$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0M7Fhz_qJyyNVwTY0dv4ogcJXEY.roa File: 0M7Fhz_qJyyNVwTY0dv4ogcJXEY.roa (raw, json) Hash identifier: OEfvNSZSTnISOXAOyNYpN6mPZHwS/sUBtGdGpifR33A= Subject key identifier: D0:CE:C5:87:3F:EA:27:2C:8D:57:04:D8:D1:DB:F8:A2:07:09:5C:46 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 364A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0M7Fhz_qJyyNVwTY0dv4ogcJXEY.roa Signing time: Mon 10 Feb 2025 13:54:11 +0000 ROA not before: Mon 10 Feb 2025 13:54:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13898 (0x364a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D0CEC5873FEA272C8D5704D8D1DBF8A207095C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0d:bf:86:7d:d7:41:d3:59:1e:da:a5:eb:91: 1c:11:4d:f3:7c:01:37:14:02:0c:02:8f:fb:d7:de: 5b:bb:40:89:5c:0e:e4:7b:e4:24:14:f0:9f:ec:19: 05:ba:55:25:40:6b:88:bc:42:3e:7d:7b:24:68:c9: 12:71:cb:d3:90:6b:fc:34:37:c2:56:0f:6e:fa:c1: ac:53:20:af:3c:e5:f1:7d:3f:1e:6a:49:d2:77:5d: b9:8b:24:47:0a:29:67:4b:3a:34:af:42:e4:9c:9e: cb:60:ca:bc:dd:cd:95:7b:1d:82:ad:8d:11:cb:97: 67:52:a4:f5:ba:9e:93:96:74:89:fd:91:ed:75:b0: 3f:26:3a:34:76:59:d6:e1:55:4d:0a:9b:25:ff:7a: 45:6b:3e:a6:86:e5:59:4f:2a:85:0f:d9:05:8c:b0: f3:1e:12:08:07:ce:1c:a3:db:a4:27:d3:58:85:95: 47:bc:9d:bd:46:71:61:a7:06:d8:f1:7c:02:57:1e: a3:70:95:11:a2:46:3e:e1:2f:39:6b:ee:d8:97:02: 27:38:7d:32:5c:c8:54:65:84:5b:e7:af:d1:0c:26: 04:a5:6b:69:6d:d9:db:47:6a:30:d9:7d:c4:92:52: 7f:7c:25:6e:ef:ae:af:21:bb:d4:18:aa:44:cf:fe: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CE:C5:87:3F:EA:27:2C:8D:57:04:D8:D1:DB:F8:A2:07:09:5C:46 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0M7Fhz_qJyyNVwTY0dv4ogcJXEY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.192.0/22 Signature Algorithm: sha256WithRSAEncryption 67:1d:49:37:7f:47:cf:b1:f4:56:1d:e7:23:7d:27:27:ff:fa: 8b:ec:9e:79:d5:d0:07:18:a1:3f:f7:60:52:37:09:5a:1d:22: c6:6f:05:c2:cd:ea:03:58:bf:6e:34:00:44:d8:70:42:3f:58: 10:16:1a:1b:ad:fe:04:61:a0:11:9b:dd:2a:63:53:35:9a:27: 77:21:c5:f1:73:cc:ab:6d:36:c1:78:06:90:45:54:b7:7b:f4: 83:23:f2:6c:b8:08:85:bc:af:bc:e7:cf:94:86:95:13:5d:87: 69:c8:e8:5e:f9:dc:a8:cc:9f:f8:23:f9:94:2f:2b:6a:47:ec: ad:a2:e1:33:c5:95:a7:ae:17:7d:b4:6c:49:28:b7:ba:3b:28: 58:13:5c:08:0b:ae:60:9f:65:f9:42:79:18:f9:1c:e8:88:f4: 4c:7d:87:b7:8e:90:d9:37:85:e8:15:fa:8d:15:43:58:9b:7d: 37:7b:27:a7:05:6e:7c:a7:bf:d4:fa:e3:0e:76:c8:27:32:be: db:74:1f:80:a6:ae:65:2f:52:18:6a:67:1a:b2:56:b6:8e:41: 3a:b8:b5:7f:41:d3:a6:4f:3e:ef:33:d6:ac:f9:c2:9f:d5:5d: d6:47:b4:a4:d0:9d:29:91:4d:b4:07:67:1e:0b:fa:8e:07:db: 72:d7:10:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQwQ0VDNTg3M0ZFQTI3 MkM4RDU3MDREOEQxREJGOEEyMDcwOTVDNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQDb+GfddB01ke2qXrkRwRTfN8ATcUAgwCj/vX3lu7QIlcDuR7 5CQU8J/sGQW6VSVAa4i8Qj59eyRoyRJxy9OQa/w0N8JWD276waxTIK885fF9Px5q SdJ3XbmLJEcKKWdLOjSvQuScnstgyrzdzZV7HYKtjRHLl2dSpPW6npOWdIn9ke11 sD8mOjR2WdbhVU0KmyX/ekVrPqaG5VlPKoUP2QWMsPMeEggHzhyj26Qn01iFlUe8 nb1GcWGnBtjxfAJXHqNwlRGiRj7hLzlr7tiXAic4fTJcyFRlhFvnr9EMJgSla2lt 2dtHajDZfcSSUn98JW7vrq8hu9QYqkTP/oMdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0M7Fhz/qJyyNVwTY0dv4ogcJXEYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBNN0Zoel9xSnl5TlZ3VFkw ZHY0b2djSlhFWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6MAwDQYJKoZIhvcNAQELBQADggEBAGcdSTd/R8+x9FYd5yN9Jyf/+ovsnnnV0AcY oT/3YFI3CVodIsZvBcLN6gNYv240AETYcEI/WBAWGhut/gRhoBGb3SpjUzWaJ3ch xfFzzKttNsF4BpBFVLd79IMj8my4CIW8r7znz5SGlRNdh2nI6F753KjMn/gj+ZQv K2pH7K2i4TPFlaeuF320bEkot7o7KFgTXAgLrmCfZflCeRj5HOiI9Ex9h7eOkNk3 hegV+o0VQ1ibfTd7J6cFbnynv9T64w52yCcyvtt0H4CmrmUvUhhqZxqyVraOQTq4 tX9B06ZPPu8z1qz5wp/VXdZHtKTQnSmRTbQHZx4L+o4H23LXEBs= -----END CERTIFICATE-----Generated at Fri Apr 18 22:37:12 2025 by rpki-client