$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/EvuCTEKYYH7BPrGDqvME-eQoLlA.roa File: EvuCTEKYYH7BPrGDqvME-eQoLlA.roa (raw, json) Hash identifier: xoQaTKSmw2oP2pi+xh38oCL7X/3E/vYaLZp9eJ/qieM= Subject key identifier: 12:FB:82:4C:42:98:60:7E:C1:3E:B1:83:AA:F3:04:F9:E4:28:2E:50 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0DAF Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/EvuCTEKYYH7BPrGDqvME-eQoLlA.roa Signing time: Mon 10 Feb 2025 14:06:11 +0000 ROA not before: Mon 10 Feb 2025 14:06:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 123.252.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 08:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3503 (0xdaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Feb 10 14:06:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=12FB824C4298607EC13EB183AAF304F9E4282E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:00:84:75:09:14:27:4d:04:3f:3d:d1:0f: ee:26:1a:fc:07:fa:b6:f4:af:74:24:f3:ba:31:0c: b9:15:63:75:b8:0b:69:c5:02:4d:57:38:76:ee:1c: f7:49:06:2f:0f:60:15:8b:2d:51:21:c3:ec:ca:be: 4c:d8:88:69:0f:dc:ce:19:14:b5:e1:69:17:5a:f0: d2:59:3f:07:be:8c:58:e6:99:2f:fc:32:39:e3:70: c3:70:28:c7:95:40:72:e0:68:a8:b0:45:14:e4:4b: c6:6f:31:21:b3:31:79:fe:29:0e:e7:17:2d:b8:e6: 20:a4:4d:43:57:f2:49:ed:14:90:88:2d:13:de:b0: 75:79:81:b2:ec:29:04:31:76:ff:23:04:76:7a:7a: 1c:39:09:76:f8:80:cb:39:ea:40:d8:1e:36:71:6a: 9f:46:11:fe:f8:a9:8e:d9:8f:dc:25:3b:1d:8f:77: 42:72:89:b2:48:eb:7f:ea:e5:49:ee:da:3e:d2:c1: ae:7f:30:a7:b3:41:86:13:b6:3c:14:95:a6:36:72: e0:f1:e5:73:6f:c3:7c:e5:d2:27:b6:69:10:9f:7a: bc:90:26:69:c2:cf:49:78:18:e5:c8:71:8a:51:c5: 7a:61:42:b4:e9:61:07:ba:6a:29:f7:72:f6:8a:dc: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FB:82:4C:42:98:60:7E:C1:3E:B1:83:AA:F3:04:F9:E4:28:2E:50 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/EvuCTEKYYH7BPrGDqvME-eQoLlA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.252.0.0/17 Signature Algorithm: sha256WithRSAEncryption 83:f5:de:a2:80:80:7b:d1:ac:f0:10:3a:30:df:2a:13:37:9e: 4f:5c:d2:ee:04:22:ef:85:51:84:c8:2f:27:6c:6b:85:d9:cd: 1b:fb:db:d6:33:ff:62:a5:38:e3:44:fc:1f:f3:0d:b4:3b:2f: e4:bb:da:0d:b0:cf:a5:e9:0c:9e:3e:64:db:bc:ff:b8:33:25: ce:d6:08:80:02:16:a8:3e:76:d2:91:db:f4:9c:ee:f4:21:1e: 35:6b:63:6b:84:b4:ba:15:82:ce:ce:6e:75:71:94:00:0e:e2: 41:ca:47:5c:56:68:5f:ef:ff:aa:57:9b:13:6f:31:62:06:5b: d9:55:06:99:43:b4:8d:be:15:bb:86:5c:af:ac:c4:88:50:41: cd:6e:65:d6:ad:4f:ab:68:2f:a1:98:4e:14:ee:a0:25:a5:ed: 8c:92:5a:ee:30:43:f0:e8:dd:e8:98:27:eb:a6:42:8c:67:ce: b0:bd:8f:08:78:97:b4:07:a5:4c:6c:d2:f5:b1:ff:ae:6c:5e: 4d:e4:7b:35:ab:89:28:a5:bc:04:78:07:94:aa:42:34:50:e1: aa:12:ea:77:1d:9d:cd:f5:1c:17:a8:b2:e5:ac:31:5d:2a:6b: 98:b1:6a:cc:c1:62:0f:c2:a9:16:ac:26:7b:36:fe:51:47:b4: 42:2e:03:c7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTAyMTAx NDA2MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEyRkI4MjRDNDI5ODYw N0VDMTNFQjE4M0FBRjMwNEY5RTQyODJFNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaHACEdQkUJ00EPz3RD+4mGvwH+rb0r3Qk87oxDLkVY3W4C2nF Ak1XOHbuHPdJBi8PYBWLLVEhw+zKvkzYiGkP3M4ZFLXhaRda8NJZPwe+jFjmmS/8 MjnjcMNwKMeVQHLgaKiwRRTkS8ZvMSGzMXn+KQ7nFy245iCkTUNX8kntFJCILRPe sHV5gbLsKQQxdv8jBHZ6ehw5CXb4gMs56kDYHjZxap9GEf74qY7Zj9wlOx2Pd0Jy ibJI63/q5Unu2j7Swa5/MKezQYYTtjwUlaY2cuDx5XNvw3zl0ie2aRCferyQJmnC z0l4GOXIcYpRxXphQrTpYQe6ain3cvaK3OhJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEvuCTEKYYH7BPrGDqvME+eQoLlAwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0V2dUNURUtZWUg3QlByR0Rx dk1FLWVRb0xsQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd7 /AAwDQYJKoZIhvcNAQELBQADggEBAIP13qKAgHvRrPAQOjDfKhM3nk9c0u4EIu+F UYTILydsa4XZzRv729Yz/2KlOONE/B/zDbQ7L+S72g2wz6XpDJ4+ZNu8/7gzJc7W CIACFqg+dtKR2/Sc7vQhHjVrY2uEtLoVgs7ObnVxlAAO4kHKR1xWaF/v/6pXmxNv MWIGW9lVBplDtI2+FbuGXK+sxIhQQc1uZdatT6toL6GYThTuoCWl7YySWu4wQ/Do 3eiYJ+umQoxnzrC9jwh4l7QHpUxs0vWx/65sXk3kezWriSilvAR4B5SqQjRQ4aoS 6ncdnc31HBeosuWsMV0qa5ixaszBYg/CqRasJns2/lFHtEIuA8c= -----END CERTIFICATE-----Generated at Fri Apr 18 03:52:39 2025 by rpki-client