$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NU0bUMRXDla0NdmBtdB0zieJCfY.roa File: NU0bUMRXDla0NdmBtdB0zieJCfY.roa (raw, json) Hash identifier: /Jn1dJwBannvz7l5xPV9bRkHQmLuPL2OdS2qlMJoLjE= Subject key identifier: 35:4D:1B:50:C4:57:0E:56:B4:35:D9:81:B5:D0:74:CE:27:89:09:F6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 351F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NU0bUMRXDla0NdmBtdB0zieJCfY.roa Signing time: Mon 10 Feb 2025 13:53:01 +0000 ROA not before: Mon 10 Feb 2025 13:53:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13599 (0x351f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=354D1B50C4570E56B435D981B5D074CE278909F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:2c:5b:83:19:d4:78:59:ec:f7:9e:d1:9f: c2:a0:90:7c:90:9d:3f:36:e9:ea:85:19:f8:68:39: bc:29:1d:91:13:c3:52:03:d7:32:c5:d5:96:8b:19: 6b:99:ef:74:5a:ab:14:c1:88:d4:54:42:5b:7e:11: d4:42:7e:a0:b3:0a:e5:a4:68:f5:6e:50:71:ff:07: 25:37:9c:19:d3:70:ee:cc:4c:32:e3:a0:a9:64:d1: f8:cc:5b:5d:e4:bc:27:35:f5:aa:57:44:c7:8a:57: 7d:c5:6e:a9:2a:55:b1:85:72:73:32:12:5e:21:c4: a2:69:56:51:4c:08:97:37:87:28:51:94:b0:11:d8: 97:84:ee:fc:37:c7:57:4f:fe:8f:38:26:53:57:d4: 11:f5:62:64:83:7a:9c:16:54:e9:b3:f6:93:fa:8e: c7:b5:96:9a:87:71:3b:da:43:04:55:ef:53:39:17: b3:4c:7f:8b:55:e0:85:4b:9b:55:7e:74:23:0b:f3: d9:f6:a0:3d:a8:29:ff:36:2e:d9:72:95:dd:33:45: 53:0c:8d:62:82:d3:6c:d3:1e:01:eb:2a:c0:2a:70: 07:c0:f6:87:d9:0f:ba:1b:99:30:49:69:32:79:fd: ab:b6:6b:8a:4c:9c:3a:96:d1:d8:41:90:81:88:15: 75:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4D:1B:50:C4:57:0E:56:B4:35:D9:81:B5:D0:74:CE:27:89:09:F6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NU0bUMRXDla0NdmBtdB0zieJCfY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.0.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:33:a1:35:24:7a:ca:c5:6d:3d:fd:89:7a:f5:33:cb:88:cf: ff:8b:ff:6e:2f:e0:39:17:17:60:b6:b7:5f:18:d9:c1:13:5b: 5e:16:1b:0d:e1:ef:9f:5a:81:60:d7:a0:d1:6d:29:63:d1:ad: d9:69:a3:7c:bb:6a:d5:bc:e8:01:19:f6:b7:9f:80:aa:c3:9c: 32:6c:75:35:c8:a3:3a:83:36:8d:05:68:3f:07:0c:15:da:10: 60:65:13:9e:2d:bf:bc:d0:95:c0:67:f5:ae:87:24:79:ff:4d: 82:8e:50:6f:c9:e0:30:54:e1:71:9e:1e:42:a7:ed:5c:95:2d: 99:1b:74:76:60:e5:4f:39:92:23:f1:21:20:a8:6d:52:5b:a2: 63:b8:82:64:12:bd:82:75:a4:a0:60:9c:06:79:8b:b1:5c:c1: e6:6e:aa:fc:2e:cf:2a:56:ae:de:e2:ff:f5:67:44:83:1e:bd: b8:36:bb:99:f1:c2:f3:d2:e9:0f:a0:0c:a1:e6:69:63:a7:a3: d3:de:69:7f:93:ab:05:df:29:05:58:ae:e2:38:6e:fa:cc:98: 21:41:9c:4f:91:54:53:dc:20:ec:2b:b2:c1:04:d0:12:42:0c: 8e:8c:1f:60:02:67:ee:7f:52:53:40:51:25:8a:23:50:79:3c: 8f:ed:ac:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1NEQxQjUwQzQ1NzBF NTZCNDM1RDk4MUI1RDA3NENFMjc4OTA5RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBZyxbgxnUeFns957Rn8KgkHyQnT826eqFGfhoObwpHZETw1ID 1zLF1ZaLGWuZ73RaqxTBiNRUQlt+EdRCfqCzCuWkaPVuUHH/ByU3nBnTcO7MTDLj oKlk0fjMW13kvCc19apXRMeKV33FbqkqVbGFcnMyEl4hxKJpVlFMCJc3hyhRlLAR 2JeE7vw3x1dP/o84JlNX1BH1YmSDepwWVOmz9pP6jse1lpqHcTvaQwRV71M5F7NM f4tV4IVLm1V+dCML89n2oD2oKf82Ltlyld0zRVMMjWKC02zTHgHrKsAqcAfA9ofZ D7obmTBJaTJ5/au2a4pMnDqW0dhBkIGIFXXjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNU0bUMRXDla0NdmBtdB0zieJCfYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05VMGJVTVJYRGxhME5kbUJ0 ZEIwemllSkNmWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0 sAAwDQYJKoZIhvcNAQELBQADggEBACszoTUkesrFbT39iXr1M8uIz/+L/24v4DkX F2C2t18Y2cETW14WGw3h759agWDXoNFtKWPRrdlpo3y7atW86AEZ9refgKrDnDJs dTXIozqDNo0FaD8HDBXaEGBlE54tv7zQlcBn9a6HJHn/TYKOUG/J4DBU4XGeHkKn 7VyVLZkbdHZg5U85kiPxISCobVJbomO4gmQSvYJ1pKBgnAZ5i7FcweZuqvwuzypW rt7i//VnRIMevbg2u5nxwvPS6Q+gDKHmaWOno9PeaX+TqwXfKQVYruI4bvrMmCFB nE+RVFPcIOwrssEE0BJCDI6MH2ACZ+5/UlNAUSWKI1B5PI/trA0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:46 2025 by rpki-client