$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2F8sNJvnuS7SdvJl5MBYl0vayo.roa File: M2F8sNJvnuS7SdvJl5MBYl0vayo.roa (raw, json) Hash identifier: OVuXIQnYEgFw7rRikz7rh4iDicxvicifPUNuifI+boE= Subject key identifier: 33:61:7C:B0:D2:6F:9E:E4:BB:49:DB:C9:97:93:01:62:5D:2F:6B:2A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3695 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2F8sNJvnuS7SdvJl5MBYl0vayo.roa Signing time: Mon 10 Feb 2025 13:54:28 +0000 ROA not before: Mon 10 Feb 2025 13:54:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13973 (0x3695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=33617CB0D26F9EE4BB49DBC9979301625D2F6B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:a4:6f:1d:d6:a2:c8:be:d5:87:54:ee:7e: e2:33:fe:d3:4d:2c:d2:e5:1e:dc:d1:88:3e:19:cc: dc:c5:0f:af:14:ba:b9:57:13:7a:09:b3:5e:a0:88: 61:cd:82:1d:f9:9b:2a:08:00:a1:31:31:04:57:e2: da:58:fd:59:6b:72:5c:97:81:e4:4f:ac:17:b4:59: 7d:2f:e8:b9:fa:cb:cf:36:7a:ab:6c:7d:26:67:44: 77:4c:05:31:71:1c:7c:9d:32:a1:c5:68:e3:e3:61: b9:cb:96:0c:55:2a:95:42:6a:e3:3c:52:47:46:14: cb:62:83:be:9e:33:13:88:26:85:f3:67:26:35:6f: d8:ff:68:18:ea:fd:4b:7a:72:b4:ff:3b:d2:43:da: 7c:3b:19:5f:71:31:db:f5:f3:34:89:90:8b:e7:d8: ac:cb:e0:90:4c:e8:d2:7d:75:34:d1:c5:4e:d4:e5: b2:a3:9c:6f:7d:8b:03:be:b1:66:75:6e:58:47:93: f8:1f:a7:e6:6e:4c:bc:c6:76:55:53:81:fa:03:0b: 7b:c9:66:4e:9c:9f:00:05:3b:ec:75:44:10:5b:f9: 67:99:8d:59:4a:af:b3:b2:7e:70:21:62:1d:46:51: c6:28:b4:26:04:39:55:44:05:64:80:a9:a2:05:5e: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:61:7C:B0:D2:6F:9E:E4:BB:49:DB:C9:97:93:01:62:5D:2F:6B:2A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2F8sNJvnuS7SdvJl5MBYl0vayo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.48.0/23 Signature Algorithm: sha256WithRSAEncryption 44:f7:ff:28:7a:d8:a9:26:30:1a:21:6a:d5:31:c5:49:eb:b4: 4b:9d:f2:6d:ee:d6:c8:c9:42:a6:aa:db:66:30:df:60:31:a4: 10:0d:fe:fb:2d:de:a5:cd:81:60:5a:e7:82:2e:7e:87:8e:84: d7:5d:2e:d9:39:ac:4c:6a:eb:12:18:e2:3c:04:be:74:1e:62: 6e:9d:31:bf:84:e7:47:33:41:61:ba:61:a6:fe:ad:9e:52:8a: 55:97:9f:39:4b:dc:ec:f7:4a:e7:fa:31:4d:b2:51:f6:ff:6a: 74:26:cd:01:dc:b7:0c:36:74:a7:97:30:c4:ad:6b:11:ce:73: 14:af:9c:09:8e:6c:d7:38:9a:63:86:f2:95:2e:13:da:bb:e8: 18:5f:d5:2e:ab:a4:56:27:fa:b3:13:a1:4d:a4:c3:cf:62:af: 56:fe:d1:a5:9c:c9:47:14:03:bb:bc:e5:d4:75:9f:47:09:50: a9:2f:d3:99:0f:0a:69:fc:2a:e6:de:2b:ca:d4:71:0c:a9:a0: 7e:dc:8a:b4:30:04:b6:b7:12:c0:cf:bc:d4:d2:e8:40:ef:94: ee:f8:cf:04:6f:be:61:4b:34:a3:98:49:3a:46:89:13:c6:63: d4:fa:95:f3:de:0c:23:74:ac:3a:b7:0c:64:76:93:2a:36:ea: a9:9c:4d:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNpUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzNjE3Q0IwRDI2RjlF RTRCQjQ5REJDOTk3OTMwMTYyNUQyRjZCMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/iqRvHdaiyL7Vh1TufuIz/tNNLNLlHtzRiD4ZzNzFD68UurlX E3oJs16giGHNgh35myoIAKExMQRX4tpY/VlrclyXgeRPrBe0WX0v6Ln6y882eqts fSZnRHdMBTFxHHydMqHFaOPjYbnLlgxVKpVCauM8UkdGFMtig76eMxOIJoXzZyY1 b9j/aBjq/Ut6crT/O9JD2nw7GV9xMdv18zSJkIvn2KzL4JBM6NJ9dTTRxU7U5bKj nG99iwO+sWZ1blhHk/gfp+ZuTLzGdlVTgfoDC3vJZk6cnwAFO+x1RBBb+WeZjVlK r7OyfnAhYh1GUcYotCYEOVVEBWSAqaIFXoyZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUM2F8sNJvnuS7SdvJl5MBYl0vayowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL00yRjhzTkp2bnVTN1Nkdkps NU1CWWwwdmF5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6TAwDQYJKoZIhvcNAQELBQADggEBAET3/yh62KkmMBohatUxxUnrtEud8m3u1sjJ Qqaq22Yw32AxpBAN/vst3qXNgWBa54IufoeOhNddLtk5rExq6xIY4jwEvnQeYm6d Mb+E50czQWG6Yab+rZ5SilWXnzlL3Oz3Suf6MU2yUfb/anQmzQHctww2dKeXMMSt axHOcxSvnAmObNc4mmOG8pUuE9q76Bhf1S6rpFYn+rMToU2kw89ir1b+0aWcyUcU A7u85dR1n0cJUKkv05kPCmn8KubeK8rUcQypoH7cirQwBLa3EsDPvNTS6EDvlO74 zwRvvmFLNKOYSTpGiRPGY9T6lfPeDCN0rDq3DGR2kyo26qmcTb8= -----END CERTIFICATE-----Generated at Fri Apr 18 22:28:44 2025 by rpki-client