$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y0q3a1gj6l9nIka6UzDEWswgbbo.roa File: Y0q3a1gj6l9nIka6UzDEWswgbbo.roa (raw, json) Hash identifier: TPSlCjbQLUxFliXKOIgjuzqSas5NDywOPQtxvzFEIu4= Subject key identifier: 63:4A:B7:6B:58:23:EA:5F:67:22:46:BA:53:30:C4:5A:CC:20:6D:BA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3408 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y0q3a1gj6l9nIka6UzDEWswgbbo.roa Signing time: Mon 10 Feb 2025 13:52:01 +0000 ROA not before: Mon 10 Feb 2025 13:52:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13320 (0x3408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=634AB76B5823EA5F672246BA5330C45ACC206DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:c1:c1:26:87:15:e6:e4:e4:58:7b:08:68: d8:52:f8:75:7e:1d:5b:f0:78:8f:8f:c4:be:0c:bd: 81:8c:f5:2d:2f:63:cd:06:3c:bd:5b:ba:87:3c:58: a4:ed:53:50:f7:cc:8a:c3:d6:3f:de:7d:eb:ad:b0: f4:01:5b:b4:45:47:10:c3:83:8a:bd:0c:96:94:d4: cc:7a:5f:e4:c2:9b:b5:23:f0:42:8f:8b:37:6b:cd: 67:6b:65:56:07:fd:dc:0e:9f:73:6f:60:f3:fb:b8: f0:80:cd:19:9f:cf:55:1f:9d:39:46:61:14:64:54: 55:cb:64:49:d2:1a:e5:de:b5:f7:0a:73:ec:3d:54: f4:cb:da:03:b9:d5:71:2f:e3:a9:97:da:b3:0a:b6: 85:93:db:ce:49:e1:fe:4a:fc:4b:ee:99:88:57:1a: bf:79:b9:30:0d:00:85:e6:9d:fa:ec:5f:13:53:81: a1:60:3d:f4:bd:92:dc:2a:67:56:d7:a9:f5:47:87: 54:10:c2:54:14:08:c9:8d:88:fb:76:f6:7e:4c:a7: fe:e0:04:1d:05:00:d1:08:de:b7:7e:dc:b0:f4:3e: 22:68:5c:22:fc:26:4e:30:fe:65:42:16:1d:0c:b1: 33:b3:2f:12:0b:27:b2:71:7a:e4:ae:fa:db:86:5e: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4A:B7:6B:58:23:EA:5F:67:22:46:BA:53:30:C4:5A:CC:20:6D:BA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y0q3a1gj6l9nIka6UzDEWswgbbo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.22.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ef:30:fc:cd:02:7d:8c:9c:e5:f2:54:2d:7c:20:ed:7b:1f: 89:81:28:d7:c3:c8:2b:49:f2:85:be:03:7a:6c:d0:c7:63:17: f6:e1:b9:0e:ec:a6:26:79:7e:34:96:9b:4d:05:6d:1c:34:8c: 91:c2:6d:ca:4a:f4:82:cd:ad:5c:0d:a3:4a:64:96:74:99:c5: c4:b0:b7:50:6e:59:75:8c:d7:2f:bb:30:08:09:cd:b7:4d:87: fe:92:e4:30:b0:4e:f6:ea:6b:8c:fe:38:71:96:33:02:7f:93: a2:76:40:67:71:8d:52:20:51:b9:c6:74:4d:22:20:68:e1:b9: 54:af:b1:25:c4:45:d4:c6:f6:5f:c2:c3:b4:8e:60:5a:cb:8e: 88:19:62:33:e9:d9:c9:19:16:b3:76:b8:b8:f7:ae:8a:30:c6: 56:e2:0e:6a:c1:1e:0c:f9:ff:36:35:2e:41:2e:64:cd:3d:08: dc:1c:43:38:01:ee:2f:5c:e7:2d:2c:45:fc:6c:37:9a:12:34: e3:38:c7:3c:b5:35:b9:3f:c4:a4:b0:81:66:a7:bc:ca:dc:80: ab:61:d1:83:90:b0:b1:77:ca:52:8e:26:ea:2f:b8:c0:cb:13: d1:96:0f:0e:80:14:98:93:2b:29:9b:cb:67:62:8a:5c:96:cb: 9b:99:36:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzNEFCNzZCNTgyM0VB NUY2NzIyNDZCQTUzMzBDNDVBQ0MyMDZEQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2scHBJocV5uTkWHsIaNhS+HV+HVvweI+PxL4MvYGM9S0vY80G PL1buoc8WKTtU1D3zIrD1j/efeutsPQBW7RFRxDDg4q9DJaU1Mx6X+TCm7Uj8EKP izdrzWdrZVYH/dwOn3NvYPP7uPCAzRmfz1UfnTlGYRRkVFXLZEnSGuXetfcKc+w9 VPTL2gO51XEv46mX2rMKtoWT285J4f5K/EvumYhXGr95uTANAIXmnfrsXxNTgaFg PfS9ktwqZ1bXqfVHh1QQwlQUCMmNiPt29n5Mp/7gBB0FANEI3rd+3LD0PiJoXCL8 Jk4w/mVCFh0MsTOzLxILJ7JxeuSu+tuGXogvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUY0q3a1gj6l9nIka6UzDEWswgbbowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1kwcTNhMWdqNmw5bklrYTZV ekRFV3N3Z2Jiby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sBYwDQYJKoZIhvcNAQELBQADggEBAAPvMPzNAn2MnOXyVC18IO17H4mBKNfDyCtJ 8oW+A3ps0MdjF/bhuQ7spiZ5fjSWm00FbRw0jJHCbcpK9ILNrVwNo0pklnSZxcSw t1BuWXWM1y+7MAgJzbdNh/6S5DCwTvbqa4z+OHGWMwJ/k6J2QGdxjVIgUbnGdE0i IGjhuVSvsSXERdTG9l/Cw7SOYFrLjogZYjPp2ckZFrN2uLj3roowxlbiDmrBHgz5 /zY1LkEuZM09CNwcQzgB7i9c5y0sRfxsN5oSNOM4xzy1Nbk/xKSwgWanvMrcgKth 0YOQsLF3ylKOJuovuMDLE9GWDw6AFJiTKymby2diilyWy5uZNgY= -----END CERTIFICATE-----Generated at Tue Apr 22 15:13:52 2025 by rpki-client