$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WZLfakr8atP06obxL1YwOpcFXO4.roa File: WZLfakr8atP06obxL1YwOpcFXO4.roa (raw, json) Hash identifier: RybIxwK5whp2YDpnJ7sxKdIchSf9xJHft5pkG9RXcIM= Subject key identifier: 59:92:DF:6A:4A:FC:6A:D3:F4:EA:86:F1:2F:56:30:3A:97:05:5C:EE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34B9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WZLfakr8atP06obxL1YwOpcFXO4.roa Signing time: Mon 10 Feb 2025 13:52:38 +0000 ROA not before: Mon 10 Feb 2025 13:52:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13497 (0x34b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5992DF6A4AFC6AD3F4EA86F12F56303A97055CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:e1:a4:35:53:9d:0e:f8:4a:53:65:9a:7d: be:d9:89:75:c4:1b:c3:f7:56:d8:97:c2:aa:46:39: 34:65:79:f4:02:6b:d2:4e:6c:c3:b3:f6:53:06:2a: 50:48:e7:df:f4:77:9d:10:5a:50:1a:a0:cf:80:b8: 29:60:4e:df:8b:bf:11:2f:4a:be:f4:89:4a:53:14: 26:c1:b0:94:6a:48:74:df:86:7e:4b:08:9d:5e:40: ad:ce:11:b8:78:fc:4f:9a:45:ee:d7:c4:1a:e1:04: ac:c2:0c:29:2b:9c:b5:96:6b:c8:f4:29:4d:bd:57: 33:c5:42:b9:41:e1:9d:71:25:cd:be:d6:ce:ab:29: b1:dc:4c:e5:01:94:a9:e0:82:ef:41:7e:c1:2d:3d: 91:76:18:f4:4a:ca:0b:58:06:1d:72:8a:91:0a:b1: 90:8a:32:7a:de:00:5e:82:bf:ba:f4:b5:36:ee:91: b2:6d:32:af:68:24:9e:34:e0:d3:e4:88:64:1d:73: 5a:65:c2:cc:e5:f6:83:e0:d5:77:17:b7:33:5a:ac: 20:49:d1:40:16:87:da:8e:54:4d:fb:8c:9f:4d:6f: 3c:ac:28:f4:7c:27:e6:20:67:dc:38:a5:f8:e6:a7: 5a:c8:2f:bf:8c:fc:8b:21:9a:b5:ee:e9:50:80:53: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:92:DF:6A:4A:FC:6A:D3:F4:EA:86:F1:2F:56:30:3A:97:05:5C:EE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WZLfakr8atP06obxL1YwOpcFXO4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.192.0/22 Signature Algorithm: sha256WithRSAEncryption 99:de:e8:d9:5d:73:6e:99:05:fe:a4:a6:8e:62:4e:27:fd:bc: 04:db:22:69:7a:d8:ac:e0:3f:6c:06:7c:c5:eb:5d:23:dc:e4: 66:b5:32:91:63:df:6e:47:16:96:6c:96:6b:5d:97:df:33:39: ea:d6:e3:6b:11:bb:55:56:b3:6a:b8:b8:3d:c7:39:1f:b3:3d: c0:e4:7b:d3:5b:c9:a1:f0:ff:98:81:df:f9:35:a4:a8:98:33: c4:07:62:36:d0:4d:c4:d0:31:01:f8:4b:5f:6d:e0:34:cf:9f: ea:b4:b3:17:ea:49:31:68:c6:19:40:09:10:79:f1:3d:eb:12: 6a:c7:e4:c8:94:ae:71:6d:e3:cf:9a:61:e2:41:75:2a:dd:5e: 58:c1:99:54:8c:e6:0d:03:28:11:5f:5f:e5:67:d2:01:66:e7: 24:8b:fa:e4:87:54:71:80:91:0b:e2:a5:21:fc:0e:2a:29:24: 46:62:01:3b:71:20:08:cd:dc:b2:d0:aa:bc:a9:f7:41:85:94: b9:5d:cc:77:43:99:fc:21:75:0d:a0:73:41:0f:3e:98:56:47: a5:9d:d2:c8:40:9a:8d:81:5c:b7:6b:1b:2e:10:ca:07:41:9b: aa:19:80:f4:b2:4a:bf:78:6b:7c:97:f5:12:71:1b:71:a6:97: 05:85:c0:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU5OTJERjZBNEFGQzZB RDNGNEVBODZGMTJGNTYzMDNBOTcwNTVDRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNBOGkNVOdDvhKU2Wafb7ZiXXEG8P3VtiXwqpGOTRlefQCa9JO bMOz9lMGKlBI59/0d50QWlAaoM+AuClgTt+LvxEvSr70iUpTFCbBsJRqSHTfhn5L CJ1eQK3OEbh4/E+aRe7XxBrhBKzCDCkrnLWWa8j0KU29VzPFQrlB4Z1xJc2+1s6r KbHcTOUBlKnggu9BfsEtPZF2GPRKygtYBh1yipEKsZCKMnreAF6Cv7r0tTbukbJt Mq9oJJ404NPkiGQdc1plwszl9oPg1XcXtzNarCBJ0UAWh9qOVE37jJ9NbzysKPR8 J+YgZ9w4pfjmp1rIL7+M/IshmrXu6VCAU7dxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWZLfakr8atP06obxL1YwOpcFXO4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1daTGZha3I4YXRQMDZvYnhM MVl3T3BjRlhPNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sMAwDQYJKoZIhvcNAQELBQADggEBAJne6Nldc26ZBf6kpo5iTif9vATbIml62Kzg P2wGfMXrXSPc5Ga1MpFj325HFpZslmtdl98zOerW42sRu1VWs2q4uD3HOR+zPcDk e9NbyaHw/5iB3/k1pKiYM8QHYjbQTcTQMQH4S19t4DTPn+q0sxfqSTFoxhlACRB5 8T3rEmrH5MiUrnFt48+aYeJBdSrdXljBmVSM5g0DKBFfX+Vn0gFm5ySL+uSHVHGA kQvipSH8DiopJEZiATtxIAjN3LLQqryp90GFlLldzHdDmfwhdQ2gc0EPPphWR6Wd 0shAmo2BXLdrGy4QygdBm6oZgPSySr94a3yX9RJxG3GmlwWFwIA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:23 2025 by rpki-client