$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FsIlQ9o5x6j2u727BYywZnnVd4o.roa File: FsIlQ9o5x6j2u727BYywZnnVd4o.roa (raw, json) Hash identifier: OJyrrldN5dVf29Lb3OBx69UaVWFVo1aTzpkNRWnrE+c= Subject key identifier: 16:C2:25:43:DA:39:C7:A8:F6:BB:BD:BB:05:8C:B0:66:79:D5:77:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3552 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FsIlQ9o5x6j2u727BYywZnnVd4o.roa Signing time: Mon 10 Feb 2025 13:53:14 +0000 ROA not before: Mon 10 Feb 2025 13:53:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13650 (0x3552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=16C22543DA39C7A8F6BBBDBB058CB06679D5778A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:12:5b:c0:ef:1c:03:0f:b3:bd:b2:3e:90: 5a:03:82:04:d8:22:1d:cf:cb:69:cb:49:fb:b5:15: 45:46:a7:f4:c3:1e:e3:aa:da:66:77:d6:e5:08:6d: 00:56:e2:7a:6a:26:5a:29:38:7c:43:21:9d:de:06: 60:4b:cf:4c:19:46:a5:95:4b:4d:7a:2b:85:2e:ac: ae:fc:b1:79:9c:54:df:5d:a1:b9:c6:f8:fd:07:be: e0:fc:62:c7:d7:36:fa:4a:15:e3:bc:fd:50:50:46: 1c:c5:7a:67:25:3c:2f:3d:df:c2:59:d4:e3:60:6b: 58:03:f9:e9:89:46:b6:f5:f2:49:90:d1:02:62:33: d4:84:6b:90:b1:d8:d3:3c:23:fe:a7:d5:60:87:14: ec:98:e1:da:ed:76:90:78:b3:8b:75:df:87:9f:93: bb:3d:03:2b:66:8d:37:73:b3:42:31:b1:74:3e:71: 2b:52:17:fc:ec:6c:f8:0a:63:3e:49:e6:3f:9e:69: ad:47:ea:f1:ce:bf:e2:49:bd:2d:13:13:3c:b6:34: a9:9a:35:28:40:ed:83:5d:8b:b7:cf:77:35:5e:e8: 0a:6f:1a:39:44:64:05:a7:4d:87:80:f2:20:c2:30: b0:8d:63:7a:b5:83:53:5c:fb:1e:21:a5:c0:6d:65: 6d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:25:43:DA:39:C7:A8:F6:BB:BD:BB:05:8C:B0:66:79:D5:77:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FsIlQ9o5x6j2u727BYywZnnVd4o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.211.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:42:3e:f0:a6:1c:d8:33:22:ac:58:3b:bf:77:d4:e0:7f:c5: 01:35:85:17:c7:d6:9e:08:14:0b:6d:a1:dc:ef:cb:92:95:99: 1a:e5:cd:98:16:d2:a6:4c:5a:7d:b9:b4:2d:bc:31:f9:78:24: 2f:b2:64:10:8d:f2:3a:8f:a9:e2:2d:40:23:c3:52:e9:e9:6b: ba:42:f0:c1:68:9f:e1:46:7c:97:f7:c6:c1:c6:32:d9:51:12: 4b:70:65:de:aa:e0:97:c4:35:1c:18:c2:db:6a:d7:18:c5:bc: 34:45:f8:8a:27:4d:43:be:68:bb:b2:52:cd:65:0f:04:03:b0: c8:38:41:7b:26:c8:77:b4:19:e0:ed:f2:f4:08:5a:d0:54:18: 8a:cc:ac:17:4a:5a:90:63:a8:0a:3a:d7:58:9a:8d:e7:c5:e3: a3:28:f1:ea:ee:45:14:a1:aa:4b:ac:31:f9:cd:32:b7:c1:c0: 34:ec:7c:c3:b9:0a:7e:ff:22:f7:66:85:15:30:f3:9e:62:fc: 02:f9:91:b1:92:85:9d:eb:09:88:c7:0b:a7:c7:96:87:7f:92: 48:00:b5:93:00:22:25:cd:87:a5:d7:27:61:97:d4:a6:a0:d5: 84:31:0d:da:b8:b1:3d:c5:b4:8f:4c:9b:87:bc:d6:de:e3:59: 5c:b9:66:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2QzIyNTQzREEzOUM3 QThGNkJCQkRCQjA1OENCMDY2NzlENTc3OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOQxJbwO8cAw+zvbI+kFoDggTYIh3Py2nLSfu1FUVGp/TDHuOq 2mZ31uUIbQBW4npqJlopOHxDIZ3eBmBLz0wZRqWVS016K4UurK78sXmcVN9dobnG +P0HvuD8YsfXNvpKFeO8/VBQRhzFemclPC8938JZ1ONga1gD+emJRrb18kmQ0QJi M9SEa5Cx2NM8I/6n1WCHFOyY4drtdpB4s4t134efk7s9AytmjTdzs0IxsXQ+cStS F/zsbPgKYz5J5j+eaa1H6vHOv+JJvS0TEzy2NKmaNShA7YNdi7fPdzVe6ApvGjlE ZAWnTYeA8iDCMLCNY3q1g1Nc+x4hpcBtZW0vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFsIlQ9o5x6j2u727BYywZnnVd4owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZzSWxROW81eDZqMnU3MjdC WXl3Wm5uVmQ0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6dMwDQYJKoZIhvcNAQELBQADggEBAJtCPvCmHNgzIqxYO7931OB/xQE1hRfH1p4I FAttodzvy5KVmRrlzZgW0qZMWn25tC28Mfl4JC+yZBCN8jqPqeItQCPDUunpa7pC 8MFon+FGfJf3xsHGMtlREktwZd6q4JfENRwYwttq1xjFvDRF+IonTUO+aLuyUs1l DwQDsMg4QXsmyHe0GeDt8vQIWtBUGIrMrBdKWpBjqAo611iajefF46Mo8eruRRSh qkusMfnNMrfBwDTsfMO5Cn7/IvdmhRUw855i/AL5kbGShZ3rCYjHC6fHlod/kkgA tZMAIiXNh6XXJ2GX1Kag1YQxDdq4sT3FtI9Mm4e81t7jWVy5ZjE= -----END CERTIFICATE-----Generated at Fri Apr 18 23:21:21 2025 by rpki-client