$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/frAM-UnndO09rutwHuFvn5wyVvE.roa File: frAM-UnndO09rutwHuFvn5wyVvE.roa (raw, json) Hash identifier: opJ7Zvi/klyVd3OHbh1S1CQk9dab+I6AcDQ2Zlamzns= Subject key identifier: 7E:B0:0C:F9:49:E7:74:ED:3D:AE:EB:70:1E:E1:6F:9F:9C:32:56:F1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34A6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/frAM-UnndO09rutwHuFvn5wyVvE.roa Signing time: Mon 10 Feb 2025 13:52:35 +0000 ROA not before: Mon 10 Feb 2025 13:52:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13478 (0x34a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7EB00CF949E774ED3DAEEB701EE16F9F9C3256F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:71:23:f1:ba:c3:21:63:d6:a7:64:ff:a6: 37:8f:13:0d:69:73:fb:93:63:cc:0e:05:10:14:84: 33:13:38:d9:ec:a1:a3:b1:af:cd:6b:93:66:88:5d: 42:c2:b1:d3:8c:5f:24:0a:23:fd:73:fa:d8:2b:85: 9a:76:bc:14:00:9a:27:0d:b1:25:c1:30:eb:3c:bf: 0b:89:4c:83:45:7b:cb:1b:87:96:11:fa:25:ad:4a: ca:00:c5:d3:59:9c:32:38:ca:af:a0:b7:65:f3:0e: 72:6b:c3:d1:21:0c:2a:b3:9b:f0:e5:35:8b:19:f5: 78:4c:ff:12:a0:71:50:df:80:96:c0:d7:24:c2:3c: 37:d8:17:c8:fd:08:da:6b:9f:9f:b9:c6:50:56:2d: 48:4a:5a:33:be:3b:88:c3:74:f2:3c:86:ad:11:88: eb:d0:6f:0b:f0:be:ee:9e:45:91:3c:59:fa:8d:55: 7d:51:38:d8:ea:fc:9b:09:71:4e:62:ec:2a:96:93: be:70:15:10:44:d0:98:64:2a:48:0b:eb:08:60:fa: 14:93:7e:1f:6a:69:ed:bc:11:32:d4:34:16:fe:91: 3f:11:7d:21:d6:c2:4b:d3:b4:87:f7:fa:4d:f3:c6: 66:d9:0f:c2:6c:dc:5c:d0:90:2a:b1:14:cd:5e:fa: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B0:0C:F9:49:E7:74:ED:3D:AE:EB:70:1E:E1:6F:9F:9C:32:56:F1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/frAM-UnndO09rutwHuFvn5wyVvE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.104.0/22 Signature Algorithm: sha256WithRSAEncryption a8:f9:21:83:55:93:c2:74:2d:3f:f8:39:bf:ad:99:b1:54:c3: 6b:2d:17:d0:67:1f:fe:c5:f0:d2:69:18:c8:06:0e:0b:a3:af: b2:28:24:4a:5a:59:5a:58:83:d0:aa:a1:eb:4e:a5:e7:27:59: fe:96:d8:ff:15:af:ec:d9:4f:85:9b:d3:12:cf:35:d4:03:57: f5:7b:08:4c:73:95:94:d8:17:08:6e:7f:7c:79:b4:4a:99:97: 11:51:80:d1:2e:f5:09:b9:85:15:12:7d:7b:e8:b8:b4:5a:9e: fd:88:89:33:b5:e6:a1:1b:f2:46:9d:68:15:ec:4c:9e:d8:b7: 84:ac:65:21:64:02:96:12:08:19:31:5e:bc:f8:d4:82:e4:f7: 04:29:08:42:cd:cc:e0:d3:49:27:30:15:78:e7:5b:bd:6a:51: c8:e1:74:17:0c:31:7f:85:5d:e5:d7:24:7b:24:75:5c:45:d6: a6:ee:67:a4:28:39:61:cf:43:a9:ad:97:01:ae:77:37:c9:d8: 74:bc:11:82:d5:70:6d:97:08:85:49:44:90:a5:ac:4c:92:29: 07:ce:eb:f9:bd:29:93:dc:48:aa:90:92:db:46:9f:09:66:bd: 51:2a:37:69:16:f0:9e:d7:6c:c4:32:a0:1d:c5:0e:d0:dc:a6: ec:49:61:f1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdFQjAwQ0Y5NDlFNzc0 RUQzREFFRUI3MDFFRTE2RjlGOUMzMjU2RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmvnEj8brDIWPWp2T/pjePEw1pc/uTY8wOBRAUhDMTONnsoaOx r81rk2aIXULCsdOMXyQKI/1z+tgrhZp2vBQAmicNsSXBMOs8vwuJTINFe8sbh5YR +iWtSsoAxdNZnDI4yq+gt2XzDnJrw9EhDCqzm/DlNYsZ9XhM/xKgcVDfgJbA1yTC PDfYF8j9CNprn5+5xlBWLUhKWjO+O4jDdPI8hq0RiOvQbwvwvu6eRZE8WfqNVX1R ONjq/JsJcU5i7CqWk75wFRBE0JhkKkgL6whg+hSTfh9qae28ETLUNBb+kT8RfSHW wkvTtIf3+k3zxmbZD8Js3FzQkCqxFM1e+vLHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfrAM+UnndO09rutwHuFvn5wyVvEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZyQU0tVW5uZE8wOXJ1dHdI dUZ2bjV3eVZ2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sGgwDQYJKoZIhvcNAQELBQADggEBAKj5IYNVk8J0LT/4Ob+tmbFUw2stF9BnH/7F 8NJpGMgGDgujr7IoJEpaWVpYg9CqoetOpecnWf6W2P8Vr+zZT4Wb0xLPNdQDV/V7 CExzlZTYFwhuf3x5tEqZlxFRgNEu9Qm5hRUSfXvouLRanv2IiTO15qEb8kadaBXs TJ7Yt4SsZSFkApYSCBkxXrz41ILk9wQpCELNzODTSScwFXjnW71qUcjhdBcMMX+F XeXXJHskdVxF1qbuZ6QoOWHPQ6mtlwGudzfJ2HS8EYLVcG2XCIVJRJClrEySKQfO 6/m9KZPcSKqQkttGnwlmvVEqN2kW8J7XbMQyoB3FDtDcpuxJYfE= -----END CERTIFICATE-----Generated at Wed Apr 23 04:49:22 2025 by rpki-client