$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cXz9CiTurtNDkcSFIdpnlG2aabs.roa File: cXz9CiTurtNDkcSFIdpnlG2aabs.roa (raw, json) Hash identifier: /5oVp94RSf37ju3sUGbjA4lfKcWLgZnXXVXsJNjm6jg= Subject key identifier: 71:7C:FD:0A:24:EE:AE:D3:43:91:C4:85:21:DA:67:94:6D:9A:69:BB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 346E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cXz9CiTurtNDkcSFIdpnlG2aabs.roa Signing time: Mon 10 Feb 2025 13:52:22 +0000 ROA not before: Mon 10 Feb 2025 13:52:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13422 (0x346e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=717CFD0A24EEAED34391C48521DA67946D9A69BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:96:44:38:d1:e3:70:3c:ac:97:43:be:13: 45:ef:f6:af:9e:8c:3d:1c:ed:eb:2e:dc:95:93:55: 59:8b:85:09:60:5c:74:13:88:28:c4:b8:d4:be:8e: 84:e0:27:c4:8d:bc:6b:38:cb:95:cd:a0:d7:bb:07: 65:20:81:8c:c7:69:70:46:04:56:6f:40:17:76:1d: c8:2d:d6:de:24:ea:b6:ed:fd:55:c9:b4:c4:b5:05: 68:7a:9e:ed:58:86:73:de:39:cf:26:f9:ea:12:81: 2a:59:c6:42:0e:e0:c2:98:5e:58:78:11:f0:50:ea: 96:35:9f:43:f7:f7:ba:0d:ce:e0:a1:27:3e:ef:29: ef:1a:dd:59:14:47:f6:56:0c:06:f9:0e:78:9c:d2: 3f:79:dd:64:78:75:67:be:98:c2:29:bd:4a:91:b4: 05:42:c1:8f:5f:a6:bd:28:7c:ee:ff:e5:3b:f6:27: 13:71:f2:23:37:8e:11:86:95:48:43:e5:e8:98:fe: e5:8e:dc:47:16:c9:66:f6:49:0a:07:66:a3:64:59: 81:01:5d:98:17:a5:fa:43:5d:33:63:8b:c9:d5:fa: dc:f8:92:74:b5:1a:08:ef:b6:30:86:d4:0d:34:3e: ca:bd:0f:42:07:ba:af:e5:6a:5a:71:6a:e0:22:e9: 33:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7C:FD:0A:24:EE:AE:D3:43:91:C4:85:21:DA:67:94:6D:9A:69:BB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cXz9CiTurtNDkcSFIdpnlG2aabs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.104.0/22 Signature Algorithm: sha256WithRSAEncryption ac:5d:ba:8d:a7:60:6f:de:c4:55:f2:5c:e5:2a:1f:9f:17:0c: 15:08:d7:22:5b:7c:86:ba:c8:7d:8f:4b:91:4c:f1:cf:e9:66: 3d:5f:0f:fc:68:e9:3a:6a:ca:1c:76:27:f1:ac:2f:5f:a2:97: 66:d6:6f:ce:1a:05:42:95:88:a5:92:87:c8:17:55:d8:dc:f0: 96:99:bb:59:2a:f9:c2:a8:8b:d3:8c:70:54:4e:7d:30:e1:87: c4:14:e2:1d:7b:1c:32:17:ad:8c:e6:0b:65:2a:0b:d4:81:b6: da:e2:d8:0e:26:42:f0:c2:b0:86:56:70:39:4d:b8:cd:1e:ec: e8:17:23:40:c9:f9:ed:81:29:b7:02:10:28:6b:51:41:74:e9: 67:3f:56:e8:c4:d2:9c:95:b6:cd:1b:df:78:ce:1d:1d:06:a9: a7:30:b6:ea:6a:d3:ab:1a:61:b5:4f:28:8a:d2:d7:e0:1f:a2: 9d:a2:0e:02:8a:8e:28:57:e1:cf:27:54:55:59:b4:2b:d9:3a: d3:6c:55:2a:59:69:5f:ea:f5:fc:4f:c2:54:2f:8f:31:15:da: ea:25:fb:80:6f:4a:88:d8:6b:01:dd:94:74:ef:71:69:e2:93: e2:f1:f3:18:46:05:51:f3:af:17:20:70:bc:62:5e:e0:0b:66: 06:50:43:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxN0NGRDBBMjRFRUFF RDM0MzkxQzQ4NTIxREE2Nzk0NkQ5QTY5QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSJpZEONHjcDysl0O+E0Xv9q+ejD0c7esu3JWTVVmLhQlgXHQT iCjEuNS+joTgJ8SNvGs4y5XNoNe7B2UggYzHaXBGBFZvQBd2Hcgt1t4k6rbt/VXJ tMS1BWh6nu1YhnPeOc8m+eoSgSpZxkIO4MKYXlh4EfBQ6pY1n0P397oNzuChJz7v Ke8a3VkUR/ZWDAb5Dnic0j953WR4dWe+mMIpvUqRtAVCwY9fpr0ofO7/5Tv2JxNx 8iM3jhGGlUhD5eiY/uWO3EcWyWb2SQoHZqNkWYEBXZgXpfpDXTNji8nV+tz4knS1 GgjvtjCG1A00Psq9D0IHuq/lalpxauAi6TPJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcXz9CiTurtNDkcSFIdpnlG2aabswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NYejlDaVR1cnRORGtjU0ZJ ZHBubEcyYWFicy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sWgwDQYJKoZIhvcNAQELBQADggEBAKxduo2nYG/exFXyXOUqH58XDBUI1yJbfIa6 yH2PS5FM8c/pZj1fD/xo6Tpqyhx2J/GsL1+il2bWb84aBUKViKWSh8gXVdjc8JaZ u1kq+cKoi9OMcFROfTDhh8QU4h17HDIXrYzmC2UqC9SBttri2A4mQvDCsIZWcDlN uM0e7OgXI0DJ+e2BKbcCEChrUUF06Wc/VujE0pyVts0b33jOHR0Gqacwtupq06sa YbVPKIrS1+Afop2iDgKKjihX4c8nVFVZtCvZOtNsVSpZaV/q9fxPwlQvjzEV2uol +4BvSojYawHdlHTvcWnik+Lx8xhGBVHzrxcgcLxiXuALZgZQQ54= -----END CERTIFICATE-----Generated at Wed Feb 19 22:10:48 2025 by rpki-client