83:3e:14:00:92:ae:4a:c4:9e:d3: 56:2e:e5:8a:a1:d2:59:ba:27:a5:eb:ee:41:54:49: 97:29:a1:3d:44:82:c8:08:76:72:d4:de:38:ba:2b: f7:43:f5:5b:d2:98:fc:ba:48:76:6e:5f:de:d7:94: 36:ac:c8:26:41:a6:b1:30:34:32:96:40:57:3c:53: 63:ed:bc:1f:ce:90:cf:91:4e:f3:0b:99:fd:7f:5a: 80:04:a3:41:0c:40:ef:5a:9f:b6:0d:c6:20:1c:67: a2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BF:25:3E:AE:B2:48:60:84:91:57:88:32:61:E6:58:66:54:66:D7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1b8lPq6ySGCEkVeIMmHmWGZUZtc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.112.0/23 Signature Algorithm: sha256WithRSAEncryption 80:73:50:49:65:0d:c4:dc:e8:47:e0:45:c9:58:f2:2c:7f:bc: 3d:de:0c:90:ef:b7:fb:97:ce:af:ae:e8:3b:e9:aa:86:5e:d3: d9:f0:cc:e5:57:82:f1:9b:a7:b1:80:b7:4a:cb:a3:7e:93:44: 58:57:88:09:8e:6c:d5:a2:36:9b:ad:91:41:89:03:84:65:85: 16:bb:13:24:53:db:4d:ee:ac:70:86:1b:6b:e4:5e:99:46:b8: 3a:12:5b:8e:e5:c9:d3:14:3a:44:dc:31:31:8e:63:60:6a:6a: 21:58:00:05:ad:23:81:04:a4:d5:8e:b4:14:32:c7:91:81:11: d6:b9:71:f2:8c:c9:9b:17:bf:4f:2d:7d:bc:41:82:81:26:6f: 29:cf:ee:2c:ba:08:a8:3f:16:34:f2:cb:42:19:a5:09:65:3f: f6:ed:66:1f:a4:14:22:9a:0b:ef:89:38:15:00:60:8d:1d:de: 93:36:b3:8e:55:8e:32:e5:f1:59:f2:de:a3:6f:61:37:92:14: 5a:09:b7:3f:ef:54:65:24:c9:37:ad:a9:81:fd:ee:97:15:e5: b7:72:d8:4a:95:7f:1a:6a:47:48:3e:70:cf:f3:91:4a:e1:02: 68:39:2a:8d:d7:50:a8:08:f9:f6:ad:2f:95:7a:bc:d2:b0:ed: 48:e1:47:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1QkYyNTNFQUVCMjQ4 NjA4NDkxNTc4ODMyNjFFNjU4NjY1NDY2RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdlTdHd80K8YSwcUF1sKLGUFJeqp1We7rcoZog3G8+Sxeig9ze vHXsfAsNgMNpxCzvmQiuADJfs4ryNhq0MlEEKMd2Dr3s/y571Qp/kFv9jRDaxKGH UNrxnBLBY+slupN+g+nivfuKzL2Wd7ztpWCsZer14cY3a6RWFA1gUiSFCnuhFGe/ Mlg6aBuWHN4LAHEXm0i5ivCJxF4Ogz4UAJKuSsSe01Yu5Yqh0lm6J6Xr7kFUSZcp oT1EgsgIdnLU3ji6K/dD9VvSmPy6SHZuX97XlDasyCZBprEwNDKWQFc8U2PtvB/O kM+RTvMLmf1/WoAEo0EMQO9an7YNxiAcZ6IhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1b8lPq6ySGCEkVeIMmHmWGZUZtcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFiOGxQcTZ5U0dDRWtWZUlN bUhtV0daVVp0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sXAwDQYJKoZIhvcNAQELBQADggEBAIBzUEllDcTc6EfgRclY8ix/vD3eDJDvt/uX zq+u6DvpqoZe09nwzOVXgvGbp7GAt0rLo36TRFhXiAmObNWiNputkUGJA4RlhRa7 EyRT203urHCGG2vkXplGuDoSW47lydMUOkTcMTGOY2BqaiFYAAWtI4EEpNWOtBQy x5GBEda5cfKMyZsXv08tfbxBgoEmbynP7iy6CKg/FjTyy0IZpQllP/btZh+kFCKa C++JOBUAYI0d3pM2s45VjjLl8Vny3qNvYTeSFFoJtz/vVGUkyTetqYH97pcV5bdy 2EqVfxpqR0g+cM/zkUrhAmg5Ko3XUKgI+fatL5V6vNKw7UjhR4A= -----END CERTIFICATE-----Generated at Fri Apr 18 22:34:25 2025 by rpki-client