$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o3zayfjATKpgAdfWJawSN5Kp-uU.roa File: o3zayfjATKpgAdfWJawSN5Kp-uU.roa (raw, json) Hash identifier: WY4MZloNd48e66Ldc5Gi1Yy4sztUzPc03a+w+Tjsnzc= Subject key identifier: A3:7C:DA:C9:F8:C0:4C:AA:60:01:D7:D6:25:AC:12:37:92:A9:FA:E5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36A8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o3zayfjATKpgAdfWJawSN5Kp-uU.roa Signing time: Mon 10 Feb 2025 13:54:33 +0000 ROA not before: Mon 10 Feb 2025 13:54:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13992 (0x36a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A37CDAC9F8C04CAA6001D7D625AC123792A9FAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:28:ed:c2:5d:30:69:36:ba:c1:3f:5c:d8: 1d:34:5c:bb:8c:76:12:5b:e8:49:67:d4:b3:6c:f1: 57:cd:73:f4:fe:70:59:11:6d:96:ee:d5:43:67:d2: 9b:8c:6d:17:d3:08:28:0e:d6:30:7f:7f:85:7d:90: 0a:6d:0f:b6:18:ed:34:e1:cc:cf:35:50:99:4c:33: 5a:a6:4c:5b:a0:3a:1a:89:3a:40:3f:26:86:1e:f8: 2c:40:07:14:93:15:5e:e1:74:76:46:aa:aa:84:1a: 60:ec:04:14:c2:cf:06:4a:40:f9:c1:01:92:8a:a8: 10:7d:f2:ec:10:06:a7:90:a1:4a:9a:82:ad:b3:0f: 44:a0:bf:81:ad:63:ed:e3:f7:7e:31:50:49:37:a7: 64:ad:59:1d:4d:0e:b6:d0:11:05:7b:ac:18:60:08: 4f:91:f9:e5:28:60:f6:c2:0b:26:61:2b:f4:23:6d: b3:bb:a0:3f:8c:94:72:b8:13:a9:55:c1:62:97:bf: b9:e3:bd:c0:ac:bf:c5:68:8e:db:46:47:81:c6:92: b2:e6:45:a4:eb:b2:23:40:78:90:ed:c4:44:c9:67: 6d:9b:94:05:ca:3a:3e:8c:6c:af:d7:e2:7b:5e:dd: e8:c4:a9:e5:8e:53:4c:05:2b:84:b0:9e:2e:99:9e: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:DA:C9:F8:C0:4C:AA:60:01:D7:D6:25:AC:12:37:92:A9:FA:E5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o3zayfjATKpgAdfWJawSN5Kp-uU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.124.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:6f:58:98:bb:ab:09:f8:9f:0c:71:5c:11:63:81:1e:20:c8: b2:5c:5f:bb:f6:70:62:17:1d:5e:d5:e0:e0:bc:5b:50:24:23: 5c:60:74:eb:e0:cf:c9:5b:94:76:f7:5d:6b:18:f1:93:8c:87: 83:ff:71:dd:35:4d:4a:8c:b8:8c:7a:51:d2:60:eb:b7:0e:9d: c6:f5:8d:0d:62:87:90:b2:45:7a:06:67:d6:60:09:2d:05:4d: ef:ed:e2:df:c1:70:d0:d3:07:33:b8:d5:32:4e:50:73:ce:b3: 30:3c:81:89:cc:c4:2d:d7:9a:97:fc:26:05:e2:f0:91:a0:46: bc:61:b5:2a:be:65:79:d0:1c:04:72:18:38:75:ab:02:51:ad: 33:45:a6:8d:cb:2d:e8:2c:a1:0c:39:30:95:88:f7:5b:75:fc: 28:01:49:14:97:47:0c:e0:5d:e7:65:6d:e8:5a:8a:f6:e9:ea: cb:93:25:21:6c:a2:fe:8c:cc:71:59:b0:0b:0c:93:b3:38:a6: 8f:3d:4f:99:85:0c:ec:a8:4f:a3:77:f2:16:bd:6f:17:91:76: 94:24:55:25:81:e4:f2:d2:1b:f8:85:d4:67:42:79:cc:97:16: 66:cb:ce:c9:a7:6f:de:33:3d:d0:7e:51:0b:a6:1c:9a:4e:26: a9:41:d2:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzN0NEQUM5RjhDMDRD QUE2MDAxRDdENjI1QUMxMjM3OTJBOUZBRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI4Sjtwl0waTa6wT9c2B00XLuMdhJb6Eln1LNs8VfNc/T+cFkR bZbu1UNn0puMbRfTCCgO1jB/f4V9kAptD7YY7TThzM81UJlMM1qmTFugOhqJOkA/ JoYe+CxABxSTFV7hdHZGqqqEGmDsBBTCzwZKQPnBAZKKqBB98uwQBqeQoUqagq2z D0Sgv4GtY+3j934xUEk3p2StWR1NDrbQEQV7rBhgCE+R+eUoYPbCCyZhK/QjbbO7 oD+MlHK4E6lVwWKXv7njvcCsv8VojttGR4HGkrLmRaTrsiNAeJDtxETJZ22blAXK Oj6MbK/X4nte3ejEqeWOU0wFK4Swni6ZnskBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUo3zayfjATKpgAdfWJawSN5Kp+uUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL28zemF5ZmpBVEtwZ0FkZldK YXdTTjVLcC11VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sXwwDQYJKoZIhvcNAQELBQADggEBAC5vWJi7qwn4nwxxXBFjgR4gyLJcX7v2cGIX HV7V4OC8W1AkI1xgdOvgz8lblHb3XWsY8ZOMh4P/cd01TUqMuIx6UdJg67cOncb1 jQ1ih5CyRXoGZ9ZgCS0FTe/t4t/BcNDTBzO41TJOUHPOszA8gYnMxC3Xmpf8JgXi 8JGgRrxhtSq+ZXnQHARyGDh1qwJRrTNFpo3LLegsoQw5MJWI91t1/CgBSRSXRwzg Xedlbehaivbp6suTJSFsov6MzHFZsAsMk7M4po89T5mFDOyoT6N38ha9bxeRdpQk VSWB5PLSG/iF1GdCecyXFmbLzsmnb94zPdB+UQumHJpOJqlB0kE= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:26 2025 by rpki-client