$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KrZUyDQL18khrPNOUH1l1fmCHxY.roa File: KrZUyDQL18khrPNOUH1l1fmCHxY.roa (raw, json) Hash identifier: Ce3nnxhBmjPtlzFgvHFXOCbEcSQTyFXrLgFu7rtUpZg= Subject key identifier: 2A:B6:54:C8:34:0B:D7:C9:21:AC:F3:4E:50:7D:65:D5:F9:82:1F:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3665 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KrZUyDQL18khrPNOUH1l1fmCHxY.roa Signing time: Mon 10 Feb 2025 13:54:17 +0000 ROA not before: Mon 10 Feb 2025 13:54:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13925 (0x3665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2AB654C8340BD7C921ACF34E507D65D5F9821F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:f1:68:5b:db:aa:64:58:c3:5b:bc:98:e7: 64:e7:8e:6b:81:95:61:f5:0d:6c:09:b7:75:2e:15: 07:2f:24:f1:3c:33:1f:49:5d:95:28:bc:53:3e:37: 9a:e9:42:85:b5:e7:0d:87:70:58:d2:de:e1:6a:d7: 64:aa:3f:b9:49:67:0c:25:ae:9a:12:7c:68:70:47: eb:5d:f1:c5:da:c1:d4:f1:3c:26:59:8c:22:88:5f: 1b:24:de:a3:e9:4b:0a:f5:79:66:a9:59:36:6f:ea: c2:f3:96:dd:81:a2:ee:92:6c:8f:42:39:ab:93:80: 5a:1f:70:02:18:17:7f:ce:61:62:21:11:52:66:26: 00:70:24:a6:c4:72:b9:8d:c4:5b:09:43:d2:49:b6: b2:90:73:2f:bc:c1:0a:c9:fb:2f:40:4c:2b:09:96: 36:3f:3d:e5:9d:f2:7a:66:c8:10:1d:65:41:a3:3d: 2e:da:66:c6:b3:d5:6b:26:56:dc:f4:2c:ef:f6:3e: 50:14:8f:50:6f:be:ff:02:22:21:b4:ad:bb:f1:ce: 59:be:d9:df:e5:c1:1f:88:9e:09:20:25:3f:64:61: f2:16:c9:19:61:bb:13:4f:55:bd:8c:2b:93:c9:bd: 66:c7:eb:83:fa:e4:34:e9:c4:bd:0c:67:23:fa:9b: 7a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B6:54:C8:34:0B:D7:C9:21:AC:F3:4E:50:7D:65:D5:F9:82:1F:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KrZUyDQL18khrPNOUH1l1fmCHxY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.152.0/21 Signature Algorithm: sha256WithRSAEncryption af:1c:2e:c5:c6:1e:5d:70:21:80:47:2f:2c:19:50:46:7e:ae: 8f:aa:b2:89:e1:db:7c:9d:9b:a5:55:a3:f9:a2:b3:b9:48:aa: 34:46:6f:ca:ee:b6:92:b1:f1:ce:68:9d:33:6c:2b:a6:8d:35: a5:78:9e:6d:01:b2:e6:99:ff:97:24:88:16:23:4b:f1:bd:bd: a9:66:e6:79:79:a3:76:88:26:72:01:cc:a2:33:ec:c5:0d:af: 2f:f7:82:3f:e8:7b:7c:86:6b:34:42:ca:18:89:59:46:db:7d: bd:b2:eb:7d:ca:3f:17:bb:c6:da:4e:95:5f:8a:20:e2:4d:a7: 1c:89:bb:21:bf:c1:14:b3:2b:76:f4:13:0d:25:64:3c:93:27: d6:9c:1d:10:ab:97:59:cf:a7:98:1f:8a:9c:09:7d:5a:51:ea: 77:62:ff:cd:13:53:c6:a8:16:c0:61:71:23:41:5b:bf:26:0b: 01:76:90:58:7c:c2:3b:d1:91:cb:e0:66:d1:00:80:9d:6c:0c: e0:f7:20:d6:45:0a:96:8a:a4:f2:6a:b6:ad:b3:b3:70:98:73: e6:ee:e0:98:d8:4c:dc:1b:e4:5a:61:52:02:0d:02:bd:87:13: ce:3e:32:61:9c:f5:13:be:4b:42:aa:b1:84:06:b2:d5:7d:c1: 3a:35:1d:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBQjY1NEM4MzQwQkQ3 QzkyMUFDRjM0RTUwN0Q2NUQ1Rjk4MjFGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpSvFoW9uqZFjDW7yY52TnjmuBlWH1DWwJt3UuFQcvJPE8Mx9J XZUovFM+N5rpQoW15w2HcFjS3uFq12SqP7lJZwwlrpoSfGhwR+td8cXawdTxPCZZ jCKIXxsk3qPpSwr1eWapWTZv6sLzlt2Bou6SbI9COauTgFofcAIYF3/OYWIhEVJm JgBwJKbEcrmNxFsJQ9JJtrKQcy+8wQrJ+y9ATCsJljY/PeWd8npmyBAdZUGjPS7a Zsaz1WsmVtz0LO/2PlAUj1Bvvv8CIiG0rbvxzlm+2d/lwR+IngkgJT9kYfIWyRlh uxNPVb2MK5PJvWbH64P65DTpxL0MZyP6m3qVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKrZUyDQL18khrPNOUH1l1fmCHxYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tyWlV5RFFMMThraHJQTk9V SDFsMWZtQ0h4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sZgwDQYJKoZIhvcNAQELBQADggEBAK8cLsXGHl1wIYBHLywZUEZ+ro+qsonh23yd m6VVo/mis7lIqjRGb8rutpKx8c5onTNsK6aNNaV4nm0BsuaZ/5ckiBYjS/G9valm 5nl5o3aIJnIBzKIz7MUNry/3gj/oe3yGazRCyhiJWUbbfb2y633KPxe7xtpOlV+K IOJNpxyJuyG/wRSzK3b0Ew0lZDyTJ9acHRCrl1nPp5gfipwJfVpR6ndi/80TU8ao FsBhcSNBW78mCwF2kFh8wjvRkcvgZtEAgJ1sDOD3INZFCpaKpPJqtq2zs3CYc+bu 4JjYTNwb5FphUgINAr2HE84+MmGc9RO+S0KqsYQGstV9wTo1HdY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:11 2025 by rpki-client