$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YpCqFOPmr98u7EvXJBGo4at3Uzs.roa File: YpCqFOPmr98u7EvXJBGo4at3Uzs.roa (raw, json) Hash identifier: zMhNpYlkAevZ0vF1pvayodIupKe0gHzIe0Y0GFmHOck= Subject key identifier: 62:90:AA:14:E3:E6:AF:DF:2E:EC:4B:D7:24:11:A8:E1:AB:77:53:3B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34AE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YpCqFOPmr98u7EvXJBGo4at3Uzs.roa Signing time: Mon 10 Feb 2025 13:52:37 +0000 ROA not before: Mon 10 Feb 2025 13:52:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6290AA14E3E6AFDF2EEC4BD72411A8E1AB77533B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:98:01:d7:5f:d2:2c:93:a2:64:52:c9:c3: 9f:c6:79:83:d9:01:57:87:18:b7:e5:ea:09:8f:8a: 01:e3:51:4e:d0:06:10:bc:ba:fa:9b:eb:43:95:b8: 62:aa:38:76:ab:7e:90:2d:f5:99:0b:e4:ef:ec:e8: 7e:de:73:f5:44:57:06:2f:63:7a:bd:b1:04:78:eb: 91:6e:d5:af:5b:32:2f:f6:ad:0a:5e:04:69:15:fa: 9c:a9:58:72:57:22:ff:9b:6b:27:18:9e:3e:42:1f: cc:b3:4d:f5:76:3d:23:25:29:84:86:06:97:2c:1f: 03:38:fa:dd:09:c9:c8:00:bb:97:37:cf:a9:96:15: 3c:95:23:6a:19:89:61:ca:a5:a2:81:c6:b6:eb:9b: a7:92:4d:d3:dd:16:6d:2f:91:d0:b4:9e:ef:73:cb: ef:8e:06:26:ac:a0:d8:91:1f:6a:d4:e7:74:dd:c6: 6f:f2:26:23:a5:2f:3e:6c:eb:a2:66:b6:6d:e9:d7: 46:79:47:52:c0:81:bb:74:2c:a2:a3:b3:1a:34:2c: 81:34:31:fd:04:d0:08:59:6b:0e:2f:44:49:86:c5: fb:f6:ef:da:99:4c:4a:83:b1:7e:e9:c3:04:f0:36: d2:5f:af:4f:cc:4e:0f:8c:c8:a4:a4:0c:1e:f6:d6: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:90:AA:14:E3:E6:AF:DF:2E:EC:4B:D7:24:11:A8:E1:AB:77:53:3B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YpCqFOPmr98u7EvXJBGo4at3Uzs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.232.0/21 Signature Algorithm: sha256WithRSAEncryption 33:57:97:3e:9b:b6:26:07:35:f9:6c:d7:94:1f:cc:a5:71:92: 68:39:32:b0:83:e3:37:66:2d:47:29:07:e4:06:d9:0b:e0:24: f6:0d:0e:be:13:b4:d0:4d:b5:e6:13:eb:5b:8f:93:d3:5e:72: 97:00:a2:a1:ad:66:48:fe:fc:e8:7d:0f:23:7a:89:c7:c1:50: 71:34:85:41:13:ca:9c:2f:10:93:9d:62:38:3a:00:5a:d1:be: e6:3e:2c:72:99:b9:43:6e:dc:f8:ea:03:48:88:8d:69:ef:f1: 34:3a:22:45:30:02:75:64:a6:1b:ed:78:5a:b0:41:60:5b:5b: 3a:23:d3:e8:64:e1:a3:39:c8:c6:2d:e2:d2:ba:12:9a:45:87: 95:b4:9d:e4:c1:8f:32:c2:34:77:a1:77:6d:2c:07:0e:14:28: 39:d7:f2:1f:f2:d4:70:d5:11:26:71:42:ae:d9:c0:a6:e7:0b: 07:e0:ce:e7:a0:90:24:97:47:1a:69:10:9a:43:c6:4d:04:65: 2b:0c:d2:ca:31:2a:44:10:9c:78:b8:e1:be:df:16:fa:9a:34: fd:90:93:53:c9:28:39:44:59:f6:dc:60:ea:51:5b:4b:d1:9d: c7:89:ef:48:b6:63:4d:6e:74:15:e0:1d:bb:b3:1d:9f:a4:9c: f3:45:99:09 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyOTBBQTE0RTNFNkFG REYyRUVDNEJENzI0MTFBOEUxQUI3NzUzM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkQpgB11/SLJOiZFLJw5/GeYPZAVeHGLfl6gmPigHjUU7QBhC8 uvqb60OVuGKqOHarfpAt9ZkL5O/s6H7ec/VEVwYvY3q9sQR465Fu1a9bMi/2rQpe BGkV+pypWHJXIv+baycYnj5CH8yzTfV2PSMlKYSGBpcsHwM4+t0JycgAu5c3z6mW FTyVI2oZiWHKpaKBxrbrm6eSTdPdFm0vkdC0nu9zy++OBiasoNiRH2rU53Tdxm/y JiOlLz5s66Jmtm3p10Z5R1LAgbt0LKKjsxo0LIE0Mf0E0AhZaw4vREmGxfv279qZ TEqDsX7pwwTwNtJfr0/MTg+MyKSkDB721h7HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYpCqFOPmr98u7EvXJBGo4at3UzswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lwQ3FGT1Btcjk4dTdFdlhK QkdvNGF0M1V6cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sOgwDQYJKoZIhvcNAQELBQADggEBADNXlz6btiYHNfls15QfzKVxkmg5MrCD4zdm LUcpB+QG2QvgJPYNDr4TtNBNteYT61uPk9NecpcAoqGtZkj+/Oh9DyN6icfBUHE0 hUETypwvEJOdYjg6AFrRvuY+LHKZuUNu3PjqA0iIjWnv8TQ6IkUwAnVkphvteFqw QWBbWzoj0+hk4aM5yMYt4tK6EppFh5W0neTBjzLCNHehd20sBw4UKDnX8h/y1HDV ESZxQq7ZwKbnCwfgzuegkCSXRxppEJpDxk0EZSsM0soxKkQQnHi44b7fFvqaNP2Q k1PJKDlEWfbcYOpRW0vRnceJ70i2Y01udBXgHbuzHZ+knPNFmQk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:27 2025 by rpki-client