$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z09SXYqzmeVXt0OmXzthZP2VZYQ.roa File: Z09SXYqzmeVXt0OmXzthZP2VZYQ.roa (raw, json) Hash identifier: iEYyCUJ5FYudEuyxwZlkOpN90lVZPIPFrI2+UdWX134= Subject key identifier: 67:4F:52:5D:8A:B3:99:E5:57:B7:43:A6:5F:3B:61:64:FD:95:65:84 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3613 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z09SXYqzmeVXt0OmXzthZP2VZYQ.roa Signing time: Mon 10 Feb 2025 13:53:57 +0000 ROA not before: Mon 10 Feb 2025 13:53:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13843 (0x3613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=674F525D8AB399E557B743A65F3B6164FD956584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:3a:89:ad:05:1a:18:d5:9a:7a:70:6e:51: 95:ea:5f:28:93:52:a8:5e:71:3d:d9:43:36:40:23: 2f:d8:ef:a8:4a:cd:66:2d:ac:04:e8:a6:24:b2:d3: e9:cf:a4:e5:f3:9b:f2:7f:ab:d8:3c:24:f1:0e:b3: 74:45:2d:79:b8:e0:93:a2:c3:05:18:cf:b2:8f:96: 2c:03:4d:b7:81:18:e3:37:e1:0f:58:40:79:84:34: e7:74:90:2a:91:c0:87:4c:9b:79:9e:76:86:42:9e: 0d:dd:c2:5e:ad:4e:ac:c6:e3:f8:9f:d7:68:de:ab: 71:5f:ee:10:a5:c3:5c:e3:e5:3b:f8:92:c6:d6:52: 3d:bf:4d:0b:32:3d:20:d7:54:4e:0b:d4:c8:c9:5f: 54:6f:0e:36:b6:ad:0a:99:3c:79:45:7c:1d:38:cc: 3d:7e:78:c8:f3:f8:4e:77:20:27:09:aa:fe:1d:ae: 82:4b:37:b0:6c:c5:f6:f4:65:9f:ec:91:a9:82:0e: 8e:55:c4:8d:db:d2:5e:69:9b:35:61:9d:58:11:ae: 8d:cd:b4:ee:17:cf:67:1e:b4:f7:2e:39:68:e1:37: 93:18:4b:bf:ae:8f:8d:1f:14:21:1a:9b:3c:9d:cd: 10:ff:7a:2f:c4:1f:fe:a2:54:77:ac:97:47:e2:52: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4F:52:5D:8A:B3:99:E5:57:B7:43:A6:5F:3B:61:64:FD:95:65:84 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z09SXYqzmeVXt0OmXzthZP2VZYQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.168.0/21 Signature Algorithm: sha256WithRSAEncryption 12:37:f7:c6:01:7f:69:1e:76:ae:89:af:48:82:5f:af:cc:28: bf:10:8c:5b:86:c9:58:23:4c:8e:3a:81:b3:bc:84:96:97:21: dd:b3:e7:41:b4:b1:af:42:c9:9a:de:51:c0:7f:bf:c1:b4:14: 1f:7b:34:75:c4:57:72:da:dc:9c:08:3a:b8:9f:61:68:7f:98: 3a:8c:5b:1f:3f:55:10:56:91:5e:83:e8:2d:bc:a4:40:f0:9a: d8:8a:2a:a0:5c:7c:1b:56:35:ef:ec:62:20:6f:c6:6d:cb:fb: 12:4d:d8:8d:2d:82:da:83:94:35:b1:a6:16:37:91:c6:12:c3: 07:23:c1:9c:f1:02:2d:9c:1f:b1:1b:40:bc:4f:b7:d2:92:99: ca:82:47:78:ab:5d:82:74:ff:0b:42:78:31:3b:39:c0:f6:aa: 8a:e1:0c:bf:62:c6:3c:f8:69:1c:79:de:c4:12:f5:06:1a:a9: 8b:90:3a:ec:e3:a9:4c:f0:59:77:3c:0f:70:38:2c:c6:f0:7c: e3:e9:ef:35:63:f5:5f:7f:ac:68:fa:56:6f:6c:e0:b8:45:f4: f3:d4:50:3b:da:26:f5:e1:0d:04:86:ef:a4:b4:8f:9c:38:26: 37:e2:a8:e9:d7:d5:16:32:1a:5d:42:2d:5a:50:29:43:4c:a7: 64:e8:01:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY3NEY1MjVEOEFCMzk5 RTU1N0I3NDNBNjVGM0I2MTY0RkQ5NTY1ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw1zqJrQUaGNWaenBuUZXqXyiTUqhecT3ZQzZAIy/Y76hKzWYt rATopiSy0+nPpOXzm/J/q9g8JPEOs3RFLXm44JOiwwUYz7KPliwDTbeBGOM34Q9Y QHmENOd0kCqRwIdMm3medoZCng3dwl6tTqzG4/if12jeq3Ff7hClw1zj5Tv4ksbW Uj2/TQsyPSDXVE4L1MjJX1RvDja2rQqZPHlFfB04zD1+eMjz+E53ICcJqv4droJL N7Bsxfb0ZZ/skamCDo5VxI3b0l5pmzVhnVgRro3NtO4Xz2cetPcuOWjhN5MYS7+u j40fFCEamzydzRD/ei/EH/6iVHesl0fiUhExAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZ09SXYqzmeVXt0OmXzthZP2VZYQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1owOVNYWXF6bWVWWHQwT21Y enRoWlAyVlpZUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sagwDQYJKoZIhvcNAQELBQADggEBABI398YBf2kedq6Jr0iCX6/MKL8QjFuGyVgj TI46gbO8hJaXId2z50G0sa9CyZreUcB/v8G0FB97NHXEV3La3JwIOrifYWh/mDqM Wx8/VRBWkV6D6C28pEDwmtiKKqBcfBtWNe/sYiBvxm3L+xJN2I0tgtqDlDWxphY3 kcYSwwcjwZzxAi2cH7EbQLxPt9KSmcqCR3irXYJ0/wtCeDE7OcD2qorhDL9ixjz4 aRx53sQS9QYaqYuQOuzjqUzwWXc8D3A4LMbwfOPp7zVj9V9/rGj6Vm9s4LhF9PPU UDvaJvXhDQSG76S0j5w4JjfiqOnX1RYyGl1CLVpQKUNMp2ToAcg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:49 2025 by rpki-client on console.sobornost.net