$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_L1__IzyUkgwzDfgL0_twTQbydU.roa File: _L1__IzyUkgwzDfgL0_twTQbydU.roa (raw, json) Hash identifier: j8yPJ5lzLC5YrY3dARPV8GuwB8PNbwQzRxdrsAuMHD8= Subject key identifier: FC:BD:7F:FC:8C:F2:52:48:30:CC:37:E0:2F:4F:ED:C1:34:1B:C9:D5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36CB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_L1__IzyUkgwzDfgL0_twTQbydU.roa Signing time: Mon 10 Feb 2025 13:54:41 +0000 ROA not before: Mon 10 Feb 2025 13:54:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14027 (0x36cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FCBD7FFC8CF2524830CC37E02F4FEDC1341BC9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:ec:16:f1:1b:c7:5a:b7:c5:9c:17:17:cc: 7c:76:b4:94:9a:4e:9f:ce:ee:83:2e:45:57:91:28: 7b:f6:d6:4e:f6:54:64:20:e1:7f:5a:dc:2a:c2:62: d2:ec:b0:4f:c3:59:84:eb:11:9a:eb:6a:66:fc:49: 6f:de:96:6b:40:df:42:b3:19:fd:81:68:4b:32:95: 57:86:db:68:84:fa:01:49:aa:69:75:7e:33:d1:9c: 84:3e:5c:82:4b:e5:a7:ad:63:2d:c7:d8:07:e5:7c: a6:21:9f:76:64:15:db:22:de:96:5b:8b:26:0d:1b: db:ca:83:22:c0:90:03:72:2f:62:b9:32:f2:fd:5f: 7e:89:2e:1c:a0:c6:0b:1b:89:18:49:99:f2:3e:49: 41:48:ec:31:5e:8e:2f:de:22:f6:9a:34:a5:86:b1: 1b:41:4d:63:e2:e0:8f:fa:c1:3c:dd:7f:69:3a:1c: 54:30:29:55:6e:ce:83:08:e7:2a:27:8c:21:3c:7e: a3:d3:c8:4f:42:38:ed:e4:08:e4:4d:42:cc:07:bb: f8:bf:4f:ba:59:ba:d2:b6:49:a7:61:01:78:ea:f6: 67:62:09:99:74:25:3e:a3:7d:ba:88:f6:28:4d:73: 9f:e0:a5:73:a3:da:9c:7e:67:2e:0b:be:b5:33:85: 1a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BD:7F:FC:8C:F2:52:48:30:CC:37:E0:2F:4F:ED:C1:34:1B:C9:D5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_L1__IzyUkgwzDfgL0_twTQbydU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.56.0/21 Signature Algorithm: sha256WithRSAEncryption b2:59:80:1d:39:0a:18:f2:77:65:c9:85:92:e2:58:55:b0:21: 7d:99:3e:a8:bc:bb:d6:63:bd:ef:ec:11:de:35:fa:a6:18:61: a2:26:a2:c9:49:cf:0b:c2:9d:fe:e4:0d:50:03:e1:f7:d1:ca: 80:ba:3c:76:3d:a4:1f:ce:07:30:9b:91:be:59:99:33:9e:69: 86:a9:d5:14:c8:2d:06:06:2a:60:ee:68:96:0a:f7:85:4b:e8: 63:e3:1a:e8:09:ac:20:2f:d8:0e:d7:7b:4b:97:35:66:9d:70: a9:89:f2:31:be:ca:c5:e6:fe:a9:1b:15:48:1b:f1:f3:18:f9: a1:6a:c1:be:0a:f2:8b:df:72:76:b9:3e:99:69:f7:6b:85:73: ee:c1:3e:37:59:a4:f9:02:a8:d6:0b:91:9c:7c:37:0a:c2:c3: ab:da:d3:7d:96:8e:4a:2b:a7:94:3d:e8:15:37:04:eb:a8:36: 48:e3:a2:30:ce:64:13:34:ca:8f:8f:73:66:7e:fd:4c:9a:8b: de:88:15:a6:db:63:b5:9b:11:ff:e1:eb:9e:4f:9e:d2:03:4d: 6a:1d:e0:c4:e0:31:55:80:33:47:6d:f0:a6:72:ab:e3:48:2e: cf:d8:44:57:dc:2f:62:fa:ea:24:7c:4b:c4:42:14:5f:8a:d8: 4a:a9:47:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDQkQ3RkZDOENGMjUy NDgzMENDMzdFMDJGNEZFREMxMzQxQkM5RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiH+wW8RvHWrfFnBcXzHx2tJSaTp/O7oMuRVeRKHv21k72VGQg 4X9a3CrCYtLssE/DWYTrEZrramb8SW/elmtA30KzGf2BaEsylVeG22iE+gFJqml1 fjPRnIQ+XIJL5aetYy3H2AflfKYhn3ZkFdsi3pZbiyYNG9vKgyLAkANyL2K5MvL9 X36JLhygxgsbiRhJmfI+SUFI7DFeji/eIvaaNKWGsRtBTWPi4I/6wTzdf2k6HFQw KVVuzoMI5yonjCE8fqPTyE9COO3kCORNQswHu/i/T7pZutK2SadhAXjq9mdiCZl0 JT6jfbqI9ihNc5/gpXOj2px+Zy4LvrUzhRprAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/L1//IzyUkgwzDfgL0/twTQbydUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19MMV9fSXp5VWtnd3pEZmdM MF90d1RRYnlkVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sDgwDQYJKoZIhvcNAQELBQADggEBALJZgB05Chjyd2XJhZLiWFWwIX2ZPqi8u9Zj ve/sEd41+qYYYaImoslJzwvCnf7kDVAD4ffRyoC6PHY9pB/OBzCbkb5ZmTOeaYap 1RTILQYGKmDuaJYK94VL6GPjGugJrCAv2A7Xe0uXNWadcKmJ8jG+ysXm/qkbFUgb 8fMY+aFqwb4K8ovfcna5Pplp92uFc+7BPjdZpPkCqNYLkZx8NwrCw6va032Wjkor p5Q96BU3BOuoNkjjojDOZBM0yo+Pc2Z+/Uyai96IFabbY7WbEf/h655PntIDTWod 4MTgMVWAM0dt8KZyq+NILs/YRFfcL2L66iR8S8RCFF+K2EqpR3Y= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:56 2025 by rpki-client