$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IJiQv0Gg0d3HX5sNqmwbTKC8KGI.roa File: IJiQv0Gg0d3HX5sNqmwbTKC8KGI.roa (raw, json) Hash identifier: GbXHcOIMdk4aYEuYeK1q0kIcjDnzs6R2Xm0rjlKEoOY= Subject key identifier: 20:98:90:BF:41:A0:D1:DD:C7:5F:9B:0D:AA:6C:1B:4C:A0:BC:28:62 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3685 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IJiQv0Gg0d3HX5sNqmwbTKC8KGI.roa Signing time: Mon 10 Feb 2025 13:54:23 +0000 ROA not before: Mon 10 Feb 2025 13:54:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13957 (0x3685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=209890BF41A0D1DDC75F9B0DAA6C1B4CA0BC2862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:c7:05:78:56:59:51:c8:71:4b:8a:2d:70: 3e:24:83:2d:1e:5e:f5:ad:e6:76:e0:6a:bd:1e:6b: 8f:f1:84:3e:d9:90:f4:b9:d7:26:10:89:9e:c3:c7: 34:46:17:4d:c3:04:29:ef:d4:89:26:80:1f:2a:14: 62:c6:b4:2b:88:37:a3:94:24:5c:43:e5:20:34:b9: 59:1e:17:9e:f0:f5:0e:32:d0:fd:08:62:b7:2c:1d: 3a:77:17:9c:ee:2e:9a:9e:9d:54:c0:2f:9b:69:e6: ce:b9:dd:bd:06:94:28:75:8a:98:93:3a:8a:bb:81: 96:89:09:0e:b8:71:f6:1b:94:5c:b9:28:93:76:1c: 1b:1d:86:3c:50:43:b8:f5:e0:66:66:2d:39:2c:54: a0:59:c1:cb:61:76:18:df:3d:fc:26:3e:17:e1:cd: 52:08:66:19:ac:da:0e:cc:3a:3e:38:d4:07:d4:c7: 7d:6b:1d:14:23:47:21:e9:fc:e0:47:8d:bd:0e:8b: 57:4d:16:ec:59:8b:eb:73:1b:54:3f:84:b6:a0:51: 5d:a8:e7:9e:48:81:87:58:cf:c1:ea:c0:1c:27:9c: 6f:09:7e:fb:71:54:86:2b:54:84:8e:eb:96:93:02: 52:78:5b:6a:b2:d0:5c:19:21:64:0a:a7:c0:c8:6b: 70:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:98:90:BF:41:A0:D1:DD:C7:5F:9B:0D:AA:6C:1B:4C:A0:BC:28:62 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IJiQv0Gg0d3HX5sNqmwbTKC8KGI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.172.0/22 Signature Algorithm: sha256WithRSAEncryption 57:58:2b:d2:1f:50:7b:01:15:7a:72:a0:e9:52:de:9c:e7:92: 31:85:c0:bf:b0:9f:cd:2f:d1:44:d0:9f:3a:02:43:f6:ad:56: 5f:c3:e6:2c:18:fd:b1:5c:24:73:d7:41:f0:ac:f9:77:25:fb: bf:7f:92:bf:c5:d2:1b:8a:1b:a1:42:65:7e:24:ce:78:97:94: e9:31:90:d3:85:3f:cd:6a:7e:02:14:ea:6c:96:66:d4:84:62: 32:25:f2:92:bd:50:9f:09:c7:ec:73:1c:6d:49:3b:e3:e8:ef: ce:92:7f:60:de:b6:f8:5a:f2:6c:5e:1b:2d:24:ab:4e:be:88: f0:43:a8:f7:da:91:78:1f:9f:89:5a:ae:b1:22:f0:e6:d6:6e: 24:c3:9d:dd:91:a7:47:f1:e8:9d:13:f6:b1:05:80:51:92:b5: 2f:a1:f0:7b:1c:d7:fb:50:01:70:aa:c6:f6:57:7b:f0:6b:b5: ba:a5:a5:9b:0d:1e:cd:cb:0e:2c:e0:06:e8:55:0c:69:8c:c0: 7a:8a:d0:28:ed:58:fe:86:74:f8:38:66:cc:f8:e9:65:20:04: c8:b3:51:2a:fa:ee:e5:3e:6e:8e:da:09:1f:12:43:c5:35:df: d3:35:d6:97:0f:4d:a0:45:3d:48:1e:cd:11:60:80:76:ee:6e: a9:64:27:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwOTg5MEJGNDFBMEQx RERDNzVGOUIwREFBNkMxQjRDQTBCQzI4NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC788cFeFZZUchxS4otcD4kgy0eXvWt5nbgar0ea4/xhD7ZkPS5 1yYQiZ7DxzRGF03DBCnv1IkmgB8qFGLGtCuIN6OUJFxD5SA0uVkeF57w9Q4y0P0I YrcsHTp3F5zuLpqenVTAL5tp5s653b0GlCh1ipiTOoq7gZaJCQ64cfYblFy5KJN2 HBsdhjxQQ7j14GZmLTksVKBZwcthdhjfPfwmPhfhzVIIZhms2g7MOj441AfUx31r HRQjRyHp/OBHjb0Oi1dNFuxZi+tzG1Q/hLagUV2o555IgYdYz8HqwBwnnG8Jfvtx VIYrVISO65aTAlJ4W2qy0FwZIWQKp8DIa3DVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIJiQv0Gg0d3HX5sNqmwbTKC8KGIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lKaVF2MEdnMGQzSFg1c05x bXdiVEtDOEtHSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sawwDQYJKoZIhvcNAQELBQADggEBAFdYK9IfUHsBFXpyoOlS3pznkjGFwL+wn80v 0UTQnzoCQ/atVl/D5iwY/bFcJHPXQfCs+Xcl+79/kr/F0huKG6FCZX4kzniXlOkx kNOFP81qfgIU6myWZtSEYjIl8pK9UJ8Jx+xzHG1JO+Po786Sf2Detvha8mxeGy0k q06+iPBDqPfakXgfn4larrEi8ObWbiTDnd2Rp0fx6J0T9rEFgFGStS+h8Hsc1/tQ AXCqxvZXe/BrtbqlpZsNHs3LDizgBuhVDGmMwHqK0CjtWP6GdPg4Zsz46WUgBMiz USr67uU+bo7aCR8SQ8U139M11pcPTaBFPUgezRFggHbubqlkJ1E= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:13 2025 by rpki-client