$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Oi_J0x5-KpHOuehzGWqO2Bpa_yo.roa File: Oi_J0x5-KpHOuehzGWqO2Bpa_yo.roa (raw, json) Hash identifier: kyLjEXh7AeZDzdDfryIw8CgBTdiBqLaVjfiuRb8jii0= Subject key identifier: 3A:2F:C9:D3:1E:7E:2A:91:CE:B9:E8:73:19:6A:8E:D8:1A:5A:FF:2A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3619 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Oi_J0x5-KpHOuehzGWqO2Bpa_yo.roa Signing time: Mon 10 Feb 2025 13:53:58 +0000 ROA not before: Mon 10 Feb 2025 13:53:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13849 (0x3619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3A2FC9D31E7E2A91CEB9E873196A8ED81A5AFF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:96:6e:f9:65:41:51:21:fe:73:3e:23:5e:75: 94:d3:0c:b3:47:44:87:a8:b2:fd:95:4e:e2:4f:18: 5d:fc:71:e8:d3:f8:eb:80:7d:32:a6:de:e3:2a:b2: f4:c8:fe:49:86:6d:41:fc:7c:f3:81:48:ee:c0:24: f3:c6:7c:5b:91:ec:a4:09:40:44:29:3e:60:a9:b4: 7b:76:56:56:a8:da:13:99:06:e4:ba:25:01:8f:2c: 72:88:19:c6:16:cb:71:95:5f:c4:9f:1b:22:b2:8e: 83:05:98:25:cb:f6:ef:a0:34:6f:82:4f:b4:92:d3: 26:5e:f0:0f:47:e1:51:be:a6:d7:43:a1:15:68:a4: 9b:52:51:a9:02:80:fb:c8:b1:4e:a6:ea:75:8e:2a: 69:ab:2d:8f:23:78:93:82:f7:0e:61:ba:b2:7d:ce: 6c:7d:bd:07:73:e2:5e:5a:6b:00:46:88:d0:43:a8: 3c:43:f3:89:2d:60:85:13:c2:42:d1:7d:0e:b3:f6: ab:aa:da:d7:be:75:ad:b3:97:09:97:3b:85:99:8d: 24:a4:82:2f:58:b1:b2:1a:37:c3:de:a9:de:08:89: dc:e1:94:89:b9:21:a2:c7:ae:96:e9:19:2b:5d:16: 5b:e5:fb:8c:be:12:b6:6a:ee:c0:56:72:3b:3e:4c: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:C9:D3:1E:7E:2A:91:CE:B9:E8:73:19:6A:8E:D8:1A:5A:FF:2A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Oi_J0x5-KpHOuehzGWqO2Bpa_yo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.156.0/22 Signature Algorithm: sha256WithRSAEncryption ae:43:0b:04:cd:a0:d2:fd:25:45:48:82:1a:87:43:40:ea:df: 9e:20:48:0e:03:2e:60:7f:b8:bb:29:26:a8:ee:2f:69:e5:a4: bd:36:d7:5a:08:99:fe:c3:d1:07:5e:15:3e:18:6a:03:be:b3: 47:f6:e1:10:d3:ad:0c:82:ac:41:74:b3:18:2f:37:fc:68:1e: 95:23:45:74:17:16:8e:f9:96:a6:ce:b3:f9:89:28:dd:85:fd: 10:dd:95:da:0e:99:bc:4b:cc:3d:a3:86:0b:08:8b:ed:8c:95: fa:b5:7a:95:58:9d:09:3e:a9:a7:32:3e:4e:04:cc:dc:0f:56: 8d:00:f0:46:b9:bb:a4:fe:36:2f:97:8f:28:7d:c9:f3:ad:36: ed:87:b2:a7:65:b0:79:00:ed:69:59:1f:1d:7f:de:23:59:2f: 2f:d9:6e:00:c5:4e:ef:32:7a:ad:34:58:66:22:c8:0e:55:e5: 3f:f1:d0:11:4f:7a:72:d4:ba:08:e1:78:d1:24:bb:a0:26:9a: 7c:31:e1:8c:7e:15:62:e0:17:4e:be:32:06:97:cf:1d:5b:f8: 4e:6f:ed:b0:27:3b:c1:c6:f9:85:06:4e:bf:49:89:c1:27:b1: 2e:c9:54:6a:46:47:03:97:e1:08:36:a4:b8:bc:e3:0a:05:e5: 9c:23:13:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNBMkZDOUQzMUU3RTJB OTFDRUI5RTg3MzE5NkE4RUQ4MUE1QUZGMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzlm75ZUFRIf5zPiNedZTTDLNHRIeosv2VTuJPGF38cejT+OuA fTKm3uMqsvTI/kmGbUH8fPOBSO7AJPPGfFuR7KQJQEQpPmCptHt2Vlao2hOZBuS6 JQGPLHKIGcYWy3GVX8SfGyKyjoMFmCXL9u+gNG+CT7SS0yZe8A9H4VG+ptdDoRVo pJtSUakCgPvIsU6m6nWOKmmrLY8jeJOC9w5hurJ9zmx9vQdz4l5aawBGiNBDqDxD 84ktYIUTwkLRfQ6z9quq2te+da2zlwmXO4WZjSSkgi9YsbIaN8Peqd4IidzhlIm5 IaLHrpbpGStdFlvl+4y+ErZq7sBWcjs+TB9vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOi/J0x5+KpHOuehzGWqO2Bpa/yowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09pX0oweDUtS3BIT3VlaHpH V3FPMkJwYV95by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sJwwDQYJKoZIhvcNAQELBQADggEBAK5DCwTNoNL9JUVIghqHQ0Dq354gSA4DLmB/ uLspJqjuL2nlpL0211oImf7D0QdeFT4YagO+s0f24RDTrQyCrEF0sxgvN/xoHpUj RXQXFo75lqbOs/mJKN2F/RDdldoOmbxLzD2jhgsIi+2Mlfq1epVYnQk+qacyPk4E zNwPVo0A8Ea5u6T+Ni+Xjyh9yfOtNu2HsqdlsHkA7WlZHx1/3iNZLy/ZbgDFTu8y eq00WGYiyA5V5T/x0BFPenLUugjheNEku6Ammnwx4Yx+FWLgF06+MgaXzx1b+E5v 7bAnO8HG+YUGTr9JicEnsS7JVGpGRwOX4Qg2pLi84woF5ZwjE78= -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:18 2025 by rpki-client