$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2ZP3DPe1ddI9B1_lACTrhdTInL0.roa File: 2ZP3DPe1ddI9B1_lACTrhdTInL0.roa (raw, json) Hash identifier: kbcVb3tWZFeEcZ/BjoyDi+t+BeHlN1/6XrADzAEMm0c= Subject key identifier: D9:93:F7:0C:F7:B5:75:D2:3D:07:5F:E5:00:24:EB:85:D4:C8:9C:BD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 356C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2ZP3DPe1ddI9B1_lACTrhdTInL0.roa Signing time: Mon 10 Feb 2025 13:53:19 +0000 ROA not before: Mon 10 Feb 2025 13:53:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13676 (0x356c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D993F70CF7B575D23D075FE50024EB85D4C89CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:2b:95:88:ab:24:01:82:2c:4a:cc:dd:72: f1:64:52:84:02:c7:28:fd:fb:22:3c:12:4a:4b:9a: b0:d8:aa:4c:32:b4:23:3a:06:b9:f8:40:54:39:39: 39:d9:03:44:fc:f4:f6:b3:d2:33:d7:18:11:ff:89: 33:28:be:7b:5b:7f:81:d0:d0:2f:3d:a4:e7:d7:11: 62:6e:c1:0e:00:61:3a:85:24:b8:a6:8d:b3:0c:8d: 94:17:ae:a7:65:77:8a:70:da:5a:c2:3b:56:9f:ae: 46:65:26:4f:7c:41:31:27:96:3f:ec:a3:ed:fe:30: 75:df:44:53:3c:4e:ab:fa:31:1d:68:82:33:2b:18: d1:f2:17:65:ec:46:a0:8e:97:5d:c8:ee:01:2c:95: 87:b0:20:3f:ef:a1:21:67:89:49:97:92:5b:3a:e9: b0:7d:65:92:b1:d8:fb:7c:cc:3b:d9:d7:22:2d:1c: 36:4a:b9:83:1a:f6:d1:3e:1f:22:27:4c:8d:f4:1a: 84:8d:41:6d:c4:0d:22:e0:55:56:21:87:fe:45:c7: 41:bc:57:ad:c4:0a:49:ad:59:8b:7e:8f:ae:75:63: 51:27:14:7b:1c:2a:5e:42:fb:1e:a3:13:e5:db:2b: 25:57:58:3f:d4:fd:25:fb:75:fa:06:d8:fd:7b:6e: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:F7:0C:F7:B5:75:D2:3D:07:5F:E5:00:24:EB:85:D4:C8:9C:BD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2ZP3DPe1ddI9B1_lACTrhdTInL0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.132.0/22 Signature Algorithm: sha256WithRSAEncryption 00:7e:48:68:8e:ad:cb:98:72:3d:1d:62:b7:af:24:fe:b2:b1: 2c:cc:da:d6:02:da:37:bd:58:e6:31:75:52:ce:67:bb:bc:1a: 42:0e:c9:12:a5:2a:fd:1c:c1:dc:ca:06:70:02:8d:2f:18:27: e9:40:cd:54:79:fb:c2:e4:19:9a:d4:21:db:af:6f:38:15:c2: 4f:71:75:d7:da:4f:6b:f9:ab:34:01:4f:59:e0:40:6e:28:25: f1:66:db:f6:de:16:7a:a6:39:4b:6f:79:4b:3b:79:3e:73:07: 5e:d6:d2:38:02:b7:0d:18:25:a4:9b:71:65:11:43:8a:87:33: 19:5c:a5:8e:a8:2a:20:85:7a:d2:de:34:6e:8f:bf:f3:0e:39: 9c:5f:9a:cc:51:87:80:6a:c5:d6:e2:24:04:8f:ad:23:59:d2: 17:45:f4:c5:93:dd:53:d4:27:e1:9f:54:42:78:e9:bb:cf:30: 10:e1:46:54:61:5c:64:d2:e6:1b:85:2f:70:c0:36:8b:8c:89: 90:f4:82:1f:94:5d:e1:bf:c3:ac:8a:27:3d:a9:8a:93:42:46: da:ce:df:b3:76:4b:39:97:f9:e5:00:51:f5:8b:64:27:0f:6c: c2:12:93:b1:9d:0e:56:e7:f2:ec:4f:4c:7d:f6:ad:a8:80:c3: f5:48:1b:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ5OTNGNzBDRjdCNTc1 RDIzRDA3NUZFNTAwMjRFQjg1RDRDODlDQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXkiuViKskAYIsSszdcvFkUoQCxyj9+yI8EkpLmrDYqkwytCM6 Brn4QFQ5OTnZA0T89Paz0jPXGBH/iTMovntbf4HQ0C89pOfXEWJuwQ4AYTqFJLim jbMMjZQXrqdld4pw2lrCO1afrkZlJk98QTEnlj/so+3+MHXfRFM8Tqv6MR1ogjMr GNHyF2XsRqCOl13I7gEslYewID/voSFniUmXkls66bB9ZZKx2Pt8zDvZ1yItHDZK uYMa9tE+HyInTI30GoSNQW3EDSLgVVYhh/5Fx0G8V63ECkmtWYt+j651Y1EnFHsc Kl5C+x6jE+XbKyVXWD/U/SX7dfoG2P17bmkBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2ZP3DPe1ddI9B1/lACTrhdTInL0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJaUDNEUGUxZGRJOUIxX2xB Q1RyaGRUSW5MMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sYQwDQYJKoZIhvcNAQELBQADggEBAAB+SGiOrcuYcj0dYrevJP6ysSzM2tYC2je9 WOYxdVLOZ7u8GkIOyRKlKv0cwdzKBnACjS8YJ+lAzVR5+8LkGZrUIduvbzgVwk9x ddfaT2v5qzQBT1ngQG4oJfFm2/beFnqmOUtveUs7eT5zB17W0jgCtw0YJaSbcWUR Q4qHMxlcpY6oKiCFetLeNG6Pv/MOOZxfmsxRh4BqxdbiJASPrSNZ0hdF9MWT3VPU J+GfVEJ46bvPMBDhRlRhXGTS5huFL3DANouMiZD0gh+UXeG/w6yKJz2pipNCRtrO 37N2SzmX+eUAUfWLZCcPbMISk7GdDlbn8uxPTH32raiAw/VIGxY= -----END CERTIFICATE-----Generated at Fri Apr 18 22:29:40 2025 by rpki-client