$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZwH7u9oRnhHzEVLHhio_7Mfce50.roa File: ZwH7u9oRnhHzEVLHhio_7Mfce50.roa (raw, json) Hash identifier: 6bA6nFhaw1IyQ6zOzy03AMGzf0+s58IcMX96xR3hBa8= Subject key identifier: 67:01:FB:BB:DA:11:9E:11:F3:11:52:C7:86:2A:3F:EC:C7:DC:7B:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33B4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZwH7u9oRnhHzEVLHhio_7Mfce50.roa Signing time: Mon 10 Feb 2025 13:51:41 +0000 ROA not before: Mon 10 Feb 2025 13:51:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13236 (0x33b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6701FBBBDA119E11F31152C7862A3FECC7DC7B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:92:ff:30:3c:93:38:93:5d:47:4c:9c:2d: 4b:99:bb:7f:3d:6c:65:48:fe:d1:ef:7f:09:4c:fb: 00:a2:74:a1:d2:33:48:5a:3f:f7:d1:6f:58:e5:76: 5b:f8:a7:52:07:61:d7:40:12:0d:71:df:07:f7:d8: 28:d7:57:46:07:d5:56:0d:15:fb:15:22:15:39:69: 38:b1:65:4c:a4:cc:ea:07:f8:13:46:2a:ed:f4:f6: 2e:5b:1e:0b:c8:ff:47:92:83:93:8a:cd:8c:f2:44: b3:9a:a0:cb:16:d7:4f:b1:f0:4f:b2:07:7b:80:6f: 0c:02:4c:68:ee:08:e5:c0:50:9d:d8:f2:53:12:c6: c6:16:92:dd:bf:93:0d:24:c2:b0:09:c9:fa:46:f0: e2:b3:69:35:6b:e6:fa:62:fd:3c:0c:1c:a9:ea:32: 8e:69:55:0b:49:eb:e1:34:1c:08:97:bc:36:9f:b3: 11:b3:6d:2d:95:bd:89:f4:3b:53:3a:b9:f4:fc:1e: 58:a4:0c:c1:4b:cd:18:b7:af:5c:5e:27:7d:37:c2: dd:31:11:bb:12:00:25:9d:93:0a:28:44:12:80:d4: 1f:97:4d:57:ed:30:83:a2:e4:3b:08:9a:81:82:98: c2:99:49:14:64:6e:a5:24:36:a0:79:30:f2:16:f1: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:FB:BB:DA:11:9E:11:F3:11:52:C7:86:2A:3F:EC:C7:DC:7B:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZwH7u9oRnhHzEVLHhio_7Mfce50.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.176.0/21 Signature Algorithm: sha256WithRSAEncryption 10:7b:31:56:fc:8e:1c:1d:fb:9b:8c:d2:b5:57:81:31:9d:cd: 87:98:ea:75:07:a9:93:11:c0:34:4c:5b:af:8d:b0:e5:7c:3c: b2:64:9b:6b:ca:cf:a1:66:46:85:8f:6d:92:d0:9a:02:55:82: da:eb:aa:56:46:45:ab:21:32:84:34:b0:ce:cb:1d:8a:5a:23: df:5e:e6:f9:9d:dd:a4:d7:bb:55:dc:2f:31:76:a6:b3:b9:46: 90:9b:ad:3f:5f:2f:65:83:4c:b5:f1:ac:a0:e2:d3:fe:85:83: ef:b9:01:50:a5:12:5f:28:2b:8e:7e:a1:cb:e0:ff:da:1c:d0: 71:9f:55:74:3e:a2:6a:ed:89:32:76:5a:da:59:11:16:07:7e: 35:ca:66:86:ee:cc:5d:db:b4:c8:29:9a:ae:ea:28:79:37:8b: 70:1d:f0:00:88:59:aa:d9:44:1e:cf:c3:7c:c8:9b:4d:31:d7: cb:27:ce:0d:c5:93:3a:38:ba:80:ba:b8:6b:15:f7:42:87:22: 57:f0:f0:1f:34:0a:dc:dc:d9:35:d7:35:52:63:4d:8c:88:26: 99:9c:41:dd:68:ec:a5:ef:17:08:5e:aa:1a:66:44:40:ee:93: 2e:6e:a1:c5:8d:78:34:f4:c4:88:ed:ae:07:fb:ad:60:3f:a7: 59:8e:cc:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM7QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY3MDFGQkJCREExMTlF MTFGMzExNTJDNzg2MkEzRkVDQzdEQzdCOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ6pL/MDyTOJNdR0ycLUuZu389bGVI/tHvfwlM+wCidKHSM0ha P/fRb1jldlv4p1IHYddAEg1x3wf32CjXV0YH1VYNFfsVIhU5aTixZUykzOoH+BNG Ku309i5bHgvI/0eSg5OKzYzyRLOaoMsW10+x8E+yB3uAbwwCTGjuCOXAUJ3Y8lMS xsYWkt2/kw0kwrAJyfpG8OKzaTVr5vpi/TwMHKnqMo5pVQtJ6+E0HAiXvDafsxGz bS2VvYn0O1M6ufT8HlikDMFLzRi3r1xeJ303wt0xEbsSACWdkwooRBKA1B+XTVft MIOi5DsImoGCmMKZSRRkbqUkNqB5MPIW8b+TAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZwH7u9oRnhHzEVLHhio/7Mfce50wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1p3SDd1OW9SbmhIekVWTEho aW9fN01mY2U1MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sLAwDQYJKoZIhvcNAQELBQADggEBABB7MVb8jhwd+5uM0rVXgTGdzYeY6nUHqZMR wDRMW6+NsOV8PLJkm2vKz6FmRoWPbZLQmgJVgtrrqlZGRashMoQ0sM7LHYpaI99e 5vmd3aTXu1XcLzF2prO5RpCbrT9fL2WDTLXxrKDi0/6Fg++5AVClEl8oK45+ocvg /9oc0HGfVXQ+omrtiTJ2WtpZERYHfjXKZobuzF3btMgpmq7qKHk3i3Ad8ACIWarZ RB7Pw3zIm00x18snzg3Fkzo4uoC6uGsV90KHIlfw8B80Ctzc2TXXNVJjTYyIJpmc Qd1o7KXvFwheqhpmREDuky5uocWNeDT0xIjtrgf7rWA/p1mOzAA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:44 2025 by rpki-client