$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cMJvivh6AlgqZ2PjLiEPaqUydDg.roa File: cMJvivh6AlgqZ2PjLiEPaqUydDg.roa (raw, json) Hash identifier: EI4Uqctt+kF4jq0X7+6PTBnKoa588MU5e+XrgonsCuM= Subject key identifier: 70:C2:6F:8A:F8:7A:02:58:2A:67:63:E3:2E:21:0F:6A:A5:32:74:38 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 349C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cMJvivh6AlgqZ2PjLiEPaqUydDg.roa Signing time: Mon 10 Feb 2025 13:52:33 +0000 ROA not before: Mon 10 Feb 2025 13:52:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=70C26F8AF87A02582A6763E32E210F6AA5327438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:3b:86:6f:ca:23:6f:a5:8e:a9:e5:0d:dd: 56:68:96:fc:fc:4b:40:c6:f3:e5:59:e8:8d:f4:43: 60:68:81:88:c4:3c:09:1d:db:0f:0d:52:bb:c3:a7: c5:df:1f:1f:d2:cd:c5:26:df:14:f0:80:e0:df:28: c8:25:d7:f8:a4:b0:5c:6d:3b:14:34:a9:f8:b8:57: 02:0d:c2:32:95:80:8f:fd:e5:0d:eb:b8:cf:bf:2c: b6:ee:bb:14:9a:3e:52:66:0b:3b:19:e0:e7:73:30: a4:bd:bc:6c:b3:55:f3:1a:d3:05:e4:08:4e:06:a9: ef:a2:18:07:10:f2:f9:02:77:4f:63:e0:8b:50:a1: 80:b8:02:09:d8:d1:46:3a:e7:71:90:99:24:61:ad: c2:33:6b:34:50:9e:b2:7d:7f:cd:95:35:4a:4e:81: 65:e7:b1:47:90:5a:c6:2c:34:ac:d8:2a:3b:09:7d: b5:ed:7d:9d:99:f5:8d:4e:e3:51:32:b8:0d:ea:c0: 50:9c:8c:34:c4:aa:e6:d6:d3:1d:13:85:8f:56:64: 7c:c8:f3:b2:09:e5:46:f8:0c:67:17:e2:dd:a8:79: a3:30:01:6b:15:a6:54:22:ad:b0:f6:90:47:ff:f6: e8:4a:90:e4:44:17:7f:3d:db:d8:a8:e4:d4:3e:64: 8e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C2:6F:8A:F8:7A:02:58:2A:67:63:E3:2E:21:0F:6A:A5:32:74:38 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cMJvivh6AlgqZ2PjLiEPaqUydDg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.230.0/23 Signature Algorithm: sha256WithRSAEncryption 94:c6:9c:84:fe:70:1a:9f:b9:27:20:e2:3e:32:c3:94:7a:b9: 5a:41:58:36:54:47:91:e8:7c:e8:eb:32:31:ee:a9:15:9c:3d: 9e:94:88:a7:10:8c:d2:cf:d2:9e:c1:ba:6e:c1:c1:2a:8e:b7: 4e:31:e8:0b:00:61:57:6a:80:2e:90:f5:9a:3e:99:49:b1:ec: ce:61:3f:8f:e7:6d:fb:3b:00:66:6a:fb:c0:eb:90:44:0e:6b: 10:c4:29:b1:80:d4:cf:36:51:65:85:16:02:cb:59:b0:77:b4: 02:49:45:e6:a5:14:64:2c:f2:39:5b:32:f9:6a:53:b6:85:cf: 70:d3:87:b5:ef:7c:8e:21:02:fe:c9:3b:02:ff:26:b7:6f:9b: 9c:9d:00:01:d8:5a:28:bf:5b:3f:03:b7:e2:d0:2a:1c:f3:6f: a0:e3:fc:63:d2:4d:70:3e:dc:14:da:63:0e:a8:6d:26:7e:f6: 60:b3:dd:f9:d0:37:00:75:da:26:e3:c3:d4:39:0a:2a:a0:71: ad:39:f1:43:02:8e:a3:aa:a6:99:bc:18:91:a2:05:26:93:e3: 53:b2:ea:1f:9f:18:c7:77:da:da:5a:26:7b:79:bd:e2:3c:c2: 8d:b3:ae:c1:a6:52:a6:d3:bf:66:2d:f5:5d:9f:64:9d:83:38: ae:15:b8:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwQzI2RjhBRjg3QTAy NTgyQTY3NjNFMzJFMjEwRjZBQTUzMjc0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl9TuGb8ojb6WOqeUN3VZolvz8S0DG8+VZ6I30Q2BogYjEPAkd 2w8NUrvDp8XfHx/SzcUm3xTwgODfKMgl1/iksFxtOxQ0qfi4VwINwjKVgI/95Q3r uM+/LLbuuxSaPlJmCzsZ4OdzMKS9vGyzVfMa0wXkCE4Gqe+iGAcQ8vkCd09j4ItQ oYC4AgnY0UY653GQmSRhrcIzazRQnrJ9f82VNUpOgWXnsUeQWsYsNKzYKjsJfbXt fZ2Z9Y1O41EyuA3qwFCcjDTEqubW0x0ThY9WZHzI87IJ5Ub4DGcX4t2oeaMwAWsV plQirbD2kEf/9uhKkOREF38929io5NQ+ZI7xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcMJvivh6AlgqZ2PjLiEPaqUydDgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NNSnZpdmg2QWxncVoyUGpM aUVQYXFVeWREZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 seYwDQYJKoZIhvcNAQELBQADggEBAJTGnIT+cBqfuScg4j4yw5R6uVpBWDZUR5Ho fOjrMjHuqRWcPZ6UiKcQjNLP0p7Bum7BwSqOt04x6AsAYVdqgC6Q9Zo+mUmx7M5h P4/nbfs7AGZq+8DrkEQOaxDEKbGA1M82UWWFFgLLWbB3tAJJRealFGQs8jlbMvlq U7aFz3DTh7XvfI4hAv7JOwL/Jrdvm5ydAAHYWii/Wz8Dt+LQKhzzb6Dj/GPSTXA+ 3BTaYw6obSZ+9mCz3fnQNwB12ibjw9Q5Ciqgca058UMCjqOqppm8GJGiBSaT41Oy 6h+fGMd32tpaJnt5veI8wo2zrsGmUqbTv2Yt9V2fZJ2DOK4VuCg= -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:34 2025 by rpki-client