$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CfHXEnwKpJXcPY6UyEwKsOURW7w.roa File: CfHXEnwKpJXcPY6UyEwKsOURW7w.roa (raw, json) Hash identifier: A9IVYx5W2AchPvfMZNUm/YCAWKf87IoL8j0N5JcsZmk= Subject key identifier: 09:F1:D7:12:7C:0A:A4:95:DC:3D:8E:94:C8:4C:0A:B0:E5:11:5B:BC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3481 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CfHXEnwKpJXcPY6UyEwKsOURW7w.roa Signing time: Mon 10 Feb 2025 13:52:26 +0000 ROA not before: Mon 10 Feb 2025 13:52:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 180.176.184.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=09F1D7127C0AA495DC3D8E94C84C0AB0E5115BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:d0:b0:e0:f1:93:ba:e1:50:ed:6f:01:83: 45:53:de:75:2a:24:09:23:a5:67:81:de:bf:a7:de: fe:ef:54:27:40:38:16:50:32:37:d7:a1:43:8c:87: 9a:d4:5b:f1:d5:7f:d3:dc:2a:1b:53:a4:56:72:a3: 96:22:3c:99:ba:e7:1a:29:93:36:19:7d:3d:2b:bf: 87:28:f7:38:50:7b:57:46:81:c5:34:ee:88:d6:4f: a7:5e:49:ab:8a:50:2f:4b:05:32:44:31:47:9f:11: 2d:06:ae:8a:d5:15:c3:a7:d0:f7:8f:68:f1:40:52: 85:d6:37:17:0a:ca:a9:0b:90:03:52:86:d0:f7:b3: 8b:3b:9e:8c:be:49:b6:d7:47:8c:4d:b3:86:5e:49: c4:42:0c:4b:73:8b:df:ec:1a:32:18:16:54:e2:74: f9:ac:01:64:61:76:fe:be:2a:93:2c:16:84:54:4d: 3a:a1:7b:69:52:8d:a3:2c:43:15:0e:a2:a8:9f:1a: 5c:51:4a:7c:36:02:7b:b7:d9:03:b5:7e:92:07:2b: bf:7b:25:fa:af:85:a1:cb:a1:45:c6:15:c8:98:ed: 07:19:65:36:ac:d6:08:63:f2:35:3e:11:0d:cf:25: a2:19:7a:7f:b2:00:6c:e2:21:d7:fa:e1:63:1e:c0: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F1:D7:12:7C:0A:A4:95:DC:3D:8E:94:C8:4C:0A:B0:E5:11:5B:BC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CfHXEnwKpJXcPY6UyEwKsOURW7w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.184.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:fa:2d:23:c0:9f:27:0b:5a:23:b7:b9:9d:47:ca:92:45:0b: 29:4d:e1:c5:24:e2:25:63:e5:89:59:5a:55:b2:9b:b0:f5:d8: c0:4e:7d:b8:91:70:9c:94:d6:bb:fd:1c:85:5d:e1:dc:e1:bf: b2:94:d0:22:5c:36:c1:61:9e:68:45:68:25:88:b7:02:fd:54: 66:c2:23:d7:1c:6a:e2:aa:17:17:6c:40:86:2a:26:9d:8c:02: 5e:67:20:ee:62:59:01:e0:0f:4f:9f:90:b1:8f:ca:86:55:8e: ea:b7:32:87:c0:a9:ba:b5:65:4e:3a:15:fc:53:80:a3:73:36: 2e:41:fe:7d:be:9a:95:db:0b:40:09:8f:91:3d:12:eb:93:d4: 89:7f:e0:f8:0b:f3:01:ac:34:80:67:f3:1a:17:e5:78:92:cb: 2e:de:68:1e:5d:e1:c6:68:c3:2f:97:30:23:be:ed:ff:60:91: 8e:a5:76:d6:e7:4b:a6:82:9d:0e:f0:aa:73:b1:c0:6c:cd:fa: 72:b1:9e:43:34:94:9e:4f:12:ce:49:c5:b8:29:99:22:15:ed: 78:52:6c:5b:8b:c1:40:e6:60:94:62:5d:56:22:bb:f9:7b:8a: b2:35:7d:d6:ae:b6:2a:21:f8:4a:b8:d0:99:28:50:82:a0:cc: 53:b9:04:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5RjFENzEyN0MwQUE0 OTVEQzNEOEU5NEM4NEMwQUIwRTUxMTVCQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBvNCw4PGTuuFQ7W8Bg0VT3nUqJAkjpWeB3r+n3v7vVCdAOBZQ MjfXoUOMh5rUW/HVf9PcKhtTpFZyo5YiPJm65xopkzYZfT0rv4co9zhQe1dGgcU0 7ojWT6deSauKUC9LBTJEMUefES0GrorVFcOn0PePaPFAUoXWNxcKyqkLkANShtD3 s4s7noy+SbbXR4xNs4ZeScRCDEtzi9/sGjIYFlTidPmsAWRhdv6+KpMsFoRUTTqh e2lSjaMsQxUOoqifGlxRSnw2Anu32QO1fpIHK797JfqvhaHLoUXGFciY7QcZZTas 1ghj8jU+EQ3PJaIZen+yAGziIdf64WMewNw9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCfHXEnwKpJXcPY6UyEwKsOURW7wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NmSFhFbndLcEpYY1BZNlV5 RXdLc09VUlc3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sLgwDQYJKoZIhvcNAQELBQADggEBAJz6LSPAnycLWiO3uZ1HypJFCylN4cUk4iVj 5YlZWlWym7D12MBOfbiRcJyU1rv9HIVd4dzhv7KU0CJcNsFhnmhFaCWItwL9VGbC I9ccauKqFxdsQIYqJp2MAl5nIO5iWQHgD0+fkLGPyoZVjuq3MofAqbq1ZU46FfxT gKNzNi5B/n2+mpXbC0AJj5E9EuuT1Il/4PgL8wGsNIBn8xoX5XiSyy7eaB5d4cZo wy+XMCO+7f9gkY6ldtbnS6aCnQ7wqnOxwGzN+nKxnkM0lJ5PEs5JxbgpmSIV7XhS bFuLwUDmYJRiXVYiu/l7irI1fdautioh+Eq40JkoUIKgzFO5BM8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:56 2025 by rpki-client