$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cp16gUJZ4yIq1JxeSlORKaBc4dU.roa File: Cp16gUJZ4yIq1JxeSlORKaBc4dU.roa (raw, json) Hash identifier: oXHWIcPG5h6FRZipsc0LaguK+jA0CP2jEhMv+oWPohA= Subject key identifier: 0A:9D:7A:81:42:59:E3:22:2A:D4:9C:5E:4A:53:91:29:A0:5C:E1:D5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3590 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cp16gUJZ4yIq1JxeSlORKaBc4dU.roa Signing time: Mon 10 Feb 2025 13:53:28 +0000 ROA not before: Mon 10 Feb 2025 13:53:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0A9D7A814259E3222AD49C5E4A539129A05CE1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:14:cb:b8:54:3a:84:6a:d3:73:7a:df:98: 33:61:b5:36:35:3d:51:37:54:f5:14:ff:9d:2b:23: 9b:4b:8a:bc:de:00:4e:5e:d4:be:dc:57:84:b8:2c: 9b:be:a7:df:95:92:76:ba:a2:e1:25:71:a0:bc:dc: c7:81:a0:17:d8:12:23:b0:82:33:a3:32:52:76:de: 21:dd:1c:8b:c4:d4:75:c6:e9:99:4a:20:d3:17:a2: 44:03:f2:13:e3:41:2b:94:b1:13:87:2a:a6:00:87: 5c:88:4e:23:c0:48:19:42:b9:c0:63:4f:ea:81:64: f6:31:61:4c:5f:b1:b2:ec:2b:d2:f9:05:36:b5:e7: 76:c7:db:13:b4:54:96:50:bd:60:c1:74:d4:e3:63: 5c:55:a3:86:ed:b8:21:cf:08:e1:c7:da:e3:ea:b4: 93:d0:08:b4:52:1f:65:d1:2a:5a:98:02:ed:12:fa: e2:ce:83:02:ff:29:9d:cf:66:9f:08:81:c1:a3:91: 2d:97:34:08:fc:bb:29:de:34:e2:1b:31:70:fc:6f: a8:21:7b:59:54:23:da:0e:a6:84:a3:eb:de:b6:6c: 85:fc:14:52:f8:38:94:20:3c:4d:6c:0e:e3:5a:4c: 56:5b:3d:a9:25:f6:cb:e3:6b:4d:e6:74:fe:0c:4f: 56:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9D:7A:81:42:59:E3:22:2A:D4:9C:5E:4A:53:91:29:A0:5C:E1:D5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cp16gUJZ4yIq1JxeSlORKaBc4dU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.168.0/22 Signature Algorithm: sha256WithRSAEncryption b9:9d:54:f8:2b:23:ad:a2:d1:a5:b6:24:4f:73:47:fd:97:04: 58:09:6b:de:d8:54:16:a0:e6:3d:20:7c:1f:b0:3a:93:6f:43: 33:54:04:cf:64:12:39:0e:4d:fe:cb:35:e3:77:60:46:78:8f: 43:26:8b:80:69:1f:48:50:db:b5:11:3b:4f:67:a8:66:7d:33: 76:b8:93:a9:bc:ee:09:33:d7:76:3a:ed:e9:06:ee:ad:6e:4e: c1:ab:e1:d5:5e:5f:8d:ae:4d:f7:34:c3:a1:57:5c:c7:ab:d9: d8:81:87:e9:c9:c7:22:2d:06:23:33:4d:f7:2c:14:cd:96:f5: 8c:95:cb:e6:7e:4c:3c:8c:db:07:e1:ff:a8:42:0b:56:88:b9: 88:43:20:16:b9:44:b1:a2:5d:38:e2:c0:3f:e7:23:61:e4:85: 44:f2:c3:6b:35:e2:8f:0f:ba:79:72:e4:a7:3f:d6:4d:55:61: bd:1e:bf:d3:1a:37:2c:5e:cc:7f:bb:14:bd:e3:3f:91:25:a5: 23:23:42:9f:88:67:47:2e:94:a0:86:91:15:a8:42:59:59:3c: c4:8a:29:c2:35:b1:dc:db:c2:56:c3:7b:da:2b:9f:29:e9:17: c9:8e:28:b2:e8:b1:ec:5f:ab:9a:cd:2c:5a:c1:f8:4e:13:c7: 04:50:93:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBOUQ3QTgxNDI1OUUz MjIyQUQ0OUM1RTRBNTM5MTI5QTA1Q0UxRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWdBTLuFQ6hGrTc3rfmDNhtTY1PVE3VPUU/50rI5tLirzeAE5e 1L7cV4S4LJu+p9+Vkna6ouElcaC83MeBoBfYEiOwgjOjMlJ23iHdHIvE1HXG6ZlK INMXokQD8hPjQSuUsROHKqYAh1yITiPASBlCucBjT+qBZPYxYUxfsbLsK9L5BTa1 53bH2xO0VJZQvWDBdNTjY1xVo4btuCHPCOHH2uPqtJPQCLRSH2XRKlqYAu0S+uLO gwL/KZ3PZp8IgcGjkS2XNAj8uyneNOIbMXD8b6ghe1lUI9oOpoSj6962bIX8FFL4 OJQgPE1sDuNaTFZbPakl9svja03mdP4MT1ZnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCp16gUJZ4yIq1JxeSlORKaBc4dUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NwMTZnVUpaNHlJcTFKeGVT bE9SS2FCYzRkVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sKgwDQYJKoZIhvcNAQELBQADggEBALmdVPgrI62i0aW2JE9zR/2XBFgJa97YVBag 5j0gfB+wOpNvQzNUBM9kEjkOTf7LNeN3YEZ4j0Mmi4BpH0hQ27URO09nqGZ9M3a4 k6m87gkz13Y67ekG7q1uTsGr4dVeX42uTfc0w6FXXMer2diBh+nJxyItBiMzTfcs FM2W9YyVy+Z+TDyM2wfh/6hCC1aIuYhDIBa5RLGiXTjiwD/nI2HkhUTyw2s14o8P unly5Kc/1k1VYb0ev9MaNyxezH+7FL3jP5ElpSMjQp+IZ0culKCGkRWoQllZPMSK KcI1sdzbwlbDe9ornynpF8mOKLLosexfq5rNLFrB+E4TxwRQk6Y= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:20 2025 by rpki-client