$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JVM2fjcce8btxLSQUc-xRR2TiOs.roa File: JVM2fjcce8btxLSQUc-xRR2TiOs.roa (raw, json) Hash identifier: EXybAH0+5ZuGXROpfy87synG4ABB+aBxcbzoTjf7W7E= Subject key identifier: 25:53:36:7E:37:1C:7B:C6:ED:C4:B4:90:51:CF:B1:45:1D:93:88:EB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34DB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JVM2fjcce8btxLSQUc-xRR2TiOs.roa Signing time: Mon 10 Feb 2025 13:52:45 +0000 ROA not before: Mon 10 Feb 2025 13:52:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13531 (0x34db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2553367E371C7BC6EDC4B49051CFB1451D9388EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:0e:d3:93:a5:18:b4:2f:5a:81:b2:d4:f8: 51:e9:15:ac:78:36:49:3c:26:8b:94:70:8a:70:77: 64:ad:76:ed:92:98:a6:68:32:98:68:44:c8:61:04: bf:7a:00:c5:f5:18:53:c3:b6:c2:de:e6:a8:f3:27: 62:00:06:31:c3:b2:af:45:ce:c5:89:21:62:dc:13: 01:1b:72:fa:9b:b9:e6:4f:dc:25:a7:93:95:8a:c7: 6b:c4:d8:6c:7d:94:ba:e7:7e:cc:05:d5:13:65:76: d1:ed:a6:6c:e2:7d:94:bd:c7:ab:ec:58:eb:91:1d: 94:28:5c:4a:bc:ad:48:7d:8e:a1:12:8c:74:f4:a7: 70:1f:9d:0b:47:59:dc:5d:05:43:2b:76:34:c0:d4: 3d:e4:24:07:3b:a1:c1:7c:71:e2:7e:92:1e:e8:c8: 10:c8:f6:01:a3:c1:e6:6c:2e:26:d2:10:8a:f9:1d: 93:eb:7e:af:ad:80:bd:1f:c2:52:e9:7f:5b:59:5c: 50:4f:ec:5a:7a:4a:52:87:7c:c7:35:38:dd:32:6d: 76:f9:03:d3:1f:cb:9a:4a:4c:3c:1f:57:9c:6e:0f: 77:a4:90:c6:71:31:2c:d4:08:26:1c:18:78:4b:84: b3:da:d9:75:5d:bb:96:1c:99:ae:bf:0d:3a:1a:da: 6b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:53:36:7E:37:1C:7B:C6:ED:C4:B4:90:51:CF:B1:45:1D:93:88:EB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JVM2fjcce8btxLSQUc-xRR2TiOs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.144.0/22 Signature Algorithm: sha256WithRSAEncryption 46:42:ba:33:8b:5e:b9:46:cb:47:76:60:2f:d5:2e:09:f5:1e: 9b:f8:87:3a:c7:2e:d2:0a:02:b5:59:02:12:19:a0:05:82:e3: 38:3d:c1:b4:9f:a4:76:fc:30:d7:dc:ae:aa:de:be:01:b7:20: 82:f2:fb:63:e9:df:35:4e:c0:c1:e2:ba:51:1b:a1:87:e8:03: dc:1b:f5:99:ed:09:9e:ee:cb:29:6e:b6:b6:22:ab:c4:3b:06: a9:bd:99:34:9f:89:bc:53:30:67:06:ef:1a:27:23:b8:13:37: 96:05:58:cc:90:09:da:35:b2:8d:d2:64:3c:de:e5:3a:42:fb: 49:82:5b:1e:84:ef:d2:fe:3d:42:6e:83:c4:5f:84:d0:af:ab: 10:c8:1b:b4:ea:e5:d4:5c:fc:a0:a4:45:0f:d3:08:56:02:02: 73:d6:f0:3f:c8:d3:29:fa:5a:cb:8d:a2:bf:ee:01:ab:e1:00: 50:8f:de:b3:65:55:2b:ce:8a:e7:f5:28:1e:50:51:f7:18:5f: b8:d1:a7:dd:c1:02:1c:6f:4b:d7:1e:d5:60:a3:62:2d:73:bb: de:89:cb:b8:87:35:ea:6b:21:c3:68:55:e1:ca:f8:ea:2e:b1: e7:ff:cd:35:a5:0a:2c:22:1e:a7:91:13:ca:ba:f9:de:ad:aa: a4:1a:78:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI1NTMzNjdFMzcxQzdC QzZFREM0QjQ5MDUxQ0ZCMTQ1MUQ5Mzg4RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwMw7Tk6UYtC9agbLU+FHpFax4Nkk8JouUcIpwd2Stdu2SmKZo MphoRMhhBL96AMX1GFPDtsLe5qjzJ2IABjHDsq9FzsWJIWLcEwEbcvqbueZP3CWn k5WKx2vE2Gx9lLrnfswF1RNldtHtpmzifZS9x6vsWOuRHZQoXEq8rUh9jqESjHT0 p3AfnQtHWdxdBUMrdjTA1D3kJAc7ocF8ceJ+kh7oyBDI9gGjweZsLibSEIr5HZPr fq+tgL0fwlLpf1tZXFBP7Fp6SlKHfMc1ON0ybXb5A9Mfy5pKTDwfV5xuD3ekkMZx MSzUCCYcGHhLhLPa2XVdu5Ycma6/DToa2mspAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJVM2fjcce8btxLSQUc+xRR2TiOswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pWTTJmamNjZThidHhMU1FV Yy14UlIyVGlPcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sJAwDQYJKoZIhvcNAQELBQADggEBAEZCujOLXrlGy0d2YC/VLgn1Hpv4hzrHLtIK ArVZAhIZoAWC4zg9wbSfpHb8MNfcrqrevgG3IILy+2Pp3zVOwMHiulEboYfoA9wb 9ZntCZ7uyylutrYiq8Q7Bqm9mTSfibxTMGcG7xonI7gTN5YFWMyQCdo1so3SZDze 5TpC+0mCWx6E79L+PUJug8RfhNCvqxDIG7Tq5dRc/KCkRQ/TCFYCAnPW8D/I0yn6 WsuNor/uAavhAFCP3rNlVSvOiuf1KB5QUfcYX7jRp93BAhxvS9ce1WCjYi1zu96J y7iHNeprIcNoVeHK+Oousef/zTWlCiwiHqeRE8q6+d6tqqQaePk= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:08 2025 by rpki-client