$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IGo4YrnONgA4EZXm4YHkir_gDoM.roa File: IGo4YrnONgA4EZXm4YHkir_gDoM.roa (raw, json) Hash identifier: +jtyJGMtywSgc5ZQaJhZXfHaORoFt3oU+ddiDiqjacI= Subject key identifier: 20:6A:38:62:B9:CE:36:00:38:11:95:E6:E1:81:E4:8A:BF:E0:0E:83 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34AF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IGo4YrnONgA4EZXm4YHkir_gDoM.roa Signing time: Mon 10 Feb 2025 13:52:37 +0000 ROA not before: Mon 10 Feb 2025 13:52:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=206A3862B9CE3600381195E6E181E48ABFE00E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:af:0a:77:91:78:5f:7c:39:7b:3f:49:e6:03: 6e:68:b1:ed:13:8a:88:b7:0a:ac:38:71:65:6a:af: ee:5a:37:99:66:b8:8b:0a:14:97:79:da:0c:ad:1e: bb:2d:4a:fa:36:4e:ce:0c:25:2a:2b:45:2a:eb:0b: d1:30:a4:26:ef:cd:73:f7:f3:fb:2b:65:81:e9:a8: e7:42:dc:d5:14:01:90:36:d2:b8:d6:bf:e7:b1:2b: 08:b1:5b:45:e2:b7:87:69:fb:26:d3:65:e9:5a:2b: ef:a2:ab:e9:f5:cf:e3:46:88:07:dd:0a:13:2c:19: 45:e9:af:00:4f:36:39:f9:6e:fe:51:59:92:72:70: f8:79:80:c3:5d:e3:15:d3:c2:b7:26:38:d9:79:68: ee:b3:d4:1e:0e:dc:9b:f5:fa:0f:61:cb:2c:c1:88: 08:e6:bd:0e:a1:59:02:61:ac:ea:25:45:56:b9:7b: 39:24:83:54:9d:b1:fd:04:21:e2:8a:b0:dd:d5:fd: 4b:d8:12:d3:d9:26:ce:c5:3c:a5:34:73:f0:c5:0b: 37:d1:08:0f:20:52:5f:bb:a5:ab:45:c7:f2:b7:15: 3d:57:26:4b:d4:a0:8a:3c:73:43:21:4c:3c:02:a3: 31:ee:f6:81:a9:1e:f8:a6:26:e4:48:e2:77:58:74: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:38:62:B9:CE:36:00:38:11:95:E6:E1:81:E4:8A:BF:E0:0E:83 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IGo4YrnONgA4EZXm4YHkir_gDoM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:76:89:d7:a6:e0:78:6a:3d:fe:1a:2d:a8:48:d6:8e:68:5d: 67:d6:e3:40:77:e9:a9:b0:17:01:0f:02:0a:21:bb:95:5a:97: b1:0a:90:28:60:b9:5f:ad:ba:c1:74:3f:f0:50:88:03:a8:38: 2d:14:f3:36:f0:ae:81:36:9f:7c:34:a0:06:6c:48:c8:9d:6e: 24:df:01:14:ce:35:58:40:ca:31:c5:82:37:cb:b7:0b:bf:6d: 64:44:b3:82:c6:63:bc:11:dc:ca:f2:53:dd:7a:ea:e9:53:36: 27:93:24:6f:2f:99:61:5a:64:ae:35:6c:e9:a3:dc:4a:b3:42: c1:3e:e0:4a:b9:ee:c7:07:cc:c9:60:1c:d8:0b:9e:e6:c8:9e: 17:ef:e3:98:00:c1:c5:68:e5:eb:51:86:a4:f8:c0:25:6e:2e: 23:aa:65:66:83:24:94:3f:93:cd:b3:e7:b6:55:8e:56:7f:b8: d9:79:66:ba:37:ec:3c:bf:3f:ca:0f:87:f2:a9:0e:fa:6a:1c: 55:02:ed:9b:5b:4d:0e:05:9b:f2:2a:8a:a9:ce:45:88:cc:d6: 71:27:06:d0:c9:71:6f:97:ab:aa:2a:f7:8f:06:86:f3:18:d1: 95:54:40:eb:bd:5a:21:50:7e:d3:38:ba:65:cd:94:92:ad:2c: c3:09:e7:12 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwNkEzODYyQjlDRTM2 MDAzODExOTVFNkUxODFFNDhBQkZFMDBFODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCSrwp3kXhffDl7P0nmA25ose0Tioi3Cqw4cWVqr+5aN5lmuIsK FJd52gytHrstSvo2Ts4MJSorRSrrC9EwpCbvzXP38/srZYHpqOdC3NUUAZA20rjW v+exKwixW0Xit4dp+ybTZelaK++iq+n1z+NGiAfdChMsGUXprwBPNjn5bv5RWZJy cPh5gMNd4xXTwrcmONl5aO6z1B4O3Jv1+g9hyyzBiAjmvQ6hWQJhrOolRVa5ezkk g1Sdsf0EIeKKsN3V/UvYEtPZJs7FPKU0c/DFCzfRCA8gUl+7patFx/K3FT1XJkvU oIo8c0MhTDwCozHu9oGpHvimJuRI4ndYdNH3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIGo4YrnONgA4EZXm4YHkir/gDoMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lHbzRZcm5PTmdBNEVaWG00 WUhraXJfZ0RvTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sAQwDQYJKoZIhvcNAQELBQADggEBAFt2idem4HhqPf4aLahI1o5oXWfW40B36amw FwEPAgohu5Val7EKkChguV+tusF0P/BQiAOoOC0U8zbwroE2n3w0oAZsSMidbiTf ARTONVhAyjHFgjfLtwu/bWREs4LGY7wR3MryU9166ulTNieTJG8vmWFaZK41bOmj 3EqzQsE+4Eq57scHzMlgHNgLnubInhfv45gAwcVo5etRhqT4wCVuLiOqZWaDJJQ/ k82z57ZVjlZ/uNl5Zro37Dy/P8oPh/KpDvpqHFUC7ZtbTQ4Fm/IqiqnORYjM1nEn BtDJcW+Xq6oq948GhvMY0ZVUQOu9WiFQftM4umXNlJKtLMMJ5xI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:28 2025 by rpki-client