$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YT2xQw7aU1BDsdwhTdG4Z2x2H9c.roa File: YT2xQw7aU1BDsdwhTdG4Z2x2H9c.roa (raw, json) Hash identifier: IwO9+OCZ0bJY/+7I8vx0sNJLIsZ57rats1U2qMacsSg= Subject key identifier: 61:3D:B1:43:0E:DA:53:50:43:B1:DC:21:4D:D1:B8:67:6C:76:1F:D7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 363F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YT2xQw7aU1BDsdwhTdG4Z2x2H9c.roa Signing time: Mon 10 Feb 2025 13:54:08 +0000 ROA not before: Mon 10 Feb 2025 13:54:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13887 (0x363f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=613DB1430EDA535043B1DC214DD1B8676C761FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:9f:69:20:c7:33:46:f3:b6:b0:94:a8:72: a8:de:c3:85:d9:6e:d3:ac:44:0b:cb:83:df:74:a2: e8:52:8b:0e:f5:3f:50:12:d8:e4:2a:1f:99:fd:14: 05:0d:8e:d7:df:91:3e:01:53:fe:fc:d0:ef:fb:2f: ff:60:13:1a:e1:3c:48:cf:b0:b4:02:ca:bb:3f:09: 67:cf:7e:1f:9b:e6:e9:3a:dd:a0:79:1b:85:15:ef: 88:27:81:3e:02:f1:55:7d:d7:a5:d5:ae:78:94:d3: 44:8d:9a:35:6c:7c:60:e0:07:64:22:4e:d0:67:38: 79:80:1f:82:be:4b:33:d5:06:d9:de:59:1b:52:ef: e8:64:dc:c3:1d:92:b5:e3:10:c5:8b:67:21:50:b1: 7a:5d:a4:57:b4:74:13:3e:c0:f1:97:da:1f:f9:5d: 1e:0e:ce:1b:68:3f:76:32:6f:49:2b:54:4c:1d:15: a6:0e:b8:95:58:bb:68:e7:a3:d8:46:9f:63:95:aa: 87:fe:c8:dd:cc:d3:5d:17:9f:09:2f:ea:fe:e5:2e: 51:b1:6d:3a:33:fa:a7:a1:78:4b:28:aa:0c:70:1d: 8a:89:56:73:d9:91:64:c3:1f:52:3e:6e:09:65:11: 49:76:d9:94:b8:73:b4:65:f0:45:7d:7f:39:35:8a: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3D:B1:43:0E:DA:53:50:43:B1:DC:21:4D:D1:B8:67:6C:76:1F:D7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YT2xQw7aU1BDsdwhTdG4Z2x2H9c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.88.0/22 Signature Algorithm: sha256WithRSAEncryption 18:f7:37:f7:bc:10:5f:90:b4:d6:fd:1d:c4:62:dc:ef:51:e7: bf:5d:72:d1:90:69:db:58:db:66:e7:99:f5:03:1c:10:19:06: 87:d6:2f:09:10:4b:c1:e4:11:5f:8c:5f:d1:67:74:f4:14:1a: 16:b2:7e:47:f2:d9:6e:57:16:ca:15:86:c1:8e:f9:61:31:fb: 98:74:af:46:17:6c:20:93:57:4c:9f:ce:c4:5e:82:7b:01:d1: 8c:11:12:b2:e2:5d:54:27:c8:61:87:bf:40:3a:9a:eb:dc:ee: 18:2e:73:ac:f3:51:6c:71:4f:66:6d:8e:d6:15:0c:d3:50:1e: cb:66:c5:bd:40:09:ed:ba:d9:22:7a:fe:2c:40:5e:b1:0f:ea: 68:4d:9c:23:3d:6d:e3:ce:5d:fd:eb:ea:75:4c:ab:20:65:79: cb:0c:6b:66:24:e7:d2:69:ad:0c:d0:23:23:96:ab:2b:41:ef: 7c:5d:d8:8b:41:76:68:8d:86:4b:6c:8e:b5:71:00:d1:81:4a: 4c:f3:04:2b:a5:0f:3b:25:a3:f9:cb:5d:37:ac:9a:31:a2:f6: fd:a3:90:cf:80:9b:e0:f5:37:22:e5:af:49:1e:d4:9a:f6:fd: 86:d6:2b:82:0e:c5:91:fc:b4:a6:de:a3:59:1c:d2:c9:7c:6d: 8e:52:f3:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxM0RCMTQzMEVEQTUz NTA0M0IxREMyMTRERDFCODY3NkM3NjFGRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyz59pIMczRvO2sJSocqjew4XZbtOsRAvLg990ouhSiw71P1AS 2OQqH5n9FAUNjtffkT4BU/780O/7L/9gExrhPEjPsLQCyrs/CWfPfh+b5uk63aB5 G4UV74gngT4C8VV916XVrniU00SNmjVsfGDgB2QiTtBnOHmAH4K+SzPVBtneWRtS 7+hk3MMdkrXjEMWLZyFQsXpdpFe0dBM+wPGX2h/5XR4OzhtoP3Yyb0krVEwdFaYO uJVYu2jno9hGn2OVqof+yN3M010Xnwkv6v7lLlGxbToz+qeheEsoqgxwHYqJVnPZ kWTDH1I+bgllEUl22ZS4c7Rl8EV9fzk1ii6bAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYT2xQw7aU1BDsdwhTdG4Z2x2H9cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lUMnhRdzdhVTFCRHNkd2hU ZEc0WjJ4Mkg5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sVgwDQYJKoZIhvcNAQELBQADggEBABj3N/e8EF+QtNb9HcRi3O9R579dctGQadtY 22bnmfUDHBAZBofWLwkQS8HkEV+MX9FndPQUGhayfkfy2W5XFsoVhsGO+WEx+5h0 r0YXbCCTV0yfzsRegnsB0YwRErLiXVQnyGGHv0A6muvc7hguc6zzUWxxT2ZtjtYV DNNQHstmxb1ACe262SJ6/ixAXrEP6mhNnCM9bePOXf3r6nVMqyBlecsMa2Yk59Jp rQzQIyOWqytB73xd2ItBdmiNhktsjrVxANGBSkzzBCulDzslo/nLXTesmjGi9v2j kM+Am+D1NyLlr0ke1Jr2/YbWK4IOxZH8tKbeo1kc0sl8bY5S84Q= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:32 2025 by rpki-client