$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/unh1kirbKc0cPlbYXFe0PmEG9G0.roa File: unh1kirbKc0cPlbYXFe0PmEG9G0.roa (raw, json) Hash identifier: eR9voJTXRaHvhJMruhle/SnqMeXQ9mavBirujz6WE4E= Subject key identifier: BA:78:75:92:2A:DB:29:CD:1C:3E:56:D8:5C:57:B4:3E:61:06:F4:6D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33A5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/unh1kirbKc0cPlbYXFe0PmEG9G0.roa Signing time: Mon 10 Feb 2025 13:51:37 +0000 ROA not before: Mon 10 Feb 2025 13:51:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13221 (0x33a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BA7875922ADB29CD1C3E56D85C57B43E6106F46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6e:ea:c8:79:d0:ad:88:8f:13:b1:90:00:8d: 5e:26:33:ef:01:f6:32:3b:11:3d:7e:2c:d3:07:26: 26:8f:cb:d7:e7:e7:44:e3:9e:21:0c:92:82:1c:55: b7:e4:65:94:c4:1e:08:94:c7:de:b6:fa:c1:8e:cf: a6:d7:79:6c:8d:f3:bd:4d:1c:8a:6c:73:ce:94:10: e6:a1:2d:f6:14:80:11:f1:24:93:92:97:6d:8b:3f: af:81:eb:06:98:41:c8:90:6b:26:fe:87:26:3f:c7: a0:6b:78:fb:fc:df:e3:31:e4:13:53:e6:ef:62:26: 84:67:a8:74:19:94:b7:ef:6a:94:9b:b6:99:6c:83: ff:0c:8e:26:28:43:21:f4:79:7c:72:2b:f7:d1:f7: 76:86:a4:3e:17:ee:04:fb:62:4e:d9:cd:af:4f:50: dd:b1:68:fe:e2:37:a5:87:9b:7d:55:45:cb:6f:68: 14:93:e6:11:14:e8:23:84:0c:6c:af:87:23:1b:23: db:97:95:cb:f2:95:6f:04:9c:56:0e:ef:2a:57:b6: 0e:d4:6a:35:7a:8f:59:a6:99:72:73:ee:79:1b:1f: 7b:c7:19:2a:d4:d1:6c:2a:ec:44:56:e3:a5:b0:85: 27:0a:88:19:ad:56:49:fe:1a:20:9d:0d:c8:0c:0a: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:78:75:92:2A:DB:29:CD:1C:3E:56:D8:5C:57:B4:3E:61:06:F4:6D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/unh1kirbKc0cPlbYXFe0PmEG9G0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.160.0/21 Signature Algorithm: sha256WithRSAEncryption 48:fb:74:fd:ca:2e:52:d9:eb:26:95:9a:92:38:ad:90:69:62: 1d:35:1b:99:00:17:04:aa:a7:79:7a:6e:68:5d:50:33:fe:42: 8d:96:15:d6:80:b2:d0:2d:7f:46:af:c2:57:db:df:47:bb:f7: 59:c6:be:07:70:38:3b:4e:da:95:c6:ba:8f:72:2a:85:cd:e5: e2:f4:1a:82:56:31:cb:ac:60:51:34:6c:2d:44:ec:3d:a4:bf: ad:8e:7c:eb:16:09:e7:9f:b5:ab:a7:5c:c2:eb:d7:0a:ee:ea: 82:b7:fa:e1:9c:68:bd:74:48:99:b6:49:c6:4f:5d:7c:0b:1b: d0:08:0a:52:7f:cc:de:60:85:91:cc:5b:4e:2c:69:e4:c5:71: 2a:69:6e:60:c8:0f:46:a8:75:ff:ba:a4:fc:a8:4d:30:f9:00: d4:2d:1f:76:ea:ac:0d:67:af:12:88:86:c1:83:cd:5e:9f:d2: 55:41:3e:76:c6:85:49:31:81:58:71:b9:16:6b:8d:b2:92:1a: 02:18:8f:81:57:de:86:4d:2e:06:08:12:6f:93:4b:4f:01:3e: 0f:ad:25:58:14:9e:14:a6:77:8e:1d:99:eb:1c:26:1c:1e:99: 5c:9f:16:5b:c6:8b:f4:50:3e:d2:e7:19:3e:fc:81:15:37:c8: f5:94:f0:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJBNzg3NTkyMkFEQjI5 Q0QxQzNFNTZEODVDNTdCNDNFNjEwNkY0NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZburIedCtiI8TsZAAjV4mM+8B9jI7ET1+LNMHJiaPy9fn50Tj niEMkoIcVbfkZZTEHgiUx962+sGOz6bXeWyN871NHIpsc86UEOahLfYUgBHxJJOS l22LP6+B6waYQciQayb+hyY/x6BrePv83+Mx5BNT5u9iJoRnqHQZlLfvapSbtpls g/8MjiYoQyH0eXxyK/fR93aGpD4X7gT7Yk7Zza9PUN2xaP7iN6WHm31VRctvaBST 5hEU6COEDGyvhyMbI9uXlcvylW8EnFYO7ypXtg7UajV6j1mmmXJz7nkbH3vHGSrU 0Wwq7ERW46WwhScKiBmtVkn+GiCdDcgMCla7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUunh1kirbKc0cPlbYXFe0PmEG9G0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VuaDFraXJiS2MwY1BsYllY RmUwUG1FRzlHMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 saAwDQYJKoZIhvcNAQELBQADggEBAEj7dP3KLlLZ6yaVmpI4rZBpYh01G5kAFwSq p3l6bmhdUDP+Qo2WFdaAstAtf0avwlfb30e791nGvgdwODtO2pXGuo9yKoXN5eL0 GoJWMcusYFE0bC1E7D2kv62OfOsWCeeftaunXMLr1wru6oK3+uGcaL10SJm2ScZP XXwLG9AIClJ/zN5ghZHMW04saeTFcSppbmDID0aodf+6pPyoTTD5ANQtH3bqrA1n rxKIhsGDzV6f0lVBPnbGhUkxgVhxuRZrjbKSGgIYj4FX3oZNLgYIEm+TS08BPg+t JVgUnhSmd44dmescJhwemVyfFlvGi/RQPtLnGT78gRU3yPWU8H4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:09 2025 by rpki-client