$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LtR9dXt6_1vzj7Fi3agQ88w0PRY.roa File: LtR9dXt6_1vzj7Fi3agQ88w0PRY.roa (raw, json) Hash identifier: 5v7NCGOgFxTMVedcR1zDvLcBohKD7dYdK4EvkqaBKPQ= Subject key identifier: 2E:D4:7D:75:7B:7A:FF:5B:F3:8F:B1:62:DD:A8:10:F3:CC:34:3D:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35DD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LtR9dXt6_1vzj7Fi3agQ88w0PRY.roa Signing time: Mon 10 Feb 2025 13:53:45 +0000 ROA not before: Mon 10 Feb 2025 13:53:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13789 (0x35dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2ED47D757B7AFF5BF38FB162DDA810F3CC343D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6e:29:b9:d6:a9:5d:0e:e7:b9:90:31:59:97: 66:d8:85:d2:7a:7e:eb:66:18:e3:20:6b:08:f3:33: 3d:99:8b:57:69:47:1d:f4:f7:06:5c:57:b4:d8:5d: 80:f8:d7:6e:6f:85:18:9c:67:6b:50:dd:23:05:8a: 0a:a3:37:6f:0e:ee:0c:82:48:04:ec:a3:f7:68:26: 92:d4:39:59:e9:6a:0f:8c:aa:7f:b5:31:18:f7:14: d2:da:5e:22:f9:3a:34:7b:09:cc:bd:0a:2e:e4:63: a4:d4:4e:23:2c:81:34:b1:40:ac:25:cb:67:a0:d8: bd:98:94:ef:c9:ab:ff:b1:47:d8:d5:a1:a9:d5:36: bb:1b:07:26:b4:08:a4:c6:de:46:f4:53:6b:c4:cc: 71:bf:f0:31:e6:ed:5b:23:60:a3:1c:0c:c6:81:93: 65:5a:eb:d6:89:4d:f1:eb:c6:90:3f:db:7c:45:6a: 2b:b4:0e:28:8a:ee:ba:fe:8c:a5:e7:04:27:f0:81: a0:df:01:da:66:b2:4e:2d:8a:bb:34:7a:b7:d8:4e: 28:4b:10:4e:e9:a2:0b:a7:53:77:1f:cb:22:83:f7: bf:0f:be:c8:92:50:6c:c5:26:8c:85:0e:d1:4b:d0: 48:ce:5c:3f:cf:e3:c7:13:4a:e8:36:a5:6b:32:ea: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D4:7D:75:7B:7A:FF:5B:F3:8F:B1:62:DD:A8:10:F3:CC:34:3D:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LtR9dXt6_1vzj7Fi3agQ88w0PRY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 53:4f:1d:65:ad:82:cc:4d:65:fa:43:c8:c1:d2:1c:40:29:e0: 7b:c2:0e:86:2d:3d:b3:46:a7:10:9f:1e:7e:50:51:9f:63:80: fe:94:f1:dc:86:dc:2c:80:59:0e:74:68:20:d4:40:69:f1:27: 5a:1d:9d:85:82:63:08:16:d9:2a:69:86:45:c7:69:a7:65:df: e1:b8:d7:08:f5:28:4c:3f:46:fd:72:3e:44:1a:c5:c7:ae:8a: 43:3f:f8:dc:37:2a:21:7c:59:d6:b5:c3:17:e0:2a:07:73:72: ab:a2:21:81:6b:4b:c4:7c:54:e9:28:6a:60:cf:34:1b:b9:b1: 60:eb:dc:46:f5:7f:7b:97:91:25:f8:17:1c:78:aa:c0:29:43: 5c:01:70:2e:7e:e4:70:cc:14:4d:03:8c:9c:02:c1:e9:69:ed: 74:f4:e5:62:d5:fc:d9:02:82:4d:65:da:33:b7:40:a8:d1:8c: 25:9e:83:18:75:79:bc:3e:14:31:6a:fd:67:18:30:c1:62:b6: 0b:9d:67:f3:14:6e:4d:c5:32:26:db:3d:db:17:a8:ac:d8:08: 00:04:ce:76:af:d5:61:c6:9f:91:02:40:7c:85:d0:e3:a2:3a: 5b:db:25:5d:2d:68:32:34:1a:a2:c0:a2:f3:52:f8:77:b7:59: 17:1b:50:03 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICNd0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJFRDQ3RDc1N0I3QUZG NUJGMzhGQjE2MkREQTgxMEYzQ0MzNDNEMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDybim51qldDue5kDFZl2bYhdJ6futmGOMgawjzMz2Zi1dpRx30 9wZcV7TYXYD4125vhRicZ2tQ3SMFigqjN28O7gyCSATso/doJpLUOVnpag+Mqn+1 MRj3FNLaXiL5OjR7Ccy9Ci7kY6TUTiMsgTSxQKwly2eg2L2YlO/Jq/+xR9jVoanV NrsbBya0CKTG3kb0U2vEzHG/8DHm7VsjYKMcDMaBk2Va69aJTfHrxpA/23xFaiu0 DiiK7rr+jKXnBCfwgaDfAdpmsk4tirs0erfYTihLEE7pogunU3cfyyKD978PvsiS UGzFJoyFDtFL0EjOXD/P48cTSug2pWsy6gOLAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQULtR9dXt6/1vzj7Fi3agQ88w0PRYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0x0UjlkWHQ2XzF2emo3Rmkz YWdRODh3MFBSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG0 sDANBgkqhkiG9w0BAQsFAAOCAQEAU08dZa2CzE1l+kPIwdIcQCnge8IOhi09s0an EJ8eflBRn2OA/pTx3IbcLIBZDnRoINRAafEnWh2dhYJjCBbZKmmGRcdpp2Xf4bjX CPUoTD9G/XI+RBrFx66KQz/43DcqIXxZ1rXDF+AqB3Nyq6IhgWtLxHxU6ShqYM80 G7mxYOvcRvV/e5eRJfgXHHiqwClDXAFwLn7kcMwUTQOMnALB6WntdPTlYtX82QKC TWXaM7dAqNGMJZ6DGHV5vD4UMWr9ZxgwwWK2C51n8xRuTcUyJts92xeorNgIAATO dq/VYcafkQJAfIXQ46I6W9slXS1oMjQaosCi81L4d7dZFxtQAw== -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:41 2025 by rpki-client