$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OXbvJ3Uy-V09AYlM3OiGvlTYdpI.roa File: OXbvJ3Uy-V09AYlM3OiGvlTYdpI.roa (raw, json) Hash identifier: CH/1HoK+lCmL+imdPmr8c4LdaD4n1BXU3Y+27+Z1pjo= Subject key identifier: 39:76:EF:27:75:32:F9:5D:3D:01:89:4C:DC:E8:86:BE:54:D8:76:92 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34EB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OXbvJ3Uy-V09AYlM3OiGvlTYdpI.roa Signing time: Mon 10 Feb 2025 13:52:49 +0000 ROA not before: Mon 10 Feb 2025 13:52:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3976EF277532F95D3D01894CDCE886BE54D87692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:c7:3d:aa:3f:89:ef:5d:3a:59:6f:0f:3f: 77:55:e3:45:63:27:7e:f0:23:de:9c:80:b0:fc:98: 27:69:81:e7:ed:e9:f6:fc:09:b3:31:af:27:39:a7: 14:a3:71:47:1f:35:c0:2b:de:60:58:e7:77:2e:9b: 19:27:e8:e3:ce:82:90:58:d3:d9:d1:86:55:c6:65: 6e:78:04:69:8a:74:e8:b2:10:24:29:3e:9d:ba:f5: a8:e9:40:8a:6c:9e:b7:a0:b4:bc:a1:6b:1f:92:57: ac:a4:38:2f:4e:11:07:11:ac:3e:5f:30:9c:f2:27: cc:4a:ee:8c:e0:43:ad:2e:fd:fe:71:63:0d:8b:7e: e2:e9:2a:d4:70:d2:17:72:f6:ed:33:27:00:0f:60: a8:aa:b9:4a:2d:f4:0b:8a:2e:68:91:bd:4e:0f:3c: af:7e:f2:29:cd:e5:c4:5a:34:d5:c4:1f:56:58:e5: 0d:93:55:7d:6e:7c:3e:56:c0:7e:2d:86:10:fa:2d: 07:cf:d9:28:8e:a0:97:4e:09:ae:2e:82:64:99:63: 40:49:0c:05:52:78:83:53:a8:6e:a4:3f:f6:59:08: 98:38:80:4e:7a:24:b9:92:dd:e7:cb:fc:3b:86:4e: 46:28:c9:64:01:f1:7a:4e:44:f9:dd:c8:a9:3e:83: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:EF:27:75:32:F9:5D:3D:01:89:4C:DC:E8:86:BE:54:D8:76:92 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OXbvJ3Uy-V09AYlM3OiGvlTYdpI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.216.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:ea:7e:5e:bd:e3:de:bd:11:fd:12:e6:1c:23:53:7e:85:db: f9:94:3a:ce:9b:bd:eb:a3:36:bd:f6:eb:88:7d:fa:c5:5c:bc: d0:3d:2a:f4:5c:a9:da:37:9b:31:6e:6d:f5:f0:2e:10:d7:2e: 8f:e0:21:98:1f:48:e7:ad:8d:f1:42:29:67:47:d4:a4:ec:db: c2:33:95:5f:5c:32:fa:52:f3:c0:d9:1b:0b:c5:52:83:a0:ef: 7b:74:6a:3d:de:4b:3e:af:a0:3b:c2:ea:b1:1c:3a:7f:1a:2f: 94:63:47:96:ab:f7:58:4b:ef:10:c9:fe:2f:71:bf:e9:5e:c0: 7d:8e:7b:89:70:85:41:6d:86:82:62:21:67:73:a7:a1:8c:53: a9:95:d9:c8:08:f4:25:e0:5e:04:fa:e2:e0:4f:e5:e3:03:97: 31:66:df:f9:bd:63:28:d4:37:2e:cf:02:70:1f:da:27:84:a3: ca:76:43:a0:1a:9c:dc:2e:2e:5e:c4:b3:65:95:57:d9:9b:00: 4d:b1:32:fb:f6:94:17:7d:66:1f:df:9c:4b:e3:64:38:6b:c6: 90:75:7b:af:85:1f:d7:69:77:4e:0c:22:c1:2f:b4:3b:26:b1: 79:cc:bb:89:0b:41:65:bc:08:b5:27:02:6e:ee:9e:db:c3:dc: 39:81:26:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5NzZFRjI3NzUzMkY5 NUQzRDAxODk0Q0RDRTg4NkJFNTREODc2OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+msc9qj+J7106WW8PP3dV40VjJ37wI96cgLD8mCdpgeft6fb8 CbMxryc5pxSjcUcfNcAr3mBY53cumxkn6OPOgpBY09nRhlXGZW54BGmKdOiyECQp Pp269ajpQIpsnregtLyhax+SV6ykOC9OEQcRrD5fMJzyJ8xK7ozgQ60u/f5xYw2L fuLpKtRw0hdy9u0zJwAPYKiquUot9AuKLmiRvU4PPK9+8inN5cRaNNXEH1ZY5Q2T VX1ufD5WwH4thhD6LQfP2SiOoJdOCa4ugmSZY0BJDAVSeINTqG6kP/ZZCJg4gE56 JLmS3efL/DuGTkYoyWQB8XpORPndyKk+g4HPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOXbvJ3Uy+V09AYlM3OiGvlTYdpIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09YYnZKM1V5LVYwOUFZbE0z T2lHdmxUWWRwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sdgwDQYJKoZIhvcNAQELBQADggEBAFvqfl694969Ef0S5hwjU36F2/mUOs6bveuj Nr3264h9+sVcvNA9KvRcqdo3mzFubfXwLhDXLo/gIZgfSOetjfFCKWdH1KTs28Iz lV9cMvpS88DZGwvFUoOg73t0aj3eSz6voDvC6rEcOn8aL5RjR5ar91hL7xDJ/i9x v+lewH2Oe4lwhUFthoJiIWdzp6GMU6mV2cgI9CXgXgT64uBP5eMDlzFm3/m9YyjU Ny7PAnAf2ieEo8p2Q6AanNwuLl7Es2WVV9mbAE2xMvv2lBd9Zh/fnEvjZDhrxpB1 e6+FH9dpd04MIsEvtDsmsXnMu4kLQWW8CLUnAm7untvD3DmBJuo= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:29 2025 by rpki-client