$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5vpFHTlPagQuRzB8b89hv2TIxeg.roa File: 5vpFHTlPagQuRzB8b89hv2TIxeg.roa (raw, json) Hash identifier: 0+XUGYQvVVQoYAE+BM7zgMAuc9Da9V4r1x/7/KxE+k8= Subject key identifier: E6:FA:45:1D:39:4F:6A:04:2E:47:30:7C:6F:CF:61:BF:64:C8:C5:E8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33AC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5vpFHTlPagQuRzB8b89hv2TIxeg.roa Signing time: Mon 10 Feb 2025 13:51:39 +0000 ROA not before: Mon 10 Feb 2025 13:51:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.96.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13228 (0x33ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E6FA451D394F6A042E47307C6FCF61BF64C8C5E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:80:eb:b5:18:72:ae:a3:6a:c2:0e:58:56: b4:ed:15:9f:49:78:37:81:e3:05:4e:e1:e9:9b:51: df:6c:34:1a:05:dd:76:62:15:48:5e:50:71:8b:06: 2b:cd:bd:1a:c9:61:bd:17:6f:b5:3e:b3:3c:84:7f: a7:e5:b0:9a:1a:4b:b7:8e:d5:ed:e8:19:ad:2b:44: 57:19:b3:df:5b:ce:76:3c:8c:d0:27:c7:d7:37:da: b4:4a:1c:ab:6f:e8:4d:44:c6:fd:c6:70:c0:e9:97: 77:d6:79:93:61:b3:34:74:25:42:b8:b2:fe:dc:49: d8:ed:1f:24:3e:c9:8c:df:5b:83:8a:f2:c7:8d:50: a0:e5:c1:00:cb:3d:bf:17:01:6b:3c:c5:cf:bc:96: 2c:4d:6c:e9:b5:b5:d9:a8:89:23:b0:a7:c1:4e:6f: 25:0d:80:3d:d1:7d:d3:b2:d8:6b:f8:9f:20:10:ef: 4d:47:83:42:5e:8d:14:b3:35:55:35:79:76:10:ff: be:5b:48:09:e1:f4:1b:3e:73:89:78:6c:e3:45:d3: d3:64:5c:26:29:87:50:69:82:95:35:3f:43:dd:75: fb:ee:8d:50:21:f9:9a:ff:c8:56:8d:2a:53:f7:1b: d2:86:e2:c7:26:54:60:4c:aa:a8:a5:94:68:75:cc: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FA:45:1D:39:4F:6A:04:2E:47:30:7C:6F:CF:61:BF:64:C8:C5:E8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5vpFHTlPagQuRzB8b89hv2TIxeg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.96.0/19 Signature Algorithm: sha256WithRSAEncryption 79:33:c6:7c:23:ce:43:05:b3:a5:c4:de:7f:17:de:11:95:00: ee:38:a4:d5:21:06:39:16:9f:ce:38:b9:6a:a7:c3:48:b7:b6: da:66:17:b1:28:50:dc:3d:21:3c:a4:2e:6b:10:6d:60:19:d7: 35:66:9f:c4:21:e3:be:9b:9a:cf:36:b6:8a:06:e4:3f:2d:bb: 31:29:d6:68:47:d7:6c:5c:a3:b1:f6:6b:3b:71:8c:8d:ec:64: 95:f8:d4:97:ef:9e:25:0e:1c:fa:93:b8:a1:32:eb:21:6c:9d: 51:9f:3b:a4:12:b0:de:ff:8e:4a:ac:7e:07:c9:c7:74:0b:4a: 64:db:2b:ca:49:04:81:e5:aa:67:cd:25:af:9c:29:b4:ec:b6: 71:a1:6e:d3:8b:76:b3:30:ee:dc:21:4c:ba:b3:8e:10:b6:89: 51:3c:e5:d3:30:8f:1c:7d:48:fe:64:f3:66:e6:76:d2:92:f0: 36:a5:c0:11:df:98:85:cd:a0:cf:1c:c2:54:f3:bd:d7:42:0d: ed:33:37:88:31:9f:9a:a8:7a:53:76:74:18:d0:e8:16:16:f6: 68:3d:dc:3e:c3:da:16:77:e6:99:c0:2f:ec:04:e5:ee:de:2b: 2c:7f:83:9a:c8:47:a3:00:96:7c:3c:9a:ee:58:59:16:41:84: 19:40:dd:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU2RkE0NTFEMzk0RjZB MDQyRTQ3MzA3QzZGQ0Y2MUJGNjRDOEM1RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5V4DrtRhyrqNqwg5YVrTtFZ9JeDeB4wVO4embUd9sNBoF3XZi FUheUHGLBivNvRrJYb0Xb7U+szyEf6flsJoaS7eO1e3oGa0rRFcZs99bznY8jNAn x9c32rRKHKtv6E1Exv3GcMDpl3fWeZNhszR0JUK4sv7cSdjtHyQ+yYzfW4OK8seN UKDlwQDLPb8XAWs8xc+8lixNbOm1tdmoiSOwp8FObyUNgD3RfdOy2Gv4nyAQ701H g0JejRSzNVU1eXYQ/75bSAnh9Bs+c4l4bONF09NkXCYph1BpgpU1P0PddfvujVAh +Zr/yFaNKlP3G9KG4scmVGBMqqillGh1zGUJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5vpFHTlPagQuRzB8b89hv2TIxegwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzV2cEZIVGxQYWdRdVJ6Qjhi ODlodjJUSXhlZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6GAwDQYJKoZIhvcNAQELBQADggEBAHkzxnwjzkMFs6XE3n8X3hGVAO44pNUhBjkW n844uWqnw0i3ttpmF7EoUNw9ITykLmsQbWAZ1zVmn8Qh476bms82tooG5D8tuzEp 1mhH12xco7H2aztxjI3sZJX41JfvniUOHPqTuKEy6yFsnVGfO6QSsN7/jkqsfgfJ x3QLSmTbK8pJBIHlqmfNJa+cKbTstnGhbtOLdrMw7twhTLqzjhC2iVE85dMwjxx9 SP5k82bmdtKS8DalwBHfmIXNoM8cwlTzvddCDe0zN4gxn5qoelN2dBjQ6BYW9mg9 3D7D2hZ35pnAL+wE5e7eKyx/g5rIR6MAlnw8mu5YWRZBhBlA3ZM= -----END CERTIFICATE-----Generated at Fri Apr 18 22:47:23 2025 by rpki-client