$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u9wNIr3ne1IYugbEJyKetbSPVZo.roa File: u9wNIr3ne1IYugbEJyKetbSPVZo.roa (raw, json) Hash identifier: 11Hvc4y6LGsmbrwZQBWW3hxpmuwCCH8JVaW7coD/xm4= Subject key identifier: BB:DC:0D:22:BD:E7:7B:52:18:BA:06:C4:27:22:9E:B5:B4:8F:55:9A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3672 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u9wNIr3ne1IYugbEJyKetbSPVZo.roa Signing time: Mon 10 Feb 2025 13:54:20 +0000 ROA not before: Mon 10 Feb 2025 13:54:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13938 (0x3672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BBDC0D22BDE77B5218BA06C427229EB5B48F559A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:a9:8d:19:aa:34:27:d8:ff:81:43:9a:77: 7e:75:86:41:a4:c6:af:e0:99:2c:da:3d:09:c6:51: 66:f5:ed:3f:7b:b2:bd:b8:65:fc:76:cd:4d:d3:c1: 1e:19:cc:25:56:f1:9c:8f:e3:27:d2:fb:ca:8a:d8: a4:29:54:be:67:da:a9:82:62:f1:d7:d8:98:ee:1a: 36:f0:98:aa:70:16:e2:c0:8a:6e:d9:07:03:34:cc: 81:70:11:8c:f9:94:37:ab:d2:fb:9d:c4:32:ab:c5: f3:df:14:c4:b7:66:fe:41:59:82:85:eb:8d:a1:99: 5a:a9:a1:25:bb:85:28:54:b8:f4:26:da:77:4f:cf: 27:65:70:bc:82:2c:03:47:d9:d3:96:e2:63:3c:86: a0:75:5c:8a:4b:c9:bd:62:36:93:77:0a:24:39:9d: cd:47:c7:ce:f6:bd:58:dc:40:3e:1a:99:ac:90:9d: b1:fe:c0:2e:c1:59:eb:1f:99:fd:af:43:ff:97:dc: 98:dc:00:82:6d:06:e0:17:cc:46:2d:ad:2e:25:fd: 34:65:d4:75:b6:79:14:73:7e:af:92:d3:e5:c3:c4: c0:8f:21:5a:7b:96:7a:80:8e:db:50:6f:86:55:4e: f4:a4:97:f8:48:e6:25:09:a7:c6:e8:5f:4b:cc:a2: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DC:0D:22:BD:E7:7B:52:18:BA:06:C4:27:22:9E:B5:B4:8F:55:9A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u9wNIr3ne1IYugbEJyKetbSPVZo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.72.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:dd:99:e1:43:d5:8d:90:e2:6e:30:bd:9a:e5:77:78:53:be: e0:bc:19:9e:94:b7:70:86:38:ce:87:b7:ab:25:7f:42:9b:a3: 97:f7:2b:0d:3b:c1:7a:4a:29:3b:b5:04:cc:fb:68:6d:9a:0c: 7c:49:76:70:1e:8f:4f:e3:16:b7:47:57:34:ea:51:97:58:0e: fc:7f:12:74:57:a2:ef:90:4c:97:68:d1:6f:ee:b9:3e:81:24: c8:59:a2:fb:a8:ce:29:8b:a1:9d:50:46:78:dd:7c:9e:bb:25: a4:16:0d:30:e7:c9:83:59:bc:99:42:bb:e5:ad:33:19:2a:a7: 94:87:7d:d8:82:4b:b2:c0:2b:c8:7c:a7:ce:28:50:74:b6:7c: 12:b6:5d:3d:d6:c9:ed:1a:56:20:e1:fa:1c:77:5e:5a:b7:ca: 18:de:f8:53:8b:10:28:63:10:95:e4:06:ce:c3:10:0f:78:bd: 67:46:a7:c7:f4:9b:3d:28:3e:c8:73:17:92:b2:7c:37:39:a4: 8f:eb:85:7c:52:06:72:f0:f7:30:3e:85:49:7d:0c:2f:3c:66: 1d:92:ad:e0:b4:6d:f8:98:4e:9f:f9:16:45:90:73:86:83:3b: 0a:b8:0c:7f:b0:59:0a:42:ec:a0:d7:22:e9:8b:e0:29:83:2b: 72:21:61:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNnIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJCREMwRDIyQkRFNzdC NTIxOEJBMDZDNDI3MjI5RUI1QjQ4RjU1OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/y6mNGao0J9j/gUOad351hkGkxq/gmSzaPQnGUWb17T97sr24 Zfx2zU3TwR4ZzCVW8ZyP4yfS+8qK2KQpVL5n2qmCYvHX2JjuGjbwmKpwFuLAim7Z BwM0zIFwEYz5lDer0vudxDKrxfPfFMS3Zv5BWYKF642hmVqpoSW7hShUuPQm2ndP zydlcLyCLANH2dOW4mM8hqB1XIpLyb1iNpN3CiQ5nc1Hx872vVjcQD4amayQnbH+ wC7BWesfmf2vQ/+X3JjcAIJtBuAXzEYtrS4l/TRl1HW2eRRzfq+S0+XDxMCPIVp7 lnqAjttQb4ZVTvSkl/hI5iUJp8boX0vMop75AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUu9wNIr3ne1IYugbEJyKetbSPVZowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3U5d05JcjNuZTFJWXVnYkVK eUtldGJTUFZaby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sUgwDQYJKoZIhvcNAQELBQADggEBABrdmeFD1Y2Q4m4wvZrld3hTvuC8GZ6Ut3CG OM6Ht6slf0Kbo5f3Kw07wXpKKTu1BMz7aG2aDHxJdnAej0/jFrdHVzTqUZdYDvx/ EnRXou+QTJdo0W/uuT6BJMhZovuozimLoZ1QRnjdfJ67JaQWDTDnyYNZvJlCu+Wt Mxkqp5SHfdiCS7LAK8h8p84oUHS2fBK2XT3Wye0aViDh+hx3Xlq3yhje+FOLEChj EJXkBs7DEA94vWdGp8f0mz0oPshzF5KyfDc5pI/rhXxSBnLw9zA+hUl9DC88Zh2S reC0bfiYTp/5FkWQc4aDOwq4DH+wWQpC7KDXIumL4CmDK3IhYV4= -----END CERTIFICATE-----Generated at Fri Apr 18 23:02:55 2025 by rpki-client