$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WTXaYK5K7PZssw0EkhacdA-OOM.roa File: 1WTXaYK5K7PZssw0EkhacdA-OOM.roa (raw, json) Hash identifier: HxEueAQQh7mlNhMqwwfS4RLYB0d0Qy30qQnNDwm65j0= Subject key identifier: D5:64:D7:69:82:B9:2B:B3:D9:B2:CC:34:12:48:5A:71:D0:3E:38:E3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3671 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WTXaYK5K7PZssw0EkhacdA-OOM.roa Signing time: Mon 10 Feb 2025 13:54:19 +0000 ROA not before: Mon 10 Feb 2025 13:54:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13937 (0x3671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D564D76982B92BB3D9B2CC3412485A71D03E38E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:65:ea:5e:86:59:33:db:2e:74:19:69:90:55: 9e:30:fd:ba:8e:cc:83:5b:90:5a:28:30:6c:e4:e6: 23:42:ce:82:2d:2d:a4:5c:08:8d:6f:84:34:e4:b2: c2:8d:9e:63:32:af:5e:b1:5d:57:cc:4d:1f:0d:fe: 8c:bb:ba:44:15:8c:b9:4c:4c:d9:f6:60:d8:8b:45: 65:7e:2b:10:3e:1b:ee:ea:f2:71:a8:39:97:9e:7b: a5:70:a8:37:d4:5a:71:7b:2c:be:48:ac:bb:39:59: a8:ce:d4:15:3a:a0:f4:67:1e:99:6c:40:66:0b:bb: 11:45:92:0a:61:4c:53:e9:fb:06:3a:5e:07:be:7b: 58:eb:b9:08:f7:87:89:57:48:99:5f:61:e6:2c:73: ce:2d:f3:13:5c:e2:2d:b1:06:b6:0b:42:96:af:75: 90:09:f9:2a:15:ec:3f:68:5f:4d:c3:6c:67:b5:1a: c2:f0:b0:4e:4f:6e:fe:95:4c:e1:a9:c0:52:63:af: 63:da:7b:09:68:ed:7f:26:dd:24:be:67:6d:5b:42: ee:5e:6e:86:d9:15:9f:ac:3f:90:3e:08:16:27:47: 3e:26:6b:23:66:e7:82:9c:79:be:fe:3b:53:4d:c4: 22:19:ad:52:fb:6f:71:19:7d:1d:70:64:86:97:1b: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:D7:69:82:B9:2B:B3:D9:B2:CC:34:12:48:5A:71:D0:3E:38:E3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WTXaYK5K7PZssw0EkhacdA-OOM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.248.0/21 Signature Algorithm: sha256WithRSAEncryption 04:13:90:5b:6c:e8:52:f8:ff:4e:23:ba:ca:dd:78:13:e8:dd: eb:e7:b0:9d:c6:b9:2c:1c:c9:26:d1:cd:7e:d5:33:08:cf:48: 7e:44:6a:4c:ac:cc:1a:ad:9c:58:10:6e:54:43:3c:e9:df:cb: 38:c4:0b:0f:eb:86:d0:6c:8a:14:e8:9e:6d:46:73:50:b9:51: ed:52:04:6f:64:50:42:06:39:fb:a1:93:05:f6:e9:51:a6:c1: 4e:74:fe:27:d7:71:11:a2:71:ce:84:aa:2d:07:35:ee:f5:a1: f3:0d:6d:99:c0:d1:e4:20:ce:04:80:c3:17:21:8c:fb:cc:fd: 86:8e:05:8e:a1:9c:2d:b5:ab:5b:a4:08:81:23:48:20:4b:a6: 24:00:eb:ca:09:16:33:7c:b7:58:9c:63:4e:23:64:1a:b6:78: d7:b3:8b:d5:f2:46:5a:1b:d9:c4:92:8b:a2:b2:f2:36:67:61: e3:e2:99:41:3b:2c:94:f8:10:06:5d:73:76:bd:63:ce:d1:80: 20:8e:27:85:66:4d:de:56:a2:14:b9:dc:7b:36:30:24:d5:bb: 19:7d:6d:8f:90:d7:01:84:9d:24:cc:11:a5:69:10:88:10:37: c7:58:c4:88:d0:7a:1b:f3:53:f7:28:7a:01:20:7a:81:3d:03: fa:11:e2:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1NjRENzY5ODJCOTJC QjNEOUIyQ0MzNDEyNDg1QTcxRDAzRTM4RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTZepehlkz2y50GWmQVZ4w/bqOzINbkFooMGzk5iNCzoItLaRc CI1vhDTkssKNnmMyr16xXVfMTR8N/oy7ukQVjLlMTNn2YNiLRWV+KxA+G+7q8nGo OZeee6VwqDfUWnF7LL5IrLs5WajO1BU6oPRnHplsQGYLuxFFkgphTFPp+wY6Xge+ e1jruQj3h4lXSJlfYeYsc84t8xNc4i2xBrYLQpavdZAJ+SoV7D9oX03DbGe1GsLw sE5Pbv6VTOGpwFJjr2Paewlo7X8m3SS+Z21bQu5ebobZFZ+sP5A+CBYnRz4mayNm 54Kceb7+O1NNxCIZrVL7b3EZfR1wZIaXG2tfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1WTXaYK5K7PZssw0EkhacdA+OOMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFXVFhhWUs1SzdQWnNzdzBF a2hhY2RBLU9PTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6PgwDQYJKoZIhvcNAQELBQADggEBAAQTkFts6FL4/04jusrdeBPo3evnsJ3GuSwc ySbRzX7VMwjPSH5EakyszBqtnFgQblRDPOnfyzjECw/rhtBsihTonm1Gc1C5Ue1S BG9kUEIGOfuhkwX26VGmwU50/ifXcRGicc6Eqi0HNe71ofMNbZnA0eQgzgSAwxch jPvM/YaOBY6hnC21q1ukCIEjSCBLpiQA68oJFjN8t1icY04jZBq2eNezi9XyRlob 2cSSi6Ky8jZnYePimUE7LJT4EAZdc3a9Y87RgCCOJ4VmTd5WohS53Hs2MCTVuxl9 bY+Q1wGEnSTMEaVpEIgQN8dYxIjQehvzU/coegEgeoE9A/oR4mk= -----END CERTIFICATE-----Generated at Fri Apr 18 22:36:55 2025 by rpki-client