$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qlGU9KFqsPCBvNWhj9wloAP-9FY.roa File: qlGU9KFqsPCBvNWhj9wloAP-9FY.roa (raw, json) Hash identifier: kMz2XZw/nY07Yhlr2D7RuGYIdfAit3PrjGEvSoH0eyc= Subject key identifier: AA:51:94:F4:A1:6A:B0:F0:81:BC:D5:A1:8F:DC:25:A0:03:FE:F4:56 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3656 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qlGU9KFqsPCBvNWhj9wloAP-9FY.roa Signing time: Mon 10 Feb 2025 13:54:14 +0000 ROA not before: Mon 10 Feb 2025 13:54:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13910 (0x3656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AA5194F4A16AB0F081BCD5A18FDC25A003FEF456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:86:19:94:dc:79:8f:29:d0:1d:9d:ea:92: 42:4d:9a:be:a9:5d:df:e7:3c:0e:61:4a:ac:eb:7d: 8e:36:86:23:d7:b7:55:c4:1f:8e:29:a7:b5:17:ce: e1:6b:27:89:5f:07:2b:fb:e5:6b:c6:41:45:bf:3e: 3e:53:6b:1d:d9:d4:22:dd:02:f2:69:88:0b:36:75: 6d:8c:f4:28:8a:ec:57:0d:6d:55:bf:fb:34:36:18: f9:53:d8:18:f9:bd:df:c6:5d:bc:5b:b3:4f:5d:e6: 97:74:86:68:9c:e3:6a:57:82:6a:88:db:21:e1:03: 07:15:ec:d4:37:57:ec:82:9a:1b:4b:80:b7:29:62: 46:66:d3:77:9e:02:30:aa:4e:bc:c6:05:7a:5d:6c: 97:f9:3b:1d:f7:02:61:18:7d:1a:5a:88:a8:5a:7f: aa:dd:c9:8c:85:2e:9f:bd:f7:c8:ca:93:bd:77:a7: fe:28:02:ce:25:73:2c:84:05:3b:69:9d:b3:bb:a7: c4:54:35:81:15:99:d7:2a:87:e3:e7:7f:47:fc:01: 4a:9f:fe:35:3f:11:2f:c4:7a:50:91:b1:82:23:5d: 86:df:90:95:4e:5e:a6:8e:cd:17:45:8d:e0:f8:15: c0:e6:c3:b6:5a:28:19:84:9b:42:81:a2:62:03:55: 7a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:51:94:F4:A1:6A:B0:F0:81:BC:D5:A1:8F:DC:25:A0:03:FE:F4:56 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qlGU9KFqsPCBvNWhj9wloAP-9FY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.48.0/21 Signature Algorithm: sha256WithRSAEncryption 83:30:51:cd:ac:7a:f2:d3:40:da:7e:30:78:75:8b:b4:47:54: 68:50:b3:c0:b3:da:f2:21:84:4b:76:b8:c7:aa:e6:3b:48:f7: 53:e0:07:a8:5e:d6:6c:0b:a0:d9:27:04:98:61:f3:46:00:a6: cb:6d:86:6a:44:f1:60:5e:d8:42:ea:86:ab:e8:d8:c9:d7:0e: e2:0c:6b:d6:36:48:3e:4f:a4:b2:e8:db:3c:4b:b8:f4:38:4f: 87:67:4f:74:00:eb:8f:c2:f7:a1:c8:ab:60:7f:08:90:17:af: d5:81:6e:f3:fa:c3:34:d9:32:9f:5e:38:ff:6f:ce:0c:64:ba: b1:5e:c4:84:63:e3:b1:d4:35:2c:c5:05:26:2a:46:8d:48:a6: 81:02:3b:8d:38:1f:57:c1:01:73:4d:a5:4a:a1:6a:96:78:d6: f5:e9:9f:05:08:c6:3b:3a:7d:ec:48:4f:7b:90:de:b7:6f:a4: 7a:2f:f9:38:3c:49:d9:2c:3c:0a:90:51:f5:05:0a:31:8f:81: 33:0e:d3:19:b1:8b:3d:16:d5:b4:e8:0c:6f:11:0a:5a:a7:f9: 91:ad:31:e2:39:77:9d:9f:2c:98:da:5b:cb:00:7d:9c:2c:9a: 09:91:f9:53:0e:23:17:a3:0f:28:19:7b:81:c7:59:3b:53:10: dc:e5:21:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFBNTE5NEY0QTE2QUIw RjA4MUJDRDVBMThGREMyNUEwMDNGRUY0NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSl4YZlNx5jynQHZ3qkkJNmr6pXd/nPA5hSqzrfY42hiPXt1XE H44pp7UXzuFrJ4lfByv75WvGQUW/Pj5Tax3Z1CLdAvJpiAs2dW2M9CiK7FcNbVW/ +zQ2GPlT2Bj5vd/GXbxbs09d5pd0hmic42pXgmqI2yHhAwcV7NQ3V+yCmhtLgLcp YkZm03eeAjCqTrzGBXpdbJf5Ox33AmEYfRpaiKhaf6rdyYyFLp+998jKk713p/4o As4lcyyEBTtpnbO7p8RUNYEVmdcqh+Pnf0f8AUqf/jU/ES/EelCRsYIjXYbfkJVO XqaOzRdFjeD4FcDmw7ZaKBmEm0KBomIDVXqpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqlGU9KFqsPCBvNWhj9wloAP+9FYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FsR1U5S0Zxc1BDQnZOV2hq OXdsb0FQLTlGWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sTAwDQYJKoZIhvcNAQELBQADggEBAIMwUc2sevLTQNp+MHh1i7RHVGhQs8Cz2vIh hEt2uMeq5jtI91PgB6he1mwLoNknBJhh80YApstthmpE8WBe2ELqhqvo2MnXDuIM a9Y2SD5PpLLo2zxLuPQ4T4dnT3QA64/C96HIq2B/CJAXr9WBbvP6wzTZMp9eOP9v zgxkurFexIRj47HUNSzFBSYqRo1IpoECO404H1fBAXNNpUqhapZ41vXpnwUIxjs6 fexIT3uQ3rdvpHov+Tg8SdksPAqQUfUFCjGPgTMO0xmxiz0W1bToDG8RClqn+ZGt MeI5d52fLJjaW8sAfZwsmgmR+VMOIxejDygZe4HHWTtTENzlIbI= -----END CERTIFICATE-----Generated at Fri Apr 18 22:59:08 2025 by rpki-client