$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5VjId_lvX2VCLAutkBd0aBuxPig.roa File: 5VjId_lvX2VCLAutkBd0aBuxPig.roa (raw, json) Hash identifier: 8LrkBg3l/s9NJFg4o4o3OectrHzxYmhbWaTfNw8UxuU= Subject key identifier: E5:58:C8:77:F9:6F:5F:65:42:2C:0B:AD:90:17:74:68:1B:B1:3E:28 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3446 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5VjId_lvX2VCLAutkBd0aBuxPig.roa Signing time: Mon 10 Feb 2025 13:52:14 +0000 ROA not before: Mon 10 Feb 2025 13:52:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13382 (0x3446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E558C877F96F5F65422C0BAD901774681BB13E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:cf:f9:f2:f1:40:c3:65:45:db:65:8d:82: af:a2:cb:65:81:89:09:6e:d9:ed:a3:6f:59:ce:59: 07:f5:0b:72:0b:a0:83:d1:e2:ca:96:b7:90:30:fe: c7:1c:b2:1d:83:c9:99:b9:1d:8d:98:22:89:7b:a7: b8:f1:b2:09:d7:47:37:07:97:7b:d0:91:b1:cc:1d: ca:63:8c:9b:6e:3e:22:f8:6a:07:a1:42:51:07:de: a9:64:b4:a7:51:6e:44:63:84:0c:65:7e:65:4e:25: 45:ef:6c:3b:f6:0e:d0:ca:70:ff:c3:2f:64:f4:94: ee:1c:91:91:44:ac:99:85:0c:bb:1f:e3:1f:b9:80: 3f:be:d2:a4:b5:a2:c3:6c:82:35:3f:f4:a4:59:a0: 9e:7e:d6:8d:80:76:aa:5d:f6:fa:7f:19:91:ca:50: eb:ea:50:c5:e2:3f:0d:0f:94:00:c5:a6:0c:04:89: 48:c2:13:32:14:10:9e:ef:57:6b:93:09:7d:4c:2d: 09:ed:c5:91:95:4a:a7:cf:eb:39:3c:46:d4:c9:01: 69:c2:09:64:1b:fc:71:c3:76:4a:91:6e:a8:2b:71: fb:37:81:77:e2:94:92:dd:24:8f:06:8d:fa:9c:34: f6:b9:c9:d0:43:99:63:bd:ed:0c:84:60:42:7b:5c: 10:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:C8:77:F9:6F:5F:65:42:2C:0B:AD:90:17:74:68:1B:B1:3E:28 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5VjId_lvX2VCLAutkBd0aBuxPig.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:52:9a:c9:70:ec:da:14:ec:8a:dd:2b:c7:0c:06:9e:35:9f: c0:37:73:fc:e7:1f:1f:66:4e:95:56:55:7c:15:35:97:ba:50: 82:ce:50:4b:b3:1c:23:96:ac:ff:b1:47:1c:a0:db:0c:97:bb: 33:fd:35:39:90:9a:a3:d9:65:0b:2f:61:9e:54:12:85:1e:de: 7e:fd:c2:00:72:5e:f1:44:e8:7d:8a:d6:f3:0b:56:1f:09:2e: 07:c0:1f:48:85:c8:41:ff:d9:0d:22:0f:30:01:99:ff:a3:b5: 74:63:f2:98:3e:ef:65:2f:71:a0:80:f0:af:d8:fc:e6:12:31: de:0a:92:fc:1b:53:3c:4d:03:6d:b0:1a:9b:cb:8d:0d:5a:09: 74:06:9f:2e:b0:e7:58:5c:e0:24:51:77:e9:b1:79:28:e4:44: 8c:ef:35:7f:d6:54:30:ec:0d:5b:23:20:81:94:de:62:77:3e: 2e:e7:ad:a7:c3:ee:db:d0:3a:fc:ea:7f:67:8e:d6:d4:2e:82: 6a:3e:2b:20:74:6d:98:81:0a:6b:49:9c:f2:dc:52:42:be:93: c5:b8:77:39:52:1a:b8:33:2e:0c:a6:56:30:59:15:75:8d:b1: 4a:b8:e1:91:6b:03:60:36:71:88:78:a3:5d:46:5c:f8:a6:d1: b5:f0:75:21 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU1NThDODc3Rjk2RjVG NjU0MjJDMEJBRDkwMTc3NDY4MUJCMTNFMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP28/58vFAw2VF22WNgq+iy2WBiQlu2e2jb1nOWQf1C3ILoIPR 4sqWt5Aw/sccsh2DyZm5HY2YIol7p7jxsgnXRzcHl3vQkbHMHcpjjJtuPiL4ageh QlEH3qlktKdRbkRjhAxlfmVOJUXvbDv2DtDKcP/DL2T0lO4ckZFErJmFDLsf4x+5 gD++0qS1osNsgjU/9KRZoJ5+1o2Adqpd9vp/GZHKUOvqUMXiPw0PlADFpgwEiUjC EzIUEJ7vV2uTCX1MLQntxZGVSqfP6zk8RtTJAWnCCWQb/HHDdkqRbqgrcfs3gXfi lJLdJI8GjfqcNPa5ydBDmWO97QyEYEJ7XBCNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5VjId/lvX2VCLAutkBd0aBuxPigwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVWaklkX2x2WDJWQ0xBdXRr QmQwYUJ1eFBpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sOwwDQYJKoZIhvcNAQELBQADggEBACpSmslw7NoU7IrdK8cMBp41n8A3c/znHx9m TpVWVXwVNZe6UILOUEuzHCOWrP+xRxyg2wyXuzP9NTmQmqPZZQsvYZ5UEoUe3n79 wgByXvFE6H2K1vMLVh8JLgfAH0iFyEH/2Q0iDzABmf+jtXRj8pg+72UvcaCA8K/Y /OYSMd4KkvwbUzxNA22wGpvLjQ1aCXQGny6w51hc4CRRd+mxeSjkRIzvNX/WVDDs DVsjIIGU3mJ3Pi7nrafD7tvQOvzqf2eO1tQugmo+KyB0bZiBCmtJnPLcUkK+k8W4 dzlSGrgzLgymVjBZFXWNsUq44ZFrA2A2cYh4o11GXPim0bXwdSE= -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:31 2025 by rpki-client