$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YeFi0dlMg18KJtdsWY9oRRNAu08.roa File: YeFi0dlMg18KJtdsWY9oRRNAu08.roa (raw, json) Hash identifier: VK1nLQ2eqs0Mij5tBTFDEIfa1vHQ4S7iOg/CG+wkVWg= Subject key identifier: 61:E1:62:D1:D9:4C:83:5F:0A:26:D7:6C:59:8F:68:45:13:40:BB:4F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35FC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YeFi0dlMg18KJtdsWY9oRRNAu08.roa Signing time: Mon 10 Feb 2025 13:53:53 +0000 ROA not before: Mon 10 Feb 2025 13:53:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13820 (0x35fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=61E162D1D94C835F0A26D76C598F68451340BB4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a6:6e:74:5d:63:95:48:87:47:bc:d5:d7:7c: 9b:ef:ba:99:30:55:41:14:ba:fa:81:b1:cd:16:17: b6:c4:da:c5:72:80:73:10:3f:39:df:39:2f:54:e5: 7c:79:88:eb:20:40:4a:8b:b0:be:b7:7e:b7:bd:6e: 1f:21:99:33:be:12:dd:df:6f:0a:ac:3c:f4:08:90: a1:71:f7:83:79:a7:77:ae:9c:68:e9:74:1b:d8:f3: c0:58:c7:4d:fd:44:88:7f:28:19:4d:d0:d6:61:e6: 0a:61:36:21:09:59:6e:ca:00:06:47:63:b9:e0:30: f7:80:28:fb:9d:d8:8e:9f:20:b9:c8:47:f7:70:ac: 1e:76:cd:69:99:2e:9b:25:00:8c:4e:a2:44:cb:bd: 67:22:5d:9c:7d:b3:5f:1f:74:3a:3e:2b:53:22:ce: ec:e1:63:79:cf:0c:7f:c9:16:da:6a:23:ed:6a:85: 1f:1c:3a:1f:a6:40:69:72:44:a8:81:f9:b8:aa:4b: af:d3:ca:51:55:b5:fa:07:99:21:68:8c:f4:8b:69: ca:3c:22:a0:7a:29:c2:45:a1:b2:d7:13:92:ad:da: ef:f9:95:33:6a:c1:9b:39:2c:88:2f:a3:ad:e2:8c: 88:3d:10:28:95:71:b4:b6:9a:f7:6f:aa:94:28:fd: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E1:62:D1:D9:4C:83:5F:0A:26:D7:6C:59:8F:68:45:13:40:BB:4F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YeFi0dlMg18KJtdsWY9oRRNAu08.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.232.0/23 Signature Algorithm: sha256WithRSAEncryption 56:e0:83:96:c5:c8:9e:f7:09:ed:09:42:7d:58:1b:aa:37:70: a8:85:7c:a5:da:fb:1d:a0:41:48:05:1f:16:93:3e:52:c3:f7: 9d:a2:ec:7c:4e:f4:13:74:0e:eb:f9:04:53:3e:8a:45:11:07: 75:23:88:bc:25:21:04:fc:6d:4c:38:4e:f4:82:a5:db:c2:93: e4:d0:65:9b:e9:34:94:36:d6:7d:f8:79:a2:d0:e5:5f:41:33: 02:8d:17:9d:57:25:cd:3e:dc:9f:76:47:fe:4c:e1:d6:76:20: 65:ee:6d:1f:65:52:1d:da:83:0b:39:64:8b:b3:1a:d2:9b:9d: 75:a0:47:de:46:46:ae:1a:51:a8:09:90:c0:10:73:fa:12:9e: 5a:3c:36:18:20:4a:15:1b:39:29:b0:ab:3d:ed:46:a8:42:38: b0:62:37:d9:a2:da:7b:d9:6b:eb:12:20:0f:e2:42:41:bf:a3: 17:63:44:97:ab:96:aa:a9:b0:38:a2:90:35:7d:3d:63:d2:92: ed:89:e5:df:3b:db:57:53:a4:3e:d5:b7:a3:58:a4:a9:b6:7f: f4:8d:f3:7e:99:ed:2a:f0:cb:aa:12:37:6f:08:6e:cf:ff:60: e9:ba:17:b0:4d:a5:46:7d:4b:bc:c1:f1:b5:64:8b:85:2a:e6: 60:6f:fd:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxRTE2MkQxRDk0Qzgz NUYwQTI2RDc2QzU5OEY2ODQ1MTM0MEJCNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYpm50XWOVSIdHvNXXfJvvupkwVUEUuvqBsc0WF7bE2sVygHMQ PznfOS9U5Xx5iOsgQEqLsL63fre9bh8hmTO+Et3fbwqsPPQIkKFx94N5p3eunGjp dBvY88BYx039RIh/KBlN0NZh5gphNiEJWW7KAAZHY7ngMPeAKPud2I6fILnIR/dw rB52zWmZLpslAIxOokTLvWciXZx9s18fdDo+K1MizuzhY3nPDH/JFtpqI+1qhR8c Oh+mQGlyRKiB+biqS6/TylFVtfoHmSFojPSLaco8IqB6KcJFobLXE5Kt2u/5lTNq wZs5LIgvo63ijIg9ECiVcbS2mvdvqpQo/ccVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYeFi0dlMg18KJtdsWY9oRRNAu08wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1llRmkwZGxNZzE4S0p0ZHNX WTlvUlJOQXUwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 segwDQYJKoZIhvcNAQELBQADggEBAFbgg5bFyJ73Ce0JQn1YG6o3cKiFfKXa+x2g QUgFHxaTPlLD952i7HxO9BN0Duv5BFM+ikURB3UjiLwlIQT8bUw4TvSCpdvCk+TQ ZZvpNJQ21n34eaLQ5V9BMwKNF51XJc0+3J92R/5M4dZ2IGXubR9lUh3agws5ZIuz GtKbnXWgR95GRq4aUagJkMAQc/oSnlo8NhggShUbOSmwqz3tRqhCOLBiN9mi2nvZ a+sSIA/iQkG/oxdjRJerlqqpsDiikDV9PWPSku2J5d8721dTpD7Vt6NYpKm2f/SN 836Z7Srwy6oSN28Ibs//YOm6F7BNpUZ9S7zB8bVki4Uq5mBv/f4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:10:46 2025 by rpki-client