$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YqqWWdFEHZmppAQdhbB-5MB6PAw.roa File: YqqWWdFEHZmppAQdhbB-5MB6PAw.roa (raw, json) Hash identifier: A3fsr82MbqoIwtfgRmswuyZbpRUe55qYe8Xv4+c83TI= Subject key identifier: 62:AA:96:59:D1:44:1D:99:A9:A4:04:1D:85:B0:7E:E4:C0:7A:3C:0C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3375 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YqqWWdFEHZmppAQdhbB-5MB6PAw.roa Signing time: Mon 10 Feb 2025 13:51:26 +0000 ROA not before: Mon 10 Feb 2025 13:51:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13173 (0x3375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=62AA9659D1441D99A9A4041D85B07EE4C07A3C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:cb:49:3b:1a:ba:bf:ab:4b:33:a1:1a:33: 03:7a:77:29:cf:bc:f0:80:c6:ca:c7:ff:3c:49:59: 6d:7a:cf:af:84:83:30:29:12:9b:d1:0f:2b:9c:38: 2c:cf:61:69:38:d0:a7:3d:ff:f5:32:d7:62:18:2d: fe:a2:d6:65:27:58:d4:4e:27:29:59:73:84:54:fc: cc:c7:bb:0b:bb:26:d0:9c:7c:a6:0b:df:87:28:bf: 7c:d8:0d:a5:47:87:17:7a:cc:8f:28:ae:c1:05:4c: 33:e4:21:5f:a2:ca:8f:c1:29:a5:82:14:7d:f6:60: 08:35:ba:eb:9f:55:af:da:79:ab:8e:87:6e:0b:28: 53:44:ac:17:8c:e7:f0:1e:f6:0e:97:6f:b3:2f:29: 58:cf:0e:01:a5:0c:03:e4:ba:57:60:e3:b9:21:c0: d4:5d:cd:62:65:45:d4:6a:82:19:00:1c:56:6e:ba: b6:a2:d7:89:23:32:b7:b8:34:4e:d4:0c:d7:eb:2f: f6:6f:ac:8e:20:60:ca:9d:36:62:0f:63:de:b9:e1: 3a:de:da:67:f8:e4:50:ce:00:fd:c4:79:91:c3:06: ed:6d:56:b0:5a:f2:f8:ee:93:28:5d:6a:7d:35:2d: d2:d2:37:46:77:41:78:b8:f5:b3:56:e9:6e:db:76: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AA:96:59:D1:44:1D:99:A9:A4:04:1D:85:B0:7E:E4:C0:7A:3C:0C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YqqWWdFEHZmppAQdhbB-5MB6PAw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.160.0/21 Signature Algorithm: sha256WithRSAEncryption 03:53:4e:01:36:24:6c:84:41:5d:6b:04:22:60:b0:ab:81:5d: 5b:bb:59:9c:70:7a:f9:77:54:3d:d8:0b:43:86:b8:75:52:dc: 37:4a:7e:81:1c:dc:98:ed:57:32:a1:7a:3e:29:e7:f2:70:bb: 1a:50:49:2a:e2:c9:f0:7f:25:3e:f6:0a:7f:2d:46:d2:61:d5: 1c:c3:e8:03:24:7c:44:82:86:40:d4:af:47:55:05:53:61:d3: 21:75:29:3a:da:ec:6f:1e:3c:be:2a:10:da:5a:aa:19:f4:d8: 7e:11:84:bc:75:32:63:7d:6a:dd:f6:48:a0:af:05:b5:fb:9a: a9:4c:63:2e:28:f8:7e:f0:4e:ca:e8:18:6b:f7:42:66:df:0f: 7e:99:85:13:9c:f9:a5:ad:e1:0b:2a:e9:a4:2c:17:40:2d:6f: 51:d8:fe:aa:67:6e:33:8b:95:4b:eb:90:78:3f:10:45:a3:b3: 2f:cf:08:06:87:c3:b4:d6:62:9d:2d:14:e8:fe:29:45:11:94: f4:85:e1:23:5d:a6:29:93:12:dd:8e:3a:2e:c6:80:81:1d:6f: 55:f9:bf:a3:cd:c5:ba:fd:3c:d5:0e:d6:90:8e:eb:31:c4:59: 1a:bd:e2:03:62:5d:46:7d:c3:b5:6b:4c:d5:f7:c7:0b:b0:a3: dc:4b:b5:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyQUE5NjU5RDE0NDFE OTlBOUE0MDQxRDg1QjA3RUU0QzA3QTNDMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDzctJOxq6v6tLM6EaMwN6dynPvPCAxsrH/zxJWW16z6+EgzAp EpvRDyucOCzPYWk40Kc9//Uy12IYLf6i1mUnWNROJylZc4RU/MzHuwu7JtCcfKYL 34cov3zYDaVHhxd6zI8orsEFTDPkIV+iyo/BKaWCFH32YAg1uuufVa/aeauOh24L KFNErBeM5/Ae9g6Xb7MvKVjPDgGlDAPkuldg47khwNRdzWJlRdRqghkAHFZuurai 14kjMre4NE7UDNfrL/ZvrI4gYMqdNmIPY9654Tre2mf45FDOAP3EeZHDBu1tVrBa 8vjukyhdan01LdLSN0Z3QXi49bNW6W7bdusHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYqqWWdFEHZmppAQdhbB+5MB6PAwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lxcVdXZEZFSFptcHBBUWRo YkItNU1CNlBBdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sKAwDQYJKoZIhvcNAQELBQADggEBAANTTgE2JGyEQV1rBCJgsKuBXVu7WZxwevl3 VD3YC0OGuHVS3DdKfoEc3JjtVzKhej4p5/JwuxpQSSriyfB/JT72Cn8tRtJh1RzD 6AMkfESChkDUr0dVBVNh0yF1KTra7G8ePL4qENpaqhn02H4RhLx1MmN9at32SKCv BbX7mqlMYy4o+H7wTsroGGv3QmbfD36ZhROc+aWt4Qsq6aQsF0Atb1HY/qpnbjOL lUvrkHg/EEWjsy/PCAaHw7TWYp0tFOj+KUURlPSF4SNdpimTEt2OOi7GgIEdb1X5 v6PNxbr9PNUO1pCO6zHEWRq94gNiXUZ9w7VrTNX3xwuwo9xLtcs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:42 2025 by rpki-client