$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bpYGzm55IHR_HFx71NhtmMkRVhY.roa File: bpYGzm55IHR_HFx71NhtmMkRVhY.roa (raw, json) Hash identifier: Rv9YJGzV6Sz1TI7ECfhRdMSmxc39rfrwbdesZhMFmg4= Subject key identifier: 6E:96:06:CE:6E:79:20:74:7F:1C:5C:7B:D4:D8:6D:98:C9:11:56:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3544 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bpYGzm55IHR_HFx71NhtmMkRVhY.roa Signing time: Mon 10 Feb 2025 13:53:10 +0000 ROA not before: Mon 10 Feb 2025 13:53:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13636 (0x3544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6E9606CE6E7920747F1C5C7BD4D86D98C9115616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:a5:03:d5:f3:78:80:51:40:9d:d7:32:d1: 3b:7e:41:5e:98:36:e0:b7:e7:20:44:b9:0c:e2:52: ea:3b:34:8b:fd:09:fb:d3:42:34:6f:a8:73:e4:ed: 52:12:ef:15:0e:3e:d4:b0:1f:65:88:8f:c4:7c:7a: 45:e9:36:b2:e3:30:66:97:a4:db:e5:14:cb:a7:85: cf:e0:cd:2a:8c:78:51:ce:aa:42:75:43:6c:4e:01: 7a:44:89:6d:47:a4:e3:1f:3d:f6:e0:30:97:e6:e4: 0f:73:25:30:24:f3:aa:ec:5a:ea:ce:6c:53:4b:62: 58:d1:91:de:92:b0:61:f1:2a:3b:2e:ee:19:90:35: 72:77:8b:5a:1a:14:12:d3:49:18:7b:13:02:b4:4d: a2:ad:f8:66:6f:c8:f6:bf:53:ef:3e:ce:c9:31:a1: bc:fe:b1:a6:12:1b:06:c7:aa:8a:58:00:19:cc:9c: 2e:e0:ac:21:ff:a3:17:85:76:ac:15:40:c3:a7:0c: d7:11:10:b5:fa:d7:a5:89:af:09:5e:ed:fd:15:3f: db:cf:e4:eb:33:6e:6c:a6:c9:08:e7:41:74:52:2f: 50:fd:e1:72:ab:d6:49:2d:63:e0:f3:ec:95:49:37: aa:70:19:35:a9:54:1e:9d:0a:f8:b2:f1:6c:c4:d5: 12:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:96:06:CE:6E:79:20:74:7F:1C:5C:7B:D4:D8:6D:98:C9:11:56:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bpYGzm55IHR_HFx71NhtmMkRVhY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.40.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:92:4c:02:26:7b:d1:99:cb:cb:a1:a3:11:32:81:c9:bd:c4: 03:a9:ef:74:52:f1:50:cc:1d:3f:4f:0a:d0:ed:6d:26:0b:36: 58:3d:24:a8:68:c6:cf:e7:82:f3:a3:86:62:f1:5c:ef:ff:61: 5a:3b:08:2a:21:97:d5:8a:45:5a:2d:94:2c:dd:d1:f4:20:92: 5e:71:ef:0b:ee:ad:f1:9b:ab:e7:ba:52:3c:0d:71:5a:03:b8: c9:0b:a4:1e:91:2f:99:c5:90:cb:c7:7d:b0:da:76:79:6e:fe: f5:a5:b7:97:c6:95:11:1b:9c:15:35:c0:34:5d:d9:74:dc:b6: 41:b0:e8:5c:12:5e:04:7e:ca:17:c4:c7:ae:0b:ea:67:2d:1c: af:56:51:45:4c:6f:ac:8d:4d:76:60:06:cd:ec:ce:74:1a:63: 16:56:d8:a7:6f:e2:b7:24:6b:85:73:ac:c1:c7:a9:58:5d:c4: 3a:61:0d:9b:23:5c:f1:38:a2:01:29:a0:0a:07:fd:7a:00:e7: 85:6d:bb:4d:d6:8d:e4:c9:53:ce:b1:2c:bb:93:75:e6:07:86: 24:48:af:be:dd:37:b8:d6:e1:42:83:0d:ff:9f:b8:2c:c8:96: c7:c8:57:f8:85:b3:8f:91:06:a1:d1:46:b7:3f:e3:be:41:52: 7e:1a:0f:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZFOTYwNkNFNkU3OTIw NzQ3RjFDNUM3QkQ0RDg2RDk4QzkxMTU2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjoKUD1fN4gFFAndcy0Tt+QV6YNuC35yBEuQziUuo7NIv9CfvT QjRvqHPk7VIS7xUOPtSwH2WIj8R8ekXpNrLjMGaXpNvlFMunhc/gzSqMeFHOqkJ1 Q2xOAXpEiW1HpOMfPfbgMJfm5A9zJTAk86rsWurObFNLYljRkd6SsGHxKjsu7hmQ NXJ3i1oaFBLTSRh7EwK0TaKt+GZvyPa/U+8+zskxobz+saYSGwbHqopYABnMnC7g rCH/oxeFdqwVQMOnDNcRELX616WJrwle7f0VP9vP5OszbmymyQjnQXRSL1D94XKr 1kktY+Dz7JVJN6pwGTWpVB6dCviy8WzE1RITAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbpYGzm55IHR/HFx71NhtmMkRVhYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JwWUd6bTU1SUhSX0hGeDcx Tmh0bU1rUlZoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sSgwDQYJKoZIhvcNAQELBQADggEBAJ+STAIme9GZy8uhoxEygcm9xAOp73RS8VDM HT9PCtDtbSYLNlg9JKhoxs/ngvOjhmLxXO//YVo7CCohl9WKRVotlCzd0fQgkl5x 7wvurfGbq+e6UjwNcVoDuMkLpB6RL5nFkMvHfbDadnlu/vWlt5fGlREbnBU1wDRd 2XTctkGw6FwSXgR+yhfEx64L6mctHK9WUUVMb6yNTXZgBs3sznQaYxZW2Kdv4rck a4VzrMHHqVhdxDphDZsjXPE4ogEpoAoH/XoA54Vtu03WjeTJU86xLLuTdeYHhiRI r77dN7jW4UKDDf+fuCzIlsfIV/iFs4+RBqHRRrc/475BUn4aD6E= -----END CERTIFICATE-----Generated at Fri Apr 18 23:06:53 2025 by rpki-client