$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rrbT19r21xmssCBmxAZ49tN-NTs.roa File: rrbT19r21xmssCBmxAZ49tN-NTs.roa (raw, json) Hash identifier: h4NNjgPK2OuDi0cHOLFNxqGRN6WJti1E4Psyh3yXDNs= Subject key identifier: AE:B6:D3:D7:DA:F6:D7:19:AC:B0:20:66:C4:06:78:F6:D3:7E:35:3B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33DA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rrbT19r21xmssCBmxAZ49tN-NTs.roa Signing time: Mon 10 Feb 2025 13:51:50 +0000 ROA not before: Mon 10 Feb 2025 13:51:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13274 (0x33da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AEB6D3D7DAF6D719ACB02066C40678F6D37E353B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:6a:a1:3d:d2:9e:68:f3:14:5f:ce:bf:b6: 24:f2:c1:ab:bb:03:15:4a:8b:d2:a1:e7:cb:07:0d: e2:ea:13:e2:3a:12:33:3d:21:21:fb:85:be:9d:0b: e2:93:34:0b:fb:bf:33:1e:5a:5c:f5:32:95:7b:98: 49:c5:ba:af:4d:1a:3f:d7:25:46:da:2a:b8:18:0d: 7e:02:07:36:ae:07:59:64:04:18:d4:96:77:a4:da: 94:ec:f7:a0:70:8c:1b:f3:76:11:d8:14:3a:b2:d9: 9d:c2:ce:8e:4e:3e:f5:ba:b3:9d:0f:a1:a5:91:50: ec:90:49:06:e9:79:90:15:a7:ff:a4:62:b9:aa:86: eb:e7:79:f5:39:6f:c0:a2:55:36:f8:dc:e6:54:bd: cd:19:ea:77:8a:af:60:46:c0:a8:3b:34:80:87:d3: 37:80:49:c6:09:e8:23:c4:3b:90:4c:f3:6c:2a:81: dd:be:c3:88:ef:59:7b:89:fb:e0:56:3a:16:93:de: e2:7e:7f:6c:6b:e6:30:43:b4:b7:72:f7:a8:d7:ac: 95:e5:2f:40:d0:a6:a2:a3:b9:23:9d:65:4d:a6:a5: 87:49:40:cf:85:0f:1b:c0:70:6b:6b:99:b1:f0:03: 96:ca:94:ca:90:62:0a:77:95:4b:4b:91:76:49:fe: 7f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B6:D3:D7:DA:F6:D7:19:AC:B0:20:66:C4:06:78:F6:D3:7E:35:3B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rrbT19r21xmssCBmxAZ49tN-NTs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.140.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:9d:a4:e3:15:bb:bc:f3:b6:92:7f:cb:b8:62:e6:9b:e8:42: fc:b7:d0:9e:8e:81:43:3f:33:ce:3a:ca:7c:44:fb:ef:6f:09: 3a:7c:3d:cc:b5:65:20:53:d2:21:82:43:1d:8b:aa:ee:33:a9: 2c:d4:80:ac:3f:50:33:2c:30:8f:61:e3:bc:23:41:c7:61:e0: 73:b0:5c:87:2f:dd:57:96:43:52:fe:c6:89:f3:6a:4c:75:2a: 53:a0:b3:0b:45:90:73:ff:79:29:47:08:12:0f:6f:df:64:7b: 5a:8b:ec:2f:67:6b:b7:14:9b:dd:0e:b2:e0:63:c1:57:3c:b1: f6:da:f3:a5:f3:a4:d1:d7:db:9a:13:58:a9:72:c4:ad:6e:96: d3:6a:d0:a5:1d:be:23:67:c5:82:11:de:18:d2:c7:b2:1a:c1: 52:82:d9:8f:ef:94:26:2a:ca:55:ca:1b:c8:af:98:48:43:e2: f2:48:6b:f4:a2:c3:29:3c:99:f0:5a:0b:da:4e:b7:32:b3:dd: b8:8d:89:bd:ba:c5:cc:b9:14:ed:44:65:f6:97:2e:3f:68:b3: e4:a3:70:14:43:96:f1:8d:79:ea:9f:6e:04:b1:f5:56:d2:33: 10:42:14:0d:f5:c3:d3:80:32:9c:7c:09:63:d4:f6:28:2a:0f: 83:80:df:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFQjZEM0Q3REFGNkQ3 MTlBQ0IwMjA2NkM0MDY3OEY2RDM3RTM1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFUGqhPdKeaPMUX86/tiTywau7AxVKi9Kh58sHDeLqE+I6EjM9 ISH7hb6dC+KTNAv7vzMeWlz1MpV7mEnFuq9NGj/XJUbaKrgYDX4CBzauB1lkBBjU lnek2pTs96BwjBvzdhHYFDqy2Z3Czo5OPvW6s50PoaWRUOyQSQbpeZAVp/+kYrmq huvnefU5b8CiVTb43OZUvc0Z6neKr2BGwKg7NICH0zeAScYJ6CPEO5BM82wqgd2+ w4jvWXuJ++BWOhaT3uJ+f2xr5jBDtLdy96jXrJXlL0DQpqKjuSOdZU2mpYdJQM+F DxvAcGtrmbHwA5bKlMqQYgp3lUtLkXZJ/n+zAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrrbT19r21xmssCBmxAZ49tN+NTswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JyYlQxOXIyMXhtc3NDQm14 QVo0OXROLU5Ucy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sIwwDQYJKoZIhvcNAQELBQADggEBACydpOMVu7zztpJ/y7hi5pvoQvy30J6OgUM/ M846ynxE++9vCTp8Pcy1ZSBT0iGCQx2Lqu4zqSzUgKw/UDMsMI9h47wjQcdh4HOw XIcv3VeWQ1L+xonzakx1KlOgswtFkHP/eSlHCBIPb99ke1qL7C9na7cUm90OsuBj wVc8sfba86XzpNHX25oTWKlyxK1ultNq0KUdviNnxYIR3hjSx7IawVKC2Y/vlCYq ylXKG8ivmEhD4vJIa/Siwyk8mfBaC9pOtzKz3biNib26xcy5FO1EZfaXLj9os+Sj cBRDlvGNeeqfbgSx9VbSMxBCFA31w9OAMpx8CWPU9igqD4OA3yI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:13 2025 by rpki-client