$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-M69tG7RUmQ1otu8OQVSDmYgS3g.roa File: -M69tG7RUmQ1otu8OQVSDmYgS3g.roa (raw, json) Hash identifier: r2TuCehCBaGL5ILGuN+RqO6TJwZe4+2RaxocxWpIMjY= Subject key identifier: F8:CE:BD:B4:6E:D1:52:64:35:A2:DB:BC:39:05:52:0E:66:20:4B:78 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 364D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-M69tG7RUmQ1otu8OQVSDmYgS3g.roa Signing time: Mon 10 Feb 2025 13:54:11 +0000 ROA not before: Mon 10 Feb 2025 13:54:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13901 (0x364d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F8CEBDB46ED1526435A2DBBC3905520E66204B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:91:b9:8b:01:84:d0:d1:76:08:8f:6f:d1: 05:25:cc:a9:eb:6d:45:18:01:8c:e9:8b:a5:64:3f: 24:ed:20:9d:21:51:d7:bb:37:41:17:d9:df:ac:98: 9b:97:0c:ff:1a:a4:9c:66:d8:4f:9c:09:04:8c:75: 05:e9:ee:bb:5f:b7:59:66:95:23:8d:b7:68:8e:f1: a0:49:f7:9f:fb:ba:7e:08:c8:63:34:73:9d:49:8c: 4d:f2:dd:d1:c9:9e:23:ca:da:8a:af:d0:6f:1e:c5: e2:f2:f2:28:a6:ac:b5:d2:c6:75:73:02:dd:b9:ab: 4e:f2:19:92:1c:89:ed:75:eb:b1:9a:3e:f8:9a:e4: 27:5c:5b:bc:d7:75:06:02:a3:10:b7:cb:df:18:79: f0:21:b3:45:8f:00:93:ea:41:dc:7e:ae:56:72:d9: fc:0b:62:0f:2f:eb:ff:b2:eb:00:c4:13:8b:43:96: fc:bb:60:e2:87:e5:a6:ae:54:8d:e0:c5:7a:c0:1d: 7f:62:a3:89:d6:3a:15:1f:d6:b0:87:13:94:70:e3: 97:56:22:40:f5:55:38:15:3f:85:76:63:98:98:6d: 28:56:e8:c5:f3:99:47:d8:10:59:ce:1b:f1:57:6d: a6:e2:00:ac:13:64:ce:ae:52:b5:de:9d:e9:1a:a7: 23:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CE:BD:B4:6E:D1:52:64:35:A2:DB:BC:39:05:52:0E:66:20:4B:78 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-M69tG7RUmQ1otu8OQVSDmYgS3g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.234.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:45:e2:56:e5:eb:34:b3:ea:41:74:98:c6:39:24:7e:3f:a4: 14:2d:a2:22:57:dd:3e:c4:85:a3:c5:ce:01:45:76:01:56:aa: 33:70:b5:d2:01:87:dc:e2:50:08:14:14:38:23:5a:31:c1:c5: 5d:3d:55:51:9c:d9:f4:75:b9:7a:d5:e1:ee:51:97:e0:5b:44: 5f:b1:f5:55:f8:a3:f4:fa:e3:8f:aa:0e:27:76:08:a1:48:2e: f9:fd:49:4d:8c:22:5c:6d:e5:2f:a5:67:b4:33:c6:e5:ec:d9: 81:ed:94:81:9c:46:08:7d:33:a0:ce:17:e0:59:08:53:3c:25: 5a:03:1e:1f:92:84:aa:f1:62:bd:fb:74:42:62:22:64:5e:01: c6:ef:3d:36:64:f0:3c:27:65:b3:6f:03:83:3d:be:ea:a6:5c: 2d:e2:93:ea:5b:80:3a:65:70:e9:9e:ef:d3:df:23:39:27:a9: d9:68:72:cf:7c:27:ef:be:da:93:d6:39:71:ab:ed:6f:94:1d: c6:ed:d7:a7:f0:0d:ed:4a:99:3c:9b:6c:b3:6b:90:9a:f8:58: 79:9a:5e:53:86:61:c2:e6:09:6d:ef:f9:85:0d:2a:a4:d8:15: 4d:a3:04:19:5e:9d:93:a9:ec:ea:1c:04:08:7d:60:c8:8d:ab: 06:e3:03:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY4Q0VCREI0NkVEMTUy NjQzNUEyREJCQzM5MDU1MjBFNjYyMDRCNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsdpG5iwGE0NF2CI9v0QUlzKnrbUUYAYzpi6VkPyTtIJ0hUde7 N0EX2d+smJuXDP8apJxm2E+cCQSMdQXp7rtft1lmlSONt2iO8aBJ95/7un4IyGM0 c51JjE3y3dHJniPK2oqv0G8exeLy8iimrLXSxnVzAt25q07yGZIcie1167GaPvia 5CdcW7zXdQYCoxC3y98YefAhs0WPAJPqQdx+rlZy2fwLYg8v6/+y6wDEE4tDlvy7 YOKH5aauVI3gxXrAHX9io4nWOhUf1rCHE5Rw45dWIkD1VTgVP4V2Y5iYbShW6MXz mUfYEFnOG/FXbabiAKwTZM6uUrXenekapyNBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+M69tG7RUmQ1otu8OQVSDmYgS3gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1NNjl0RzdSVW1RMW90dThP UVZTRG1ZZ1MzZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 seowDQYJKoZIhvcNAQELBQADggEBADtF4lbl6zSz6kF0mMY5JH4/pBQtoiJX3T7E haPFzgFFdgFWqjNwtdIBh9ziUAgUFDgjWjHBxV09VVGc2fR1uXrV4e5Rl+BbRF+x 9VX4o/T644+qDid2CKFILvn9SU2MIlxt5S+lZ7QzxuXs2YHtlIGcRgh9M6DOF+BZ CFM8JVoDHh+ShKrxYr37dEJiImReAcbvPTZk8DwnZbNvA4M9vuqmXC3ik+pbgDpl cOme79PfIzknqdlocs98J+++2pPWOXGr7W+UHcbt16fwDe1KmTybbLNrkJr4WHma XlOGYcLmCW3v+YUNKqTYFU2jBBlenZOp7OocBAh9YMiNqwbjA28= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:23 2025 by rpki-client