$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dkBjePXMFo93ObCSF8pKiVSxkbY.roa File: dkBjePXMFo93ObCSF8pKiVSxkbY.roa (raw, json) Hash identifier: KRY+Zh5G9RoOd20Q63SNS0bsuk9mstUWWkkSCHHim3s= Subject key identifier: 76:40:63:78:F5:CC:16:8F:77:39:B0:92:17:CA:4A:89:54:B1:91:B6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3475 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dkBjePXMFo93ObCSF8pKiVSxkbY.roa Signing time: Mon 10 Feb 2025 13:52:24 +0000 ROA not before: Mon 10 Feb 2025 13:52:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13429 (0x3475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=76406378F5CC168F7739B09217CA4A8954B191B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:09:63:7f:ea:9a:f9:4c:4c:1a:e1:a1:5e: d2:22:6a:a9:ff:d3:b0:93:19:e7:b2:da:c6:68:65: c1:b6:12:ec:a1:d8:b6:b7:0f:e7:03:35:1d:30:21: 37:1f:20:b5:97:77:e9:36:13:f8:20:90:79:21:c5: a5:94:1d:b4:67:fb:40:6e:8d:09:9c:01:90:86:d8: 51:4f:51:97:78:78:63:75:9d:af:92:f1:71:26:79: fa:73:b2:7b:89:51:5d:38:3a:c9:b4:58:c8:85:04: f1:0d:e9:c2:57:99:66:72:26:b8:eb:72:4d:19:63: 98:d0:cc:46:cd:d9:fa:1a:9c:6f:4a:a0:d9:e1:ea: c5:ec:a9:da:2c:07:18:10:aa:4c:cf:70:12:a8:52: 1b:8e:1a:58:e9:2a:3a:ba:ed:6e:40:c0:2f:1c:48: 06:01:30:3d:5c:6e:97:87:a9:04:5e:fa:90:a0:80: 6e:f9:7a:a1:21:6a:f2:b2:72:8c:38:e4:a0:e9:76: b8:97:0d:57:0d:3d:d7:9a:a1:13:77:b6:b5:2a:12: 3b:56:2f:74:9b:61:36:ac:40:e7:33:b6:44:3c:db: 6e:ec:4f:a8:b7:eb:fe:62:7d:bc:36:23:be:df:4a: 78:f3:4b:e0:48:fc:b9:6c:63:46:92:d2:5a:4a:52: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:40:63:78:F5:CC:16:8F:77:39:B0:92:17:CA:4A:89:54:B1:91:B6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dkBjePXMFo93ObCSF8pKiVSxkbY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.24.0/21 Signature Algorithm: sha256WithRSAEncryption 24:fc:2c:57:f1:4a:da:87:57:cb:e9:05:29:7e:a4:36:00:96: d4:75:18:81:13:5b:30:df:35:a4:9e:a4:c0:7a:df:40:39:f8: e5:a2:0c:90:89:7e:7b:c0:d1:67:6a:4e:57:6d:28:73:2c:fd: 00:56:28:81:d9:69:83:74:61:70:47:94:18:3e:e2:76:2d:15: b8:68:61:cc:be:31:ba:ec:fd:c3:82:f8:4f:65:32:38:c9:95: da:8b:ef:c0:86:ef:29:8c:9a:75:68:b3:83:7f:c5:9e:77:7d: a6:e1:67:1f:3d:ad:53:20:96:7d:88:8e:f1:7e:12:0b:0d:56: 3b:d6:a5:1b:b9:63:ef:4c:c8:f2:76:66:1c:66:9c:ad:da:85: c5:d2:ea:14:40:56:0e:82:f7:07:ce:0e:98:e2:a2:13:54:6e: e5:83:79:3b:9e:98:a8:e8:4e:70:1f:89:8a:2d:5d:a2:92:6b: eb:c9:d5:3a:41:2d:b3:31:44:f4:9c:e6:9e:ba:8c:c1:0c:b3: 04:66:e3:dd:0c:e5:dc:ff:eb:41:c1:54:a1:bb:57:7f:84:6d: c6:39:02:40:f9:e3:f3:2f:e0:86:23:23:f8:6e:c2:02:e2:8f: b9:2f:18:5c:33:61:ce:e8:45:b8:81:f0:c9:7e:4b:57:93:c6: c2:27:3e:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2NDA2Mzc4RjVDQzE2 OEY3NzM5QjA5MjE3Q0E0QTg5NTRCMTkxQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDChQljf+qa+UxMGuGhXtIiaqn/07CTGeey2sZoZcG2Euyh2La3 D+cDNR0wITcfILWXd+k2E/ggkHkhxaWUHbRn+0BujQmcAZCG2FFPUZd4eGN1na+S 8XEmefpzsnuJUV04Osm0WMiFBPEN6cJXmWZyJrjrck0ZY5jQzEbN2foanG9KoNnh 6sXsqdosBxgQqkzPcBKoUhuOGljpKjq67W5AwC8cSAYBMD1cbpeHqQRe+pCggG75 eqEhavKycow45KDpdriXDVcNPdeaoRN3trUqEjtWL3SbYTasQOcztkQ8227sT6i3 6/5ifbw2I77fSnjzS+BI/LlsY0aS0lpKUpRBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdkBjePXMFo93ObCSF8pKiVSxkbYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RrQmplUFhNRm85M09iQ1NG OHBLaVZTeGtiWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sRgwDQYJKoZIhvcNAQELBQADggEBACT8LFfxStqHV8vpBSl+pDYAltR1GIETWzDf NaSepMB630A5+OWiDJCJfnvA0WdqTldtKHMs/QBWKIHZaYN0YXBHlBg+4nYtFbho Ycy+Mbrs/cOC+E9lMjjJldqL78CG7ymMmnVos4N/xZ53fabhZx89rVMgln2IjvF+ EgsNVjvWpRu5Y+9MyPJ2ZhxmnK3ahcXS6hRAVg6C9wfODpjiohNUbuWDeTuemKjo TnAfiYotXaKSa+vJ1TpBLbMxRPSc5p66jMEMswRm490M5dz/60HBVKG7V3+EbcY5 AkD54/Mv4IYjI/huwgLij7kvGFwzYc7oRbiB8Ml+S1eTxsInPrI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:04 2025 by rpki-client