$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jxu0GdcYy-TfrcP2BqGYNvR9wqU.roa File: jxu0GdcYy-TfrcP2BqGYNvR9wqU.roa (raw, json) Hash identifier: oqo5Cofs6mI7fvU/wZpKPe2gVp7oNyKfko1yvvrjAYE= Subject key identifier: 8F:1B:B4:19:D7:18:CB:E4:DF:AD:C3:F6:06:A1:98:36:F4:7D:C2:A5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33B7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jxu0GdcYy-TfrcP2BqGYNvR9wqU.roa Signing time: Mon 10 Feb 2025 13:51:42 +0000 ROA not before: Mon 10 Feb 2025 13:51:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13239 (0x33b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8F1BB419D718CBE4DFADC3F606A19836F47DC2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:ec:c1:85:38:f6:fa:d4:9f:32:56:69:4a: 6b:46:3c:74:94:85:6c:5a:1f:a0:ab:c2:7c:39:11: 37:dd:1a:5b:11:c9:e1:19:79:02:64:f6:1b:65:84: 98:16:71:ff:cf:ce:8b:f9:71:8c:96:cb:9e:aa:82: 6d:7f:84:95:c7:aa:78:0c:29:2e:fe:89:05:8e:88: 10:4e:e3:1e:51:ff:05:fe:23:eb:8f:2a:f5:3e:13: 83:88:7b:b2:26:90:9f:3e:5f:78:ee:92:7a:b3:bd: 52:cb:09:88:d2:b7:2f:2b:fc:57:1c:65:b9:b4:57: 6b:e0:08:64:e4:29:76:f6:6f:b7:0d:e8:a6:ae:04: 59:38:92:94:58:35:6c:7c:cf:10:59:c5:19:0f:93: ea:5f:f5:5b:23:86:5d:87:90:3e:e9:e2:c3:16:60: 8b:07:46:5c:28:96:02:18:aa:29:e1:52:1f:93:0a: 36:31:ec:8e:c2:13:f1:53:0f:d5:e3:c7:2d:a7:65: 03:7b:ad:4f:f0:56:f5:7b:8a:bb:27:a5:f6:d0:78: 21:3f:22:d5:53:d4:34:58:ea:ef:73:18:bd:19:37: 9a:17:eb:2e:c1:e4:b0:7a:32:1e:9a:d3:a2:a9:9e: cf:44:3f:d1:3d:50:bd:7f:4e:d0:80:e5:00:ad:6a: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1B:B4:19:D7:18:CB:E4:DF:AD:C3:F6:06:A1:98:36:F4:7D:C2:A5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jxu0GdcYy-TfrcP2BqGYNvR9wqU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.24.0/22 Signature Algorithm: sha256WithRSAEncryption 63:94:1f:19:6c:d7:3c:aa:5a:49:6c:d4:49:ac:60:65:74:d5: 93:c3:82:1d:e1:e5:fa:86:f7:e6:91:c6:cf:be:f1:86:da:45: 6c:76:4a:a4:00:f6:44:86:e6:5e:a5:d9:69:c0:f7:6c:db:03: fb:c2:98:ff:6e:b6:13:39:2a:64:a8:22:27:5e:9e:a1:64:45: 0a:e1:fe:13:aa:7c:a4:4f:0f:75:15:d1:60:1e:fc:4c:48:10: 43:8e:54:7f:9a:71:c2:40:d3:51:88:cf:f4:36:ac:c4:da:2f: a1:25:29:ab:fa:e5:1a:47:4b:5f:30:bf:40:26:4e:b1:c6:14: 7a:96:c2:91:ee:17:30:38:a9:1b:96:11:d4:36:40:2e:06:e4: cc:14:47:2f:77:f2:2f:32:e3:e1:be:e8:78:e9:5f:44:7c:fc: 4d:b1:ca:50:02:28:29:1d:26:2d:d2:96:9d:ef:25:28:b5:f5: fb:12:15:4c:df:cf:a4:03:cd:3f:31:23:12:92:5a:d3:84:96: a3:86:20:ac:7d:82:46:f7:49:42:e6:8d:92:1a:f3:1d:dc:d8: 8e:5a:6c:d4:5a:18:c6:6d:3c:d4:b7:40:c0:eb:95:77:0e:89: 65:bc:0e:95:35:88:9a:31:c7:a7:42:f6:3c:d4:9c:e0:d5:c7: 8c:bf:a6:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGMUJCNDE5RDcxOENC RTRERkFEQzNGNjA2QTE5ODM2RjQ3REMyQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9q+zBhTj2+tSfMlZpSmtGPHSUhWxaH6Crwnw5ETfdGlsRyeEZ eQJk9htlhJgWcf/Pzov5cYyWy56qgm1/hJXHqngMKS7+iQWOiBBO4x5R/wX+I+uP KvU+E4OIe7ImkJ8+X3juknqzvVLLCYjSty8r/FccZbm0V2vgCGTkKXb2b7cN6Kau BFk4kpRYNWx8zxBZxRkPk+pf9Vsjhl2HkD7p4sMWYIsHRlwolgIYqinhUh+TCjYx 7I7CE/FTD9Xjxy2nZQN7rU/wVvV7irsnpfbQeCE/ItVT1DRY6u9zGL0ZN5oX6y7B 5LB6Mh6a06Kpns9EP9E9UL1/TtCA5QCtak5VAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjxu0GdcYy+TfrcP2BqGYNvR9wqUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2p4dTBHZGNZeS1UZnJjUDJC cUdZTnZSOXdxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sRgwDQYJKoZIhvcNAQELBQADggEBAGOUHxls1zyqWkls1EmsYGV01ZPDgh3h5fqG 9+aRxs++8YbaRWx2SqQA9kSG5l6l2WnA92zbA/vCmP9uthM5KmSoIidenqFkRQrh /hOqfKRPD3UV0WAe/ExIEEOOVH+accJA01GIz/Q2rMTaL6ElKav65RpHS18wv0Am TrHGFHqWwpHuFzA4qRuWEdQ2QC4G5MwURy938i8y4+G+6HjpX0R8/E2xylACKCkd Ji3Slp3vJSi19fsSFUzfz6QDzT8xIxKSWtOElqOGIKx9gkb3SULmjZIa8x3c2I5a bNRaGMZtPNS3QMDrlXcOiWW8DpU1iJoxx6dC9jzUnODVx4y/pgI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:29 2025 by rpki-client