$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zlNDFXHyqEDVXL9IDvV-BNcV2II.roa File: zlNDFXHyqEDVXL9IDvV-BNcV2II.roa (raw, json) Hash identifier: nHImYdSc/LZbt4FYsjH6/pgvSOl90f1G3jq5JHzPzgw= Subject key identifier: CE:53:43:15:71:F2:A8:40:D5:5C:BF:48:0E:F5:7E:04:D7:15:D8:82 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 341A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zlNDFXHyqEDVXL9IDvV-BNcV2II.roa Signing time: Mon 10 Feb 2025 13:52:05 +0000 ROA not before: Mon 10 Feb 2025 13:52:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13338 (0x341a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CE53431571F2A840D55CBF480EF57E04D715D882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:a8:5c:ae:2b:d0:bd:85:80:e1:eb:80:1c: 87:cf:dc:1a:2e:db:21:5b:65:08:ba:08:b7:ae:9c: 30:a5:56:a4:85:55:a7:2d:7f:9a:6f:18:99:f7:89: b6:6e:9a:30:73:45:5d:81:eb:7e:e3:63:01:06:c7: 7a:df:35:cd:3a:a1:70:de:2c:a6:e7:5c:9c:e1:bd: 69:a1:94:a3:d5:79:3f:9e:48:be:3e:3e:7c:b1:39: f8:0c:ab:9f:44:61:f1:c3:7e:7e:3f:81:c1:6a:91: b5:5f:ad:2e:86:9c:c2:e2:c1:f5:f4:bc:18:39:10: 5d:8c:7f:eb:b3:69:71:4b:96:5f:16:6a:f0:b1:66: 3b:fd:ca:c9:8e:c9:e5:c0:97:3d:2f:47:a6:ac:cf: 0e:a9:a0:45:09:93:82:66:a8:03:b2:54:60:7f:51: 22:5c:70:aa:24:c5:a9:bb:3a:9d:40:72:5d:74:b5: f2:d5:f1:8d:46:d6:99:10:12:de:a4:63:f5:11:06: d8:f7:35:cd:27:49:d6:3c:17:07:ba:c0:6b:eb:8a: 33:ca:00:e9:e5:d7:c4:92:b5:85:27:fc:bc:9d:14: f5:01:59:19:05:0c:64:46:c7:e5:56:de:57:a2:7a: aa:77:ba:3b:65:40:b7:a0:d0:82:77:30:dc:66:39: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:43:15:71:F2:A8:40:D5:5C:BF:48:0E:F5:7E:04:D7:15:D8:82 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zlNDFXHyqEDVXL9IDvV-BNcV2II.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.253.0/24 Signature Algorithm: sha256WithRSAEncryption 45:0c:1e:d6:58:9f:c3:d9:e2:2d:f8:39:09:e5:21:29:d0:02: ad:e0:7c:47:1a:40:bd:50:22:c6:1f:c1:80:e0:8e:cf:8e:e3: 30:a7:9f:c9:f3:cf:9f:cd:a5:25:3f:9f:f5:54:c0:6c:96:a2: 17:95:18:76:de:de:02:92:e8:29:e6:30:7d:47:b4:cf:75:45: c2:3d:54:6d:26:ee:42:d9:2e:c7:ed:d1:69:66:80:11:34:74: a8:1d:ae:76:14:a5:03:b0:9e:c3:3e:3c:42:1e:04:11:b7:02: 43:ef:f0:c1:6e:c9:0f:44:46:d5:20:b7:59:83:23:2a:14:14: 80:5d:b9:68:12:2b:4a:51:13:8c:ef:74:92:f4:2e:07:02:e5: 81:a3:33:e5:ee:71:b6:7b:e7:57:f3:15:8b:7b:a0:2f:e0:ec: ea:45:22:80:19:26:4e:51:9d:b3:e5:b4:b0:2d:06:77:91:d2: 0f:15:e8:2c:31:32:08:16:1a:08:79:26:33:a2:ee:ef:07:11: 91:26:69:0a:a6:33:80:5e:a8:9e:a7:33:c9:ab:a6:e1:f0:17: b9:81:2e:20:79:4b:04:3c:aa:0b:7a:0b:d3:cb:61:7f:f1:e0: fd:99:76:ea:cd:2b:39:a0:d3:53:9f:9e:c8:20:03:31:2d:10: cd:f0:4b:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFNTM0MzE1NzFGMkE4 NDBENTVDQkY0ODBFRjU3RTA0RDcxNUQ4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+FKhcrivQvYWA4euAHIfP3Bou2yFbZQi6CLeunDClVqSFVact f5pvGJn3ibZumjBzRV2B637jYwEGx3rfNc06oXDeLKbnXJzhvWmhlKPVeT+eSL4+ PnyxOfgMq59EYfHDfn4/gcFqkbVfrS6GnMLiwfX0vBg5EF2Mf+uzaXFLll8WavCx Zjv9ysmOyeXAlz0vR6aszw6poEUJk4JmqAOyVGB/USJccKokxam7Op1Acl10tfLV 8Y1G1pkQEt6kY/URBtj3Nc0nSdY8Fwe6wGvrijPKAOnl18SStYUn/LydFPUBWRkF DGRGx+VW3leieqp3ujtlQLeg0IJ3MNxmOaQbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzlNDFXHyqEDVXL9IDvV+BNcV2IIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3psTkRGWEh5cUVEVlhMOUlE dlYtQk5jVjJJSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0 sP0wDQYJKoZIhvcNAQELBQADggEBAEUMHtZYn8PZ4i34OQnlISnQAq3gfEcaQL1Q IsYfwYDgjs+O4zCnn8nzz5/NpSU/n/VUwGyWoheVGHbe3gKS6CnmMH1HtM91RcI9 VG0m7kLZLsft0WlmgBE0dKgdrnYUpQOwnsM+PEIeBBG3AkPv8MFuyQ9ERtUgt1mD IyoUFIBduWgSK0pRE4zvdJL0LgcC5YGjM+XucbZ751fzFYt7oC/g7OpFIoAZJk5R nbPltLAtBneR0g8V6CwxMggWGgh5JjOi7u8HEZEmaQqmM4BeqJ6nM8mrpuHwF7mB LiB5SwQ8qgt6C9PLYX/x4P2ZdurNKzmg01OfnsggAzEtEM3wSwI= -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:51 2025 by rpki-client