$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lDimjJtOZED39iXvUNMqaBJCTCY.roa File: lDimjJtOZED39iXvUNMqaBJCTCY.roa (raw, json) Hash identifier: MdYQMWySUlOQvh1lPqOHddhCiio2AxT+7F6ZEn0QB5E= Subject key identifier: 94:38:A6:8C:9B:4E:64:40:F7:F6:25:EF:50:D3:2A:68:12:42:4C:26 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36B5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lDimjJtOZED39iXvUNMqaBJCTCY.roa Signing time: Mon 10 Feb 2025 13:54:35 +0000 ROA not before: Mon 10 Feb 2025 13:54:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14005 (0x36b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9438A68C9B4E6440F7F625EF50D32A6812424C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:42:e7:7b:03:35:29:f5:75:73:46:18:da:c6: c4:4c:dc:57:f5:97:8e:58:d4:e0:7f:82:b5:bb:19: 8e:0f:0a:99:60:e2:32:df:83:b6:fa:5d:f6:81:89: 80:19:ab:bc:a9:b4:10:7d:17:04:d6:a0:12:48:63: 1f:a0:2b:60:a3:6c:71:6d:08:36:83:d7:3e:20:46: e1:6f:6d:99:00:b2:c6:23:fd:95:60:9f:16:15:b9: dc:3a:c3:7b:05:e5:07:d2:6a:ec:4c:e3:92:a2:0d: 57:5a:53:91:8e:90:49:c4:e4:20:30:68:90:77:7b: e9:e7:97:2d:fb:24:50:8b:17:e0:ba:9c:1a:38:44: 20:74:7b:77:95:95:f8:87:74:35:12:9d:06:2b:be: bf:33:a9:00:9f:27:a7:7f:57:3d:43:35:14:67:d5: f4:6a:39:e2:1d:38:65:e0:57:1a:05:d7:b9:aa:20: f1:83:d6:f3:11:25:14:b2:c3:c3:0e:ec:13:34:36: d9:18:b5:db:23:d8:27:49:0a:72:4c:d3:d8:43:16: dc:cd:0c:80:1e:a3:e7:82:d6:8a:0a:1e:94:43:89: 19:e5:f3:4c:0f:ea:cf:11:46:0c:9b:eb:17:d3:b3: 98:41:34:f8:16:77:16:23:43:19:2e:9a:8b:fd:0a: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:38:A6:8C:9B:4E:64:40:F7:F6:25:EF:50:D3:2A:68:12:42:4C:26 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lDimjJtOZED39iXvUNMqaBJCTCY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.96.0/21 Signature Algorithm: sha256WithRSAEncryption 53:e8:69:22:bd:07:03:ec:95:48:30:77:0f:82:64:ab:6d:6b: 97:1b:e0:55:dd:ef:3f:90:01:a2:fe:98:34:d8:ef:00:b0:af: 08:44:7e:a0:64:9b:7f:6b:a2:5d:7b:82:d4:43:05:14:34:72: 9b:25:2f:3b:49:d2:fe:2b:d8:1a:8d:56:42:b0:f7:21:b6:65: d1:64:7a:50:73:f7:1f:3f:ee:8d:9f:39:47:f1:fd:b8:11:c4: 3e:7e:97:30:a8:31:05:ba:ea:e0:73:35:b0:73:29:ea:fa:23: 64:9a:29:46:b7:b8:40:a8:e0:28:bc:2e:d6:a2:1c:02:a0:38: 73:73:d5:39:44:a5:63:9c:96:96:71:30:fd:fc:5a:d6:38:ce: 26:11:a9:7d:d4:53:ed:1f:6d:d6:18:9e:be:d6:21:45:a2:fc: cd:10:fb:40:5c:a5:35:e0:76:2d:79:37:56:b5:10:c7:cd:a9: a1:a8:7d:20:66:99:71:11:88:73:bf:64:c9:03:99:62:a2:c2: 4c:27:28:fa:35:a3:37:99:02:87:83:89:41:b1:9c:97:c5:8b: c1:f6:74:70:82:8f:2d:85:ab:24:d5:09:bd:04:34:0b:7d:a2: 57:c1:7c:d0:bb:77:b6:38:8a:cc:1b:4b:ad:ba:d2:e8:cc:32: 9c:01:9c:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNrUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0MzhBNjhDOUI0RTY0 NDBGN0Y2MjVFRjUwRDMyQTY4MTI0MjRDMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtQud7AzUp9XVzRhjaxsRM3Ff1l45Y1OB/grW7GY4PCplg4jLf g7b6XfaBiYAZq7yptBB9FwTWoBJIYx+gK2CjbHFtCDaD1z4gRuFvbZkAssYj/ZVg nxYVudw6w3sF5QfSauxM45KiDVdaU5GOkEnE5CAwaJB3e+nnly37JFCLF+C6nBo4 RCB0e3eVlfiHdDUSnQYrvr8zqQCfJ6d/Vz1DNRRn1fRqOeIdOGXgVxoF17mqIPGD 1vMRJRSyw8MO7BM0NtkYtdsj2CdJCnJM09hDFtzNDIAeo+eC1ooKHpRDiRnl80wP 6s8RRgyb6xfTs5hBNPgWdxYjQxkumov9CiFHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlDimjJtOZED39iXvUNMqaBJCTCYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xEaW1qSnRPWkVEMzlpWHZV Tk1xYUJKQ1RDWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sWAwDQYJKoZIhvcNAQELBQADggEBAFPoaSK9BwPslUgwdw+CZKtta5cb4FXd7z+Q AaL+mDTY7wCwrwhEfqBkm39rol17gtRDBRQ0cpslLztJ0v4r2BqNVkKw9yG2ZdFk elBz9x8/7o2fOUfx/bgRxD5+lzCoMQW66uBzNbBzKer6I2SaKUa3uECo4Ci8Ltai HAKgOHNz1TlEpWOclpZxMP38WtY4ziYRqX3UU+0fbdYYnr7WIUWi/M0Q+0BcpTXg di15N1a1EMfNqaGofSBmmXERiHO/ZMkDmWKiwkwnKPo1ozeZAoeDiUGxnJfFi8H2 dHCCjy2FqyTVCb0ENAt9olfBfNC7d7Y4iswbS6260ujMMpwBnCQ= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:12 2025 by rpki-client