$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDjtUKrI5Y1tekN94Ys1-Bmg0w0.roa File: xDjtUKrI5Y1tekN94Ys1-Bmg0w0.roa (raw, json) Hash identifier: J3jKvXHzIQC2VGMBmzvIL1r0aLS7ol7cDicfUFOAejg= Subject key identifier: C4:38:ED:50:AA:C8:E5:8D:6D:7A:43:7D:E1:8B:35:F8:19:A0:D3:0D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3506 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDjtUKrI5Y1tekN94Ys1-Bmg0w0.roa Signing time: Mon 10 Feb 2025 13:52:56 +0000 ROA not before: Mon 10 Feb 2025 13:52:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 180.177.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13574 (0x3506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C438ED50AAC8E58D6D7A437DE18B35F819A0D30D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:f7:83:b9:82:a9:a9:62:04:88:66:18:1c: 6d:e9:33:fa:b3:17:bf:eb:24:b3:2c:de:a7:24:b9: 1d:bf:31:35:a0:45:ac:d6:01:ce:da:4a:4e:3f:cf: cd:3b:4a:9b:e4:a4:b5:61:86:85:44:46:1d:b8:f6: e0:40:ea:dc:f3:89:fc:04:60:9b:5d:41:16:b7:d2: 42:84:a4:61:16:01:c3:ec:50:a3:11:de:f9:a0:2a: ba:05:16:97:0e:1e:e1:8e:c8:3d:1c:08:df:d3:a2: 91:f8:b9:0b:d1:a3:78:15:63:b3:07:95:ad:61:b7: 6c:8d:93:bd:e8:a1:ef:6b:61:42:5b:2d:b7:ac:7a: 02:84:9a:55:31:1c:37:1b:3c:a2:cb:70:66:12:c4: 57:cb:7e:ae:fc:76:97:c3:ee:2d:2e:f5:80:6a:e9: 73:1e:c9:05:97:c4:1b:cb:c2:25:79:97:cc:f2:e4: 6e:03:ca:1e:11:27:0b:fc:60:ad:47:35:65:3a:8f: 3f:bf:2f:77:12:15:7c:70:94:8e:bc:47:38:4f:eb: 18:c2:45:eb:ed:92:8a:7e:30:17:67:86:89:78:74: 60:13:1e:6d:e6:3f:73:4f:14:5a:e3:1a:f0:84:23: 11:f8:89:a1:c4:e8:cc:bb:c8:21:05:81:43:ec:11: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:38:ED:50:AA:C8:E5:8D:6D:7A:43:7D:E1:8B:35:F8:19:A0:D3:0D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDjtUKrI5Y1tekN94Ys1-Bmg0w0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.46.0/23 Signature Algorithm: sha256WithRSAEncryption 61:dd:fe:2d:11:c2:6a:0a:49:31:63:72:4f:e7:ed:ed:52:e6: d3:5d:70:bf:c6:22:16:32:9c:e9:2a:6e:28:6e:5f:66:4e:95: d1:88:1d:78:47:cd:62:df:ed:cc:85:23:c7:bd:58:80:46:ff: a2:97:72:e6:e8:a0:f5:1a:b0:1d:35:59:88:61:04:95:a4:ac: e2:95:2d:34:de:ce:d1:ec:93:3c:4c:85:a7:d9:15:ec:37:ef: 35:7d:81:85:fa:a8:5d:76:a1:dc:2c:1a:ca:f9:1d:f2:a0:5f: b0:38:5c:d4:59:89:6d:38:2b:e4:0d:e0:7f:7f:65:7b:1d:19: a9:ea:9e:3b:ab:7b:09:b6:b5:af:a0:15:10:e4:4f:0c:33:39: 2f:9d:ba:5c:5a:a7:a6:53:a8:f9:e2:9a:26:1c:ee:39:37:2e: bf:a2:7c:b6:58:03:32:63:60:c6:18:4c:1d:6b:72:f4:76:9e: 8f:a9:5f:08:b2:14:26:b7:9e:b2:99:09:2c:f8:6a:8a:b9:5b: fa:41:be:60:29:f5:2d:c3:1e:ac:8c:1f:25:20:5e:c6:ae:41: 30:ec:fd:b4:8d:85:77:9a:3e:3b:43:57:ca:31:f5:d4:dc:d4: a1:5b:7e:b9:97:02:06:3a:ac:f1:d6:a0:50:dc:3f:be:cd:98: 45:e2:d6:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0MzhFRDUwQUFDOEU1 OEQ2RDdBNDM3REUxOEIzNUY4MTlBMEQzMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTf/eDuYKpqWIEiGYYHG3pM/qzF7/rJLMs3qckuR2/MTWgRazW Ac7aSk4/z807SpvkpLVhhoVERh249uBA6tzzifwEYJtdQRa30kKEpGEWAcPsUKMR 3vmgKroFFpcOHuGOyD0cCN/TopH4uQvRo3gVY7MHla1ht2yNk73ooe9rYUJbLbes egKEmlUxHDcbPKLLcGYSxFfLfq78dpfD7i0u9YBq6XMeyQWXxBvLwiV5l8zy5G4D yh4RJwv8YK1HNWU6jz+/L3cSFXxwlI68RzhP6xjCRevtkop+MBdnhol4dGATHm3m P3NPFFrjGvCEIxH4iaHE6My7yCEFgUPsEUL1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxDjtUKrI5Y1tekN94Ys1+Bmg0w0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hEanRVS3JJNVkxdGVrTjk0 WXMxLUJtZzB3MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sS4wDQYJKoZIhvcNAQELBQADggEBAGHd/i0RwmoKSTFjck/n7e1S5tNdcL/GIhYy nOkqbihuX2ZOldGIHXhHzWLf7cyFI8e9WIBG/6KXcubooPUasB01WYhhBJWkrOKV LTTeztHskzxMhafZFew37zV9gYX6qF12odwsGsr5HfKgX7A4XNRZiW04K+QN4H9/ ZXsdGanqnjurewm2ta+gFRDkTwwzOS+dulxap6ZTqPnimiYc7jk3Lr+ifLZYAzJj YMYYTB1rcvR2no+pXwiyFCa3nrKZCSz4aoq5W/pBvmAp9S3DHqyMHyUgXsauQTDs /bSNhXeaPjtDV8ox9dTc1KFbfrmXAgY6rPHWoFDcP77NmEXi1sQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:26 2025 by rpki-client