$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-hy3hOxKdX-hpnDg3j00cUkLMgQ.roa File: -hy3hOxKdX-hpnDg3j00cUkLMgQ.roa (raw, json) Hash identifier: XXAiOr/c/5BaQ0kT+eR3WH07sVdF2EuzKjYUP4RQ3h8= Subject key identifier: FA:1C:B7:84:EC:4A:75:7F:A1:A6:70:E0:DE:3D:34:71:49:0B:32:04 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3400 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-hy3hOxKdX-hpnDg3j00cUkLMgQ.roa Signing time: Mon 10 Feb 2025 13:51:58 +0000 ROA not before: Mon 10 Feb 2025 13:51:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13312 (0x3400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FA1CB784EC4A757FA1A670E0DE3D3471490B3204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:4e:b5:d8:dd:c6:d8:dc:4d:cc:d7:5e:09: b6:a5:3f:4d:10:72:8a:8f:60:57:c9:e9:2e:61:d5: 06:b9:aa:fb:20:2a:bf:f6:5b:c8:b2:96:44:eb:76: c8:9a:86:26:67:47:ff:fc:9f:c0:46:72:0c:06:59: 57:6b:43:31:23:64:a2:e6:16:75:1f:33:33:4d:22: 53:a6:1c:f8:c2:22:7a:08:9a:d2:ef:b9:a2:03:e7: 9b:61:ce:51:d1:24:5e:ca:58:99:7f:a4:9e:9d:f8: 73:e7:71:b9:08:9b:d0:96:f9:15:3f:ac:34:0f:ed: 54:5a:d2:75:b1:97:7a:fd:a6:58:53:f5:db:89:b9: 21:df:b9:14:3b:15:58:ac:1d:61:e7:38:7b:c2:91: df:2e:b8:53:ea:95:03:c3:fe:d1:9c:d4:c6:ff:ce: b8:1f:e5:fc:3e:20:89:3e:40:7d:fb:fd:28:f4:dd: 3f:d8:5f:f7:58:38:5c:32:1f:d8:8b:97:4b:15:d9: b4:b9:4b:2e:ee:ab:07:19:a8:4b:27:ed:60:6b:57: ed:ce:bc:5e:d1:24:0d:e8:60:71:38:79:9a:02:c0: a2:5a:d2:df:5a:6b:8b:73:30:48:65:21:1c:50:e6: 28:f0:a5:07:53:a8:54:05:18:a2:c4:50:0f:56:1b: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1C:B7:84:EC:4A:75:7F:A1:A6:70:E0:DE:3D:34:71:49:0B:32:04 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-hy3hOxKdX-hpnDg3j00cUkLMgQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.12.0/22 Signature Algorithm: sha256WithRSAEncryption 29:3d:c8:11:dd:76:0e:89:01:6b:cb:bd:b8:db:fb:41:01:87: 41:19:3a:e3:8e:64:a2:a8:98:9f:ca:ab:6f:34:ab:e4:44:b7: a2:8b:52:e7:e7:2c:3c:4a:e4:1e:78:7a:d0:07:11:3b:82:f5: 71:5c:24:84:71:44:12:88:9d:17:9e:b9:f9:72:a1:0b:a8:5d: 2c:ab:8c:56:a1:8e:26:d9:d2:b1:74:54:e3:85:b1:72:af:5d: 79:ff:92:45:ee:53:25:ed:ab:1a:4d:51:80:8c:b6:a7:d4:86: da:b7:76:0c:97:38:92:a6:c2:86:a7:19:f8:da:03:a5:1c:a1: cf:82:21:5f:ea:b9:f3:9b:bc:8e:18:d2:62:c6:3d:33:04:80: b8:95:8c:cf:ca:dd:b2:52:9c:bf:a8:8d:28:9f:9f:4d:14:61: 1b:9f:0d:6e:64:04:e3:d2:f9:f5:e6:de:64:5c:05:b9:3d:68: dd:ff:8b:97:7c:53:59:f0:d4:01:10:52:4a:f3:3d:73:d6:55: 74:2e:37:26:2f:10:28:b4:68:67:6d:2f:b4:0e:a7:83:9e:ec: de:7d:df:82:be:29:4a:14:92:6e:7e:9d:5c:0d:fb:d5:4a:cc: 16:3d:a7:6d:3e:7b:b6:2d:5f:4e:80:f3:a0:78:ae:ef:ce:3c: 4b:12:21:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZBMUNCNzg0RUM0QTc1 N0ZBMUE2NzBFMERFM0QzNDcxNDkwQjMyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxv0612N3G2NxNzNdeCbalP00QcoqPYFfJ6S5h1Qa5qvsgKr/2 W8iylkTrdsiahiZnR//8n8BGcgwGWVdrQzEjZKLmFnUfMzNNIlOmHPjCInoImtLv uaID55thzlHRJF7KWJl/pJ6d+HPncbkIm9CW+RU/rDQP7VRa0nWxl3r9plhT9duJ uSHfuRQ7FVisHWHnOHvCkd8uuFPqlQPD/tGc1Mb/zrgf5fw+IIk+QH37/Sj03T/Y X/dYOFwyH9iLl0sV2bS5Sy7uqwcZqEsn7WBrV+3OvF7RJA3oYHE4eZoCwKJa0t9a a4tzMEhlIRxQ5ijwpQdTqFQFGKLEUA9WG13zAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+hy3hOxKdX+hpnDg3j00cUkLMgQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1oeTNoT3hLZFgtaHBuRGcz ajAwY1VrTE1nUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sQwwDQYJKoZIhvcNAQELBQADggEBACk9yBHddg6JAWvLvbjb+0EBh0EZOuOOZKKo mJ/Kq280q+REt6KLUufnLDxK5B54etAHETuC9XFcJIRxRBKInReeuflyoQuoXSyr jFahjibZ0rF0VOOFsXKvXXn/kkXuUyXtqxpNUYCMtqfUhtq3dgyXOJKmwoanGfja A6Ucoc+CIV/qufObvI4Y0mLGPTMEgLiVjM/K3bJSnL+ojSifn00UYRufDW5kBOPS +fXm3mRcBbk9aN3/i5d8U1nw1AEQUkrzPXPWVXQuNyYvECi0aGdtL7QOp4Oe7N59 34K+KUoUkm5+nVwN+9VKzBY9p20+e7YtX06A86B4ru/OPEsSIfg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:04 2025 by rpki-client