$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BDmsLnzrSr1P5Joo7w3T87Io7wo.roa File: BDmsLnzrSr1P5Joo7w3T87Io7wo.roa (raw, json) Hash identifier: y2jcyCk0L3+tNsypZQRgzwW2aecGB5EqZNy4qWcxFiI= Subject key identifier: 04:39:AC:2E:7C:EB:4A:BD:4F:E4:9A:28:EF:0D:D3:F3:B2:28:EF:0A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35FE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BDmsLnzrSr1P5Joo7w3T87Io7wo.roa Signing time: Mon 10 Feb 2025 13:53:53 +0000 ROA not before: Mon 10 Feb 2025 13:53:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.40.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13822 (0x35fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0439AC2E7CEB4ABD4FE49A28EF0DD3F3B228EF0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:01:33:45:8c:5f:4a:98:f2:67:15:87:b5: 9d:a8:03:c0:64:91:50:1f:45:37:67:fc:a2:13:fd: c1:c2:3c:8a:b2:7d:0f:dd:14:de:1d:3f:e6:00:f2: 00:62:24:0d:6a:cb:a1:6d:a3:b0:b8:4a:a9:90:e6: 08:e3:85:0d:0c:b5:43:50:7c:ba:7e:71:b9:c0:8c: 01:c8:cf:40:fd:23:20:49:45:ec:a0:58:a9:3c:5d: 16:b2:a4:0a:80:25:e7:ff:92:73:4c:e9:d7:23:66: 71:e4:a0:c2:8b:5d:20:7a:e0:67:bf:a4:1c:71:27: 11:13:e2:72:4b:5a:dc:6f:40:01:de:b2:24:7b:01: 5e:8c:fc:80:50:9f:50:b5:20:34:5e:b7:44:81:c9: 55:c1:b6:8c:1e:8d:40:27:40:a0:9d:c1:98:17:67: 97:2d:a4:7c:cd:db:29:2b:7b:d0:89:da:36:f8:39: 97:13:c7:8a:f1:32:bd:82:ea:32:36:f3:18:de:78: 83:96:75:c5:2c:3b:9e:23:c5:6f:9e:00:01:55:f0: f2:df:81:01:30:6d:14:ed:46:e2:03:bd:2d:88:61: 29:b8:e5:28:e9:ae:71:18:8d:91:ab:c3:bc:2d:dc: c2:c8:7e:b6:a0:b4:ac:42:cf:82:7b:d8:7c:0e:2e: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:39:AC:2E:7C:EB:4A:BD:4F:E4:9A:28:EF:0D:D3:F3:B2:28:EF:0A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BDmsLnzrSr1P5Joo7w3T87Io7wo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.40.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:30:d7:bd:0d:38:5e:3c:76:f0:ba:77:19:49:2d:5c:46:c7: a3:53:19:4c:9f:0a:9a:f0:cd:c2:ca:cd:70:ed:69:7c:b0:3a: 91:e6:cb:56:6b:5e:73:78:a1:de:45:14:f6:eb:e2:ab:77:bd: b6:89:44:7e:2a:18:d7:b2:6a:65:20:03:09:b2:24:af:dc:c0: 88:bd:13:81:7e:3d:a1:b9:94:ce:d0:c6:84:fa:e8:26:2f:6c: 03:64:ff:bb:b4:6b:7c:41:2a:a2:d2:e4:4f:ea:b0:f2:e7:3e: 13:21:01:33:5d:67:80:b1:2e:42:02:dc:47:af:fd:50:14:6d: 73:ed:3c:3f:4e:3e:8b:75:e9:37:20:39:dd:7e:4a:d6:26:fe: fb:73:b7:8f:97:74:ce:dc:17:2d:be:f1:83:ef:ce:8f:7d:32: 49:e5:33:8c:1f:0e:c7:f0:b4:68:97:04:5d:33:87:50:76:98: 71:34:24:ac:70:2f:d2:8b:0a:c0:c2:b2:bd:50:9c:2f:1a:e6: 06:b9:5d:4c:69:d5:a4:04:78:ff:8f:85:b3:ad:bc:c6:11:98: 27:6e:95:69:9d:10:a8:f7:71:ba:e6:36:4f:f4:67:c0:39:bf: 80:84:3d:fb:55:39:cd:c8:1a:3d:25:55:68:24:52:c7:b7:59: 19:a9:1f:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA0MzlBQzJFN0NFQjRB QkQ0RkU0OUEyOEVGMEREM0YzQjIyOEVGMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBegEzRYxfSpjyZxWHtZ2oA8BkkVAfRTdn/KIT/cHCPIqyfQ/d FN4dP+YA8gBiJA1qy6Fto7C4SqmQ5gjjhQ0MtUNQfLp+cbnAjAHIz0D9IyBJReyg WKk8XRaypAqAJef/knNM6dcjZnHkoMKLXSB64Ge/pBxxJxET4nJLWtxvQAHesiR7 AV6M/IBQn1C1IDRet0SByVXBtowejUAnQKCdwZgXZ5ctpHzN2ykre9CJ2jb4OZcT x4rxMr2C6jI28xjeeIOWdcUsO54jxW+eAAFV8PLfgQEwbRTtRuIDvS2IYSm45Sjp rnEYjZGrw7wt3MLIfragtKxCz4J72HwOLgI3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBDmsLnzrSr1P5Joo7w3T87Io7wowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JEbXNMbnpyU3IxUDVKb283 dzNUODdJbzd3by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sSgwDQYJKoZIhvcNAQELBQADggEBACow170NOF48dvC6dxlJLVxGx6NTGUyfCprw zcLKzXDtaXywOpHmy1ZrXnN4od5FFPbr4qt3vbaJRH4qGNeyamUgAwmyJK/cwIi9 E4F+PaG5lM7QxoT66CYvbANk/7u0a3xBKqLS5E/qsPLnPhMhATNdZ4CxLkIC3Eev /VAUbXPtPD9OPot16TcgOd1+StYm/vtzt4+XdM7cFy2+8YPvzo99MknlM4wfDsfw tGiXBF0zh1B2mHE0JKxwL9KLCsDCsr1QnC8a5ga5XUxp1aQEeP+PhbOtvMYRmCdu lWmdEKj3cbrmNk/0Z8A5v4CEPftVOc3IGj0lVWgkUse3WRmpH4o= -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:41 2025 by rpki-client