$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sIvj6T4aEq3gvsTMkOlbdt5x7BY.roa File: sIvj6T4aEq3gvsTMkOlbdt5x7BY.roa (raw, json) Hash identifier: kogW7BNoAgbmNIH5N5Q4LxN434XtcZoiJqd2zt50d6c= Subject key identifier: B0:8B:E3:E9:3E:1A:12:AD:E0:BE:C4:CC:90:E9:5B:76:DE:71:EC:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3426 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sIvj6T4aEq3gvsTMkOlbdt5x7BY.roa Signing time: Mon 10 Feb 2025 13:52:07 +0000 ROA not before: Mon 10 Feb 2025 13:52:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13350 (0x3426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B08BE3E93E1A12ADE0BEC4CC90E95B76DE71EC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:c2:65:a0:d5:82:86:b7:8b:6f:11:0f:01: 74:81:3c:b3:95:56:42:f2:6f:f9:26:fa:74:1a:b7: 1f:ce:5e:b6:fd:e1:96:09:1e:1d:e7:31:2f:1f:5a: af:4e:36:02:8d:0e:26:70:e6:72:f2:2a:4e:5f:5e: de:7f:8d:c8:38:b1:87:98:6b:ab:57:ea:2b:31:b5: 97:2b:78:3d:da:47:10:4c:89:81:58:64:fa:aa:d7: e3:ec:9f:c8:d3:ae:58:20:09:d6:95:6f:03:ec:e2: df:23:2c:30:b1:70:e2:52:41:55:f2:b0:7d:31:10: 42:ce:71:7d:b5:b9:bb:ae:43:67:f2:6e:f2:d5:57: b0:a3:86:d8:2b:3d:8f:df:e7:2e:f1:8d:43:8d:92: 7c:d5:d0:72:3a:58:98:e7:57:d3:c5:de:7e:37:77: 7d:08:31:1c:d8:e9:c9:4d:9d:02:16:cd:38:f6:67: 9e:61:58:38:bd:78:7a:b8:1b:88:9e:f8:05:45:25: 11:a2:ed:19:46:4a:2d:90:25:03:9d:28:4d:fd:ae: b6:e8:a9:7c:66:c5:c6:51:af:46:10:49:ff:ce:0b: b2:28:96:c7:ac:79:83:ad:55:87:c7:66:d7:2c:9e: d7:37:c9:ba:fe:47:e5:54:d5:76:97:f3:53:79:d1: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8B:E3:E9:3E:1A:12:AD:E0:BE:C4:CC:90:E9:5B:76:DE:71:EC:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sIvj6T4aEq3gvsTMkOlbdt5x7BY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.152.0/21 Signature Algorithm: sha256WithRSAEncryption 48:41:d3:fb:27:f1:c2:f4:10:01:ea:5c:a9:a7:84:a2:94:6a: b0:6b:b9:a4:7c:3b:ef:02:68:7b:87:85:8e:82:84:8c:5a:08: a2:f4:44:74:0e:a9:a8:ef:7a:29:a9:a8:bd:3d:a4:83:f0:eb: a1:fa:ef:fd:ff:37:a5:19:3f:34:de:58:07:7a:c5:f9:df:7c: 44:a0:76:89:c7:b4:fd:4f:2d:40:75:f6:1a:aa:66:ee:18:a4: 0a:2a:97:e3:8e:7c:7d:51:b4:b0:b2:99:40:14:30:d9:d6:c1: a8:10:0a:13:bb:de:2c:d0:3c:f6:ed:32:23:2a:08:f6:c3:87: f7:74:f4:d7:ca:4d:de:98:45:0d:77:68:b5:42:08:65:a0:72: e4:b3:25:88:0e:6d:98:da:12:86:0d:cd:f6:ea:0c:89:75:86: e8:ef:69:9c:8f:fe:80:1b:20:38:9f:b9:eb:f8:63:26:b1:37: 48:a8:49:9a:0d:14:08:cc:dd:4e:1d:7f:56:7f:60:78:c6:06: ba:77:05:fa:f1:24:8c:9d:67:ee:99:5f:b2:89:5d:b4:08:5a: 49:a9:19:bb:ee:9e:b7:0f:27:24:d1:70:f6:26:61:4f:c5:fc: 9d:9a:b5:db:32:be:b6:29:38:a1:46:72:c7:b8:d4:a1:84:1a: 28:f0:e8:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIwOEJFM0U5M0UxQTEy QURFMEJFQzRDQzkwRTk1Qjc2REU3MUVDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMlMJloNWChreLbxEPAXSBPLOVVkLyb/km+nQatx/OXrb94ZYJ Hh3nMS8fWq9ONgKNDiZw5nLyKk5fXt5/jcg4sYeYa6tX6isxtZcreD3aRxBMiYFY ZPqq1+Psn8jTrlggCdaVbwPs4t8jLDCxcOJSQVXysH0xEELOcX21ubuuQ2fybvLV V7CjhtgrPY/f5y7xjUONknzV0HI6WJjnV9PF3n43d30IMRzY6clNnQIWzTj2Z55h WDi9eHq4G4ie+AVFJRGi7RlGSi2QJQOdKE39rrboqXxmxcZRr0YQSf/OC7Iolses eYOtVYfHZtcsntc3ybr+R+VU1XaX81N50cmNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsIvj6T4aEq3gvsTMkOlbdt5x7BYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NJdmo2VDRhRXEzZ3ZzVE1r T2xiZHQ1eDdCWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sJgwDQYJKoZIhvcNAQELBQADggEBAEhB0/sn8cL0EAHqXKmnhKKUarBruaR8O+8C aHuHhY6ChIxaCKL0RHQOqajveimpqL09pIPw66H67/3/N6UZPzTeWAd6xfnffESg donHtP1PLUB19hqqZu4YpAoql+OOfH1RtLCymUAUMNnWwagQChO73izQPPbtMiMq CPbDh/d09NfKTd6YRQ13aLVCCGWgcuSzJYgObZjaEoYNzfbqDIl1hujvaZyP/oAb IDifuev4YyaxN0ioSZoNFAjM3U4df1Z/YHjGBrp3BfrxJIydZ+6ZX7KJXbQIWkmp GbvunrcPJyTRcPYmYU/F/J2atdsyvrYpOKFGcse41KGEGijw6CU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:55 2025 by rpki-client