$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p-lezgz-H6kgaJ9tHTsLNDkxCjU.roa File: p-lezgz-H6kgaJ9tHTsLNDkxCjU.roa (raw, json) Hash identifier: Dc/BdwSSFdNbXKE7+InYus6KKn+g3U2IV9BqwU3XgyY= Subject key identifier: A7:E9:5E:CE:0C:FE:1F:A9:20:68:9F:6D:1D:3B:0B:34:39:31:0A:35 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3615 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p-lezgz-H6kgaJ9tHTsLNDkxCjU.roa Signing time: Mon 10 Feb 2025 13:53:57 +0000 ROA not before: Mon 10 Feb 2025 13:53:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.184.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13845 (0x3615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A7E95ECE0CFE1FA920689F6D1D3B0B3439310A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:12:1b:d7:03:05:66:8a:b6:a5:ab:60:5f: 8f:66:db:c4:27:36:d6:53:60:35:e2:73:d8:10:77: 93:2d:6d:1e:8e:8f:69:91:0b:dc:19:1c:ba:cd:dc: e6:92:89:15:74:3a:b7:19:00:27:b6:e5:50:94:58: 8c:65:3f:49:2d:93:86:8c:16:06:7c:92:92:5c:fc: 7a:eb:d0:7a:a6:64:e1:23:21:f7:55:f6:87:49:ac: 4a:08:74:f6:36:8f:2e:ca:34:d6:e2:6c:82:9d:e1: 3e:e4:db:3f:a9:1f:9a:f6:21:f2:05:13:fa:1f:41: cc:a8:07:9e:f0:30:66:40:54:46:9e:20:97:ee:5e: 46:28:90:6a:0a:7a:c5:39:c4:f5:8e:81:4c:d3:98: 5d:24:95:4c:47:54:27:1e:74:5b:0c:97:70:28:6e: 10:b8:00:cc:3b:af:97:08:6d:6a:39:7f:56:6a:82: 51:00:c3:75:1a:72:08:07:59:2b:34:63:91:7e:cc: fd:c2:0a:6b:f6:54:c1:c3:c9:fb:e8:17:6b:90:5f: 5d:dc:31:e9:63:c3:58:76:e2:d4:1b:0b:e4:ac:5c: 78:b0:b3:3c:81:e2:78:be:c7:39:35:d2:44:d5:30: a8:45:3f:c3:ec:3e:bb:f2:37:3d:2c:e1:e5:c0:84: 62:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E9:5E:CE:0C:FE:1F:A9:20:68:9F:6D:1D:3B:0B:34:39:31:0A:35 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p-lezgz-H6kgaJ9tHTsLNDkxCjU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.184.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:6b:ec:ce:24:bd:d6:db:4b:f6:63:25:5a:3a:c7:e2:c6:cd: ff:75:99:e3:f6:fd:10:12:7b:a5:2c:48:c3:90:bf:00:3d:3d: b2:03:53:0a:fe:b4:95:21:30:b2:14:d1:27:24:7c:aa:97:21: 17:0e:81:e6:8f:44:b7:5e:41:23:22:2e:f9:50:a9:8b:3d:4e: 1c:37:28:b5:b4:61:f4:d9:18:ee:f2:54:6c:fa:be:9d:69:2f: 61:7e:b2:b8:d8:40:cf:e6:7c:89:2b:a7:e4:1b:e9:a5:21:f9: d8:80:db:84:93:7f:ed:43:a2:e7:11:c6:7e:48:65:98:57:33: 0b:8b:4a:91:f2:bc:cd:12:de:a7:83:70:cb:c8:a6:7b:fa:2a: 5a:4e:65:85:b0:7f:5c:a4:98:20:aa:c6:85:b7:7a:f2:78:20: fe:36:af:2e:e5:6b:95:a8:80:55:c3:0f:f7:e2:6a:2f:95:36: f6:1a:9f:d8:10:20:4a:c8:c5:ff:64:63:9e:ee:cd:55:e2:c5: bd:9c:87:f8:b7:cb:1b:62:80:aa:14:0c:14:df:c3:60:c0:95: ff:f8:c4:9b:7a:30:ad:b6:e4:74:50:ef:43:0d:c8:b5:07:1a: c8:3b:c4:2c:0a:fb:c3:df:86:aa:a7:9c:3f:22:8f:83:66:f0: 5d:c0:16:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE3RTk1RUNFMENGRTFG QTkyMDY4OUY2RDFEM0IwQjM0MzkzMTBBMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH7xIb1wMFZoq2patgX49m28QnNtZTYDXic9gQd5MtbR6Oj2mR C9wZHLrN3OaSiRV0OrcZACe25VCUWIxlP0ktk4aMFgZ8kpJc/Hrr0HqmZOEjIfdV 9odJrEoIdPY2jy7KNNbibIKd4T7k2z+pH5r2IfIFE/ofQcyoB57wMGZAVEaeIJfu XkYokGoKesU5xPWOgUzTmF0klUxHVCcedFsMl3AobhC4AMw7r5cIbWo5f1ZqglEA w3UacggHWSs0Y5F+zP3CCmv2VMHDyfvoF2uQX13cMeljw1h24tQbC+SsXHiwszyB 4ni+xzk10kTVMKhFP8PsPrvyNz0s4eXAhGIlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUp+lezgz+H6kgaJ9tHTsLNDkxCjUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3AtbGV6Z3otSDZrZ2FKOXRI VHNMTkRreENqVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sbgwDQYJKoZIhvcNAQELBQADggEBAE1r7M4kvdbbS/ZjJVo6x+LGzf91meP2/RAS e6UsSMOQvwA9PbIDUwr+tJUhMLIU0SckfKqXIRcOgeaPRLdeQSMiLvlQqYs9Thw3 KLW0YfTZGO7yVGz6vp1pL2F+srjYQM/mfIkrp+Qb6aUh+diA24STf+1DoucRxn5I ZZhXMwuLSpHyvM0S3qeDcMvIpnv6KlpOZYWwf1ykmCCqxoW3evJ4IP42ry7la5Wo gFXDD/fiai+VNvYan9gQIErIxf9kY57uzVXixb2ch/i3yxtigKoUDBTfw2DAlf/4 xJt6MK225HRQ70MNyLUHGsg7xCwK+8PfhqqnnD8ij4Nm8F3AFos= -----END CERTIFICATE-----Generated at Wed Feb 19 21:59:15 2025 by rpki-client