$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pq9Ru9T30aVwNXnuEsux38xl3pM.roa File: Pq9Ru9T30aVwNXnuEsux38xl3pM.roa (raw, json) Hash identifier: RCLs7/rgNP45EjyyBlE1Y/nGnQJTgtFnulDuAlOWoe4= Subject key identifier: 3E:AF:51:BB:D4:F7:D1:A5:70:35:79:EE:12:CB:B1:DF:CC:65:DE:93 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36C4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pq9Ru9T30aVwNXnuEsux38xl3pM.roa Signing time: Mon 10 Feb 2025 13:54:39 +0000 ROA not before: Mon 10 Feb 2025 13:54:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14020 (0x36c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3EAF51BBD4F7D1A5703579EE12CBB1DFCC65DE93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0c:a6:b2:39:43:ad:2c:c8:0f:cd:fe:a9:78: e4:dc:94:9e:fd:ca:ef:63:10:d3:eb:ee:c1:b2:2d: ee:bb:d8:88:37:01:a9:e8:81:75:b0:bc:f3:68:48: 64:ff:45:5f:ea:43:52:28:54:6e:b5:c6:12:d9:cb: ea:f1:06:2b:4d:95:04:74:18:83:11:b7:1d:fc:bd: 51:0b:12:31:da:1b:74:32:ad:fc:49:b6:06:a5:cf: 39:7d:a7:7a:47:83:62:4c:ba:f2:b6:ee:20:4f:b4: 02:8a:3f:f1:64:e1:81:dd:ba:07:df:a0:f6:2c:a7: 03:25:f4:a1:4b:dd:3d:cd:3e:16:a8:76:f0:07:9f: 07:bd:b3:79:65:87:0b:9f:d1:e7:ad:2e:2c:42:6e: d9:5c:b0:47:c9:69:de:27:c2:e1:d8:35:ec:f3:1d: c6:88:02:3f:8d:57:1c:c5:ca:55:ac:89:14:aa:e0: 36:c3:f8:00:b3:00:e5:c7:8b:31:64:ef:c4:c2:bb: 1a:d9:a5:a1:8e:30:25:01:58:67:60:50:25:c8:90: 0e:48:d5:28:ee:7f:f2:9e:b9:d5:ea:77:81:08:90: 1c:57:18:4c:8d:58:4e:9a:5e:c5:72:6e:4c:54:4a: 09:3d:0a:60:92:8d:b4:c4:6b:31:b4:08:44:41:bf: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AF:51:BB:D4:F7:D1:A5:70:35:79:EE:12:CB:B1:DF:CC:65:DE:93 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pq9Ru9T30aVwNXnuEsux38xl3pM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.104.0/21 Signature Algorithm: sha256WithRSAEncryption 17:72:95:a8:77:cb:cc:a2:26:8b:f5:85:86:d7:a2:f9:14:67: fd:14:32:b6:d7:06:85:72:9e:6d:58:f1:42:4f:38:9f:e0:75: a3:cb:92:7a:f9:df:63:16:3e:97:08:64:ea:79:93:3c:01:ce: ce:ec:ce:fd:78:f7:0f:3c:43:90:e6:e7:56:85:4e:8e:e4:5e: cb:73:eb:70:46:16:47:65:d4:d2:89:9c:95:6f:f7:17:bf:93: 8e:b5:05:47:09:88:9f:82:16:c8:b9:fe:bd:ea:be:6f:2d:03: d3:d3:b7:0d:36:cd:a6:30:e7:ff:e2:5a:f4:d6:b3:78:90:48: 99:e9:ed:18:23:d4:1e:a0:90:16:a0:c2:8f:33:3d:f3:bc:e8: 5d:66:29:96:5c:66:53:bc:65:96:81:6d:34:35:80:ab:36:3e: 40:87:ea:73:20:b0:cd:af:4c:f7:ce:33:8a:fe:a0:b4:80:26: a9:6c:f2:9e:ec:82:34:14:94:9b:f8:82:42:eb:db:2a:8a:20: 42:46:5c:31:84:97:fa:7f:b4:47:18:d7:f7:b3:e5:c5:df:5a: 66:68:8b:bc:37:ff:86:03:50:3b:5c:3a:cb:63:9f:40:9c:7a: c9:9a:c7:d4:59:91:e1:24:09:38:7b:ca:e5:db:31:ab:78:4f: e5:38:dc:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFQUY1MUJCRDRGN0Qx QTU3MDM1NzlFRTEyQ0JCMURGQ0M2NURFOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgDKayOUOtLMgPzf6peOTclJ79yu9jENPr7sGyLe672Ig3Aano gXWwvPNoSGT/RV/qQ1IoVG61xhLZy+rxBitNlQR0GIMRtx38vVELEjHaG3QyrfxJ tgalzzl9p3pHg2JMuvK27iBPtAKKP/Fk4YHdugffoPYspwMl9KFL3T3NPhaodvAH nwe9s3llhwuf0eetLixCbtlcsEfJad4nwuHYNezzHcaIAj+NVxzFylWsiRSq4DbD +ACzAOXHizFk78TCuxrZpaGOMCUBWGdgUCXIkA5I1Sjuf/KeudXqd4EIkBxXGEyN WE6aXsVybkxUSgk9CmCSjbTEazG0CERBv4dPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPq9Ru9T30aVwNXnuEsux38xl3pMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BxOVJ1OVQzMGFWd05YbnVF c3V4Mzh4bDNwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sGgwDQYJKoZIhvcNAQELBQADggEBABdylah3y8yiJov1hYbXovkUZ/0UMrbXBoVy nm1Y8UJPOJ/gdaPLknr532MWPpcIZOp5kzwBzs7szv149w88Q5Dm51aFTo7kXstz 63BGFkdl1NKJnJVv9xe/k461BUcJiJ+CFsi5/r3qvm8tA9PTtw02zaYw5//iWvTW s3iQSJnp7Rgj1B6gkBagwo8zPfO86F1mKZZcZlO8ZZaBbTQ1gKs2PkCH6nMgsM2v TPfOM4r+oLSAJqls8p7sgjQUlJv4gkLr2yqKIEJGXDGEl/p/tEcY1/ez5cXfWmZo i7w3/4YDUDtcOstjn0Ccesmax9RZkeEkCTh7yuXbMat4T+U43I0= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:19 2025 by rpki-client