$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-lhoJqACqNW7HlCI5g5FtAyf5n4.roa File: -lhoJqACqNW7HlCI5g5FtAyf5n4.roa (raw, json) Hash identifier: kXQVzEm1qqtQkLsvz/oi5ss6U5jGJqmYOC6VpJzIqAo= Subject key identifier: FA:58:68:26:A0:02:A8:D5:BB:1E:50:88:E6:0E:45:B4:0C:9F:E6:7E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 348E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-lhoJqACqNW7HlCI5g5FtAyf5n4.roa Signing time: Mon 10 Feb 2025 13:52:29 +0000 ROA not before: Mon 10 Feb 2025 13:52:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.119.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13454 (0x348e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FA586826A002A8D5BB1E5088E60E45B40C9FE67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:2f:80:84:3b:26:bb:40:24:6c:18:92:9e: 11:d0:e7:ff:a7:55:5f:4d:4c:c9:4a:fc:ec:1c:43: 34:58:af:7e:28:f7:44:70:d5:2d:f3:60:09:c0:5c: 73:fd:dd:68:16:f6:c3:1b:16:68:04:0e:da:4c:06: 7c:38:76:af:75:54:38:27:98:a1:43:b2:53:71:7f: 6f:9c:3f:56:7a:1a:66:a7:5d:9f:54:7b:58:cf:8b: d2:d6:7b:a3:3b:21:3b:75:1b:c7:74:73:1a:8a:99: a7:9b:ed:ff:e2:74:67:fc:59:23:29:07:21:b0:eb: 01:a0:0f:6a:c2:6a:d2:78:b1:64:f5:cf:4e:09:d6: 53:86:27:ff:17:52:33:81:9f:c4:e4:84:b2:22:47: 8c:0d:72:09:84:e7:61:e0:d2:da:ba:2f:9a:b7:f5: 07:6f:55:5a:bc:e3:c9:3c:37:91:9e:c6:e3:30:f9: 28:7b:3e:b3:22:6f:6e:73:96:d2:13:3a:53:a3:3a: 13:38:15:b8:bd:37:10:1b:ce:c5:34:a0:ee:0c:85: 8c:09:b5:23:e4:e5:6c:d3:bd:ee:ad:7f:bc:37:8b: eb:a2:db:61:5f:e8:ea:8c:8d:3a:96:ac:e6:e9:0b: 66:94:07:16:bf:3e:67:90:a7:4d:f5:ec:5e:4d:3f: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:58:68:26:A0:02:A8:D5:BB:1E:50:88:E6:0E:45:B4:0C:9F:E6:7E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-lhoJqACqNW7HlCI5g5FtAyf5n4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.119.128/25 Signature Algorithm: sha256WithRSAEncryption 84:c7:68:1d:9c:74:b5:1c:d6:ed:a4:bf:40:a2:ce:57:d7:19: 96:a2:68:0a:ca:c1:ea:c3:f3:3e:55:8a:14:19:bf:8d:3d:63: bc:0c:32:58:76:d1:8d:03:f1:41:6b:19:e9:d4:73:5f:7a:56: f5:f9:5c:74:44:24:9d:f2:63:20:df:43:8c:dd:78:34:78:be: 1f:ee:6e:f0:e2:d5:80:ae:1a:26:9c:3b:1d:f8:3e:18:98:06: 3d:2f:62:e5:ec:90:91:f3:98:7b:09:4a:8b:1b:a2:12:e2:8f: 3c:d7:f1:76:3c:a5:72:6b:a7:24:cb:f4:47:4f:bf:61:5e:44: 56:67:63:89:28:77:77:90:de:36:7e:8f:73:15:a0:f2:1b:88: ad:c6:e3:2b:7f:27:03:39:22:bf:c0:ca:c4:3a:57:c3:47:0e: 63:74:1f:e8:36:c9:e6:51:45:d2:38:13:1e:fc:d4:bb:0f:14: dc:92:2d:2c:6c:c5:97:c4:fa:cc:cb:a2:8f:74:13:83:f6:23: 03:87:a3:d7:2a:c7:bf:01:ad:e1:02:90:60:72:0d:99:92:52: 26:26:3a:1f:b2:93:98:23:b1:ee:d5:aa:75:0a:15:4b:3c:30: 4b:97:6b:2b:e6:d8:6a:e1:e3:67:a2:ca:ae:9c:cb:76:0a:85: f8:d2:40:68 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZBNTg2ODI2QTAwMkE4 RDVCQjFFNTA4OEU2MEU0NUI0MEM5RkU2N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKfi+AhDsmu0AkbBiSnhHQ5/+nVV9NTMlK/OwcQzRYr34o90Rw 1S3zYAnAXHP93WgW9sMbFmgEDtpMBnw4dq91VDgnmKFDslNxf2+cP1Z6GmanXZ9U e1jPi9LWe6M7ITt1G8d0cxqKmaeb7f/idGf8WSMpByGw6wGgD2rCatJ4sWT1z04J 1lOGJ/8XUjOBn8TkhLIiR4wNcgmE52Hg0tq6L5q39QdvVVq848k8N5GexuMw+Sh7 PrMib25zltITOlOjOhM4Fbi9NxAbzsU0oO4MhYwJtSPk5WzTve6tf7w3i+ui22Ff 6OqMjTqWrObpC2aUBxa/PmeQp0317F5NP+BnAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU+lhoJqACqNW7HlCI5g5FtAyf5n4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1saG9KcUFDcU5XN0hsQ0k1 ZzVGdEF5ZjVuNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THeAMA0GCSqGSIb3DQEBCwUAA4IBAQCEx2gdnHS1HNbtpL9Aos5X1xmWomgKysHq w/M+VYoUGb+NPWO8DDJYdtGNA/FBaxnp1HNfelb1+Vx0RCSd8mMg30OM3Xg0eL4f 7m7w4tWArhomnDsd+D4YmAY9L2Ll7JCR85h7CUqLG6IS4o881/F2PKVya6cky/RH T79hXkRWZ2OJKHd3kN42fo9zFaDyG4itxuMrfycDOSK/wMrEOlfDRw5jdB/oNsnm UUXSOBMe/NS7DxTcki0sbMWXxPrMy6KPdBOD9iMDh6PXKse/Aa3hApBgcg2ZklIm JjofspOYI7Hu1ap1ChVLPDBLl2sr5thq4eNnosqunMt2CoX40kBo -----END CERTIFICATE-----Generated at Fri Apr 18 22:47:34 2025 by rpki-client