$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2jnv9Gimys_f1rFtwclZtUdQsn4.roa File: 2jnv9Gimys_f1rFtwclZtUdQsn4.roa (raw, json) Hash identifier: HnzJYtT48SDjiJZtmhZEcVehOyfLU9jjb1+IJKOdUj8= Subject key identifier: DA:39:EF:F4:68:A6:CA:CF:DF:D6:B1:6D:C1:C9:59:B5:47:50:B2:7E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 369F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2jnv9Gimys_f1rFtwclZtUdQsn4.roa Signing time: Mon 10 Feb 2025 13:54:30 +0000 ROA not before: Mon 10 Feb 2025 13:54:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13983 (0x369f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DA39EFF468A6CACFDFD6B16DC1C959B54750B27E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:e7:69:fd:c9:88:1c:39:22:2d:61:77:ef: e1:83:28:55:35:bf:5e:eb:e5:8f:50:ec:27:9e:16: a8:28:35:d0:fc:fa:e5:65:58:4e:ea:95:3b:8e:97: f6:93:5d:9d:ff:59:ea:0c:72:af:48:7f:f7:b2:fc: c2:bd:f3:4e:65:c6:d4:a4:1e:88:c4:c8:e5:84:21: 1c:d5:0e:5a:5e:11:a4:74:d4:56:ce:7b:35:23:92: 09:4a:17:bf:5f:5c:9c:d5:ac:60:50:b8:c2:04:d3: 28:19:25:08:68:5c:6f:c5:9c:9a:1b:82:48:6f:9e: 1a:80:f0:ee:2b:a6:b7:4b:09:ea:6e:1e:11:70:28: 73:14:36:f3:5b:87:f8:5e:e7:a1:80:1c:33:e2:bd: 1c:2e:0f:c6:2a:89:cf:03:48:55:1a:ea:71:80:5f: 3d:c9:cf:82:c4:ff:7b:a7:8f:fc:42:df:35:14:fe: 66:1f:22:82:55:a3:73:32:48:29:d9:ad:15:ba:9e: 10:a7:24:1f:f9:1e:1f:8f:43:1a:78:72:30:28:21: 3b:6c:d9:24:c3:10:90:fb:c6:25:27:c9:66:a9:82: 8b:44:77:f9:9b:fe:f7:45:1f:81:ec:b9:3c:24:97: 8e:bf:6f:95:a3:73:69:d8:f6:ee:fc:c0:92:83:14: ed:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:39:EF:F4:68:A6:CA:CF:DF:D6:B1:6D:C1:C9:59:B5:47:50:B2:7E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2jnv9Gimys_f1rFtwclZtUdQsn4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.144.0/21 Signature Algorithm: sha256WithRSAEncryption 10:15:3f:05:3c:01:07:87:e5:5d:03:d7:5f:3d:57:af:ce:09: e3:0d:a7:91:f5:41:b1:f2:94:a3:14:a2:e9:14:73:75:0f:82: 45:ac:2a:9a:c9:ff:48:77:9b:f0:cf:b6:62:16:28:32:16:99: 00:0d:72:bd:e8:a4:3f:4d:18:f7:8e:12:81:65:03:87:af:af: e2:7a:2b:d5:0f:89:57:06:49:85:9b:7a:c8:f2:84:d8:6a:6f: 42:bd:bd:2a:16:48:80:06:44:c1:59:a0:c5:de:ef:8d:5f:d8: 65:6c:c8:16:c7:00:3c:f5:11:41:e7:ae:d5:ed:aa:33:99:dc: 6b:7a:0e:15:10:a9:13:5a:ae:5b:58:03:56:28:95:d6:ae:e8: ab:38:98:46:34:75:9f:ad:77:e3:2d:2c:02:c7:8e:de:2f:19: 95:db:5c:55:8a:c5:35:1e:6c:8d:94:d4:3b:59:6c:51:ca:db: c8:04:da:e3:c6:78:2b:e8:37:5f:ea:8e:b8:c5:d0:3d:4c:c5: 50:b8:f2:fb:20:13:b3:5c:6d:88:9a:91:69:ad:1d:d4:68:f7: da:b5:d0:c9:1f:9b:5b:af:1a:8b:c0:c9:ef:4d:9c:8d:e1:6b: 6b:f3:26:1f:e1:61:dd:b8:66:cd:49:0c:f3:08:04:9a:1a:b2: 9b:93:13:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERBMzlFRkY0NjhBNkNB Q0ZERkQ2QjE2REMxQzk1OUI1NDc1MEIyN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2MOdp/cmIHDkiLWF37+GDKFU1v17r5Y9Q7CeeFqgoNdD8+uVl WE7qlTuOl/aTXZ3/WeoMcq9If/ey/MK9805lxtSkHojEyOWEIRzVDlpeEaR01FbO ezUjkglKF79fXJzVrGBQuMIE0ygZJQhoXG/FnJobgkhvnhqA8O4rprdLCepuHhFw KHMUNvNbh/he56GAHDPivRwuD8Yqic8DSFUa6nGAXz3Jz4LE/3unj/xC3zUU/mYf IoJVo3MySCnZrRW6nhCnJB/5Hh+PQxp4cjAoITts2STDEJD7xiUnyWapgotEd/mb /vdFH4HsuTwkl46/b5Wjc2nY9u78wJKDFO2bAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2jnv9Gimys/f1rFtwclZtUdQsn4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJqbnY5R2lteXNfZjFyRnR3 Y2xadFVkUXNuNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sJAwDQYJKoZIhvcNAQELBQADggEBABAVPwU8AQeH5V0D1189V6/OCeMNp5H1QbHy lKMUoukUc3UPgkWsKprJ/0h3m/DPtmIWKDIWmQANcr3opD9NGPeOEoFlA4evr+J6 K9UPiVcGSYWbesjyhNhqb0K9vSoWSIAGRMFZoMXe741f2GVsyBbHADz1EUHnrtXt qjOZ3Gt6DhUQqRNarltYA1Yoldau6Ks4mEY0dZ+td+MtLALHjt4vGZXbXFWKxTUe bI2U1DtZbFHK28gE2uPGeCvoN1/qjrjF0D1MxVC48vsgE7NcbYiakWmtHdRo99q1 0Mkfm1uvGovAye9NnI3ha2vzJh/hYd24Zs1JDPMIBJoaspuTE3w= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:06 2025 by rpki-client