$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QI8iz2eM17l3SLnpv7oVyLV_vWY.roa File: QI8iz2eM17l3SLnpv7oVyLV_vWY.roa (raw, json) Hash identifier: WV4oOHOEga9PkV4O/GGgGObH6TfaxQjAyBrfPSWizHQ= Subject key identifier: 40:8F:22:CF:67:8C:D7:B9:77:48:B9:E9:BF:BA:15:C8:B5:7F:BD:66 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33CB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QI8iz2eM17l3SLnpv7oVyLV_vWY.roa Signing time: Mon 10 Feb 2025 13:51:47 +0000 ROA not before: Mon 10 Feb 2025 13:51:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.208.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13259 (0x33cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=408F22CF678CD7B97748B9E9BFBA15C8B57FBD66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:da:9c:e8:62:a6:98:de:de:da:da:bc:69: e7:41:36:93:8f:96:36:dc:93:a3:cd:e9:e0:ae:f6: 6c:29:c4:7d:8c:84:48:a0:f7:9b:d3:12:e9:5f:bb: 6b:04:4d:c1:80:1b:77:07:ed:5b:c8:48:eb:f7:03: b1:b7:33:54:f9:53:6c:6c:2b:6a:77:39:7e:2e:cd: 0f:da:ef:27:a1:0b:84:f2:e4:0e:4e:e0:e5:35:95: d0:3e:e7:4f:a6:e8:fc:f0:c1:7c:a7:3b:1e:2d:6b: 78:a0:4c:b5:5a:69:1a:85:1e:6c:40:fb:0e:c3:3c: 4c:83:d5:e2:c6:78:6f:06:2b:69:d9:7e:5c:4e:e8: 03:0c:48:5c:07:ee:d5:45:1f:31:7f:88:a3:b3:dc: 98:47:db:74:9b:2b:07:f3:03:63:ba:7f:2e:a2:51: f1:5c:53:2d:66:94:5d:a2:aa:a5:70:31:cb:89:78: 94:3c:7e:03:a6:07:28:fc:cb:cf:f9:e3:a6:ed:56: eb:04:3a:56:6c:45:9e:da:30:59:f7:41:9c:e1:c7: 64:3d:57:db:44:0a:ef:d6:02:59:19:ba:f6:7b:f6: 53:65:45:51:ba:e2:43:47:76:96:c7:30:f2:95:35: 1f:9c:49:21:58:55:95:38:6e:57:bb:76:0e:11:b3: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8F:22:CF:67:8C:D7:B9:77:48:B9:E9:BF:BA:15:C8:B5:7F:BD:66 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QI8iz2eM17l3SLnpv7oVyLV_vWY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.208.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:ba:e2:93:2b:b7:9f:2b:80:e9:42:b8:03:91:df:db:d3:2c: 72:7c:6b:de:94:94:15:28:3c:b9:7b:26:5a:b7:cf:d1:54:6c: 52:dc:1d:bb:7a:c3:8b:c3:5b:f9:a9:d0:8a:a6:c2:61:ec:b0: a5:0c:91:11:09:42:60:a3:56:8b:c9:76:20:15:59:5c:08:fc: 2e:54:2a:df:df:99:be:18:d4:4f:6a:52:80:dc:3b:aa:e8:04: 83:02:68:9d:65:a6:29:5f:b1:72:7f:89:01:07:e2:f0:5b:72: ec:b2:08:41:7b:70:1d:63:20:c0:a1:32:a1:cc:bf:95:50:53: 80:2e:44:e5:d2:34:2a:02:93:ea:2b:47:86:3f:f6:21:83:14: 39:f5:53:e0:e4:b5:e8:b3:05:94:34:7c:6e:8d:c4:48:0b:ca: 75:a9:b4:d8:6d:ff:71:0c:53:c0:53:0a:47:f8:ef:f7:f7:48: 68:e2:7b:aa:01:4e:23:d5:ce:9c:4b:6d:65:24:f7:c8:b7:c0: 8f:c0:af:fb:fb:d0:b6:2a:c8:15:73:19:4d:9f:c7:35:11:07: f0:c9:2f:da:af:09:62:8f:59:07:ad:77:ce:b6:41:67:eb:8c: 48:e7:df:92:4c:29:78:a3:7a:62:0f:b9:ff:72:bb:2a:a4:83: ce:9a:a2:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwOEYyMkNGNjc4Q0Q3 Qjk3NzQ4QjlFOUJGQkExNUM4QjU3RkJENjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWU9qc6GKmmN7e2tq8aedBNpOPljbck6PN6eCu9mwpxH2MhEig 95vTEulfu2sETcGAG3cH7VvISOv3A7G3M1T5U2xsK2p3OX4uzQ/a7yehC4Ty5A5O 4OU1ldA+50+m6PzwwXynOx4ta3igTLVaaRqFHmxA+w7DPEyD1eLGeG8GK2nZflxO 6AMMSFwH7tVFHzF/iKOz3JhH23SbKwfzA2O6fy6iUfFcUy1mlF2iqqVwMcuJeJQ8 fgOmByj8y8/546btVusEOlZsRZ7aMFn3QZzhx2Q9V9tECu/WAlkZuvZ79lNlRVG6 4kNHdpbHMPKVNR+cSSFYVZU4ble7dg4Rs8M1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQI8iz2eM17l3SLnpv7oVyLV/vWYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FJOGl6MmVNMTdsM1NMbnB2 N29WeUxWX3ZXWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sdAwDQYJKoZIhvcNAQELBQADggEBAI+64pMrt58rgOlCuAOR39vTLHJ8a96UlBUo PLl7Jlq3z9FUbFLcHbt6w4vDW/mp0IqmwmHssKUMkREJQmCjVovJdiAVWVwI/C5U Kt/fmb4Y1E9qUoDcO6roBIMCaJ1lpilfsXJ/iQEH4vBbcuyyCEF7cB1jIMChMqHM v5VQU4AuROXSNCoCk+orR4Y/9iGDFDn1U+DkteizBZQ0fG6NxEgLynWptNht/3EM U8BTCkf47/f3SGjie6oBTiPVzpxLbWUk98i3wI/Ar/v70LYqyBVzGU2fxzURB/DJ L9qvCWKPWQetd862QWfrjEjn35JMKXijemIPuf9yuyqkg86aokk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:23 2025 by rpki-client