$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvpROBNvko64005fkzwUjljMN8k.roa File: MvpROBNvko64005fkzwUjljMN8k.roa (raw, json) Hash identifier: zVyYwZzqOoG9q7yqpTdw0tNsxTqhfKsMQOiPENQ8NV8= Subject key identifier: 32:FA:51:38:13:6F:92:8E:B8:D3:4E:5F:93:3C:14:8E:58:CC:37:C9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33A8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvpROBNvko64005fkzwUjljMN8k.roa Signing time: Mon 10 Feb 2025 13:51:38 +0000 ROA not before: Mon 10 Feb 2025 13:51:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13224 (0x33a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=32FA5138136F928EB8D34E5F933C148E58CC37C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:f3:b7:d2:a8:bd:a6:25:9a:80:09:dc:54: dc:ee:71:ed:90:85:85:68:f7:f8:d1:46:e1:76:f2: 97:25:ae:fc:30:cd:63:cd:26:3c:dd:0e:1f:41:26: 64:ba:97:d0:e8:06:fe:a1:b4:82:4d:7f:2a:8c:61: 29:7f:f0:bb:ea:a9:51:ee:21:b9:c0:90:9f:26:03: 30:9f:7d:91:95:d2:c8:ff:6e:b8:bf:fd:91:2c:25: 02:49:21:59:42:da:ef:f4:fd:7f:1d:87:88:39:02: fa:2a:d0:85:36:75:04:fd:cf:8f:1d:66:83:a4:25: 4c:86:de:d0:12:64:93:87:9a:72:85:bd:d9:b9:d1: fb:b4:0f:a9:8e:98:79:b3:ef:a9:ad:f9:ab:27:1b: 99:f2:06:ef:02:d7:47:8c:19:8e:80:b5:b2:51:3e: ce:a1:8d:1b:f8:03:e6:5a:65:86:f1:da:a8:e8:a0: d9:41:79:52:ae:99:fc:57:89:67:a7:3f:e4:ee:bd: 17:af:b1:a5:46:70:8f:4c:a7:14:92:4f:18:65:33: fa:f3:99:f2:50:37:a0:0f:3f:61:cb:e2:43:c6:c8: c7:81:bf:ae:dd:7e:01:33:04:30:4b:69:fb:8b:c4: 78:b6:d1:72:f5:2c:be:cc:87:6e:46:64:29:9e:15: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FA:51:38:13:6F:92:8E:B8:D3:4E:5F:93:3C:14:8E:58:CC:37:C9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvpROBNvko64005fkzwUjljMN8k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.244.0/24 Signature Algorithm: sha256WithRSAEncryption 40:81:16:51:32:75:c9:ba:08:23:9c:f1:8b:cf:6c:a6:41:fb: 60:c5:0a:de:01:c6:55:78:6c:d2:24:12:db:6e:e6:f9:5a:4c: 28:ab:75:25:cb:90:34:36:78:09:e6:ed:73:8b:72:67:f9:cf: 38:a4:b4:d6:6e:a9:33:35:0f:59:3a:3f:2d:85:17:70:50:95: 6e:15:18:e7:9f:1b:b5:f7:ff:37:bc:7a:8e:58:57:1c:e2:37: da:19:06:ff:a5:a5:d1:0d:46:f7:8e:75:d7:6a:22:ee:dd:90: 73:f1:0f:5c:46:b0:24:bf:4d:0b:7e:16:dc:17:c4:3b:c5:e5: 45:10:d9:70:a6:f3:4d:c0:4d:4a:a2:71:3b:17:35:b3:d6:b5: 29:3a:17:f8:37:79:d2:3c:91:bf:95:1b:56:81:aa:fe:f2:09: 61:9c:a0:54:ce:3d:9a:06:91:de:bb:85:ea:f8:59:fa:0e:26: dc:e4:f8:e5:f9:a0:ff:bb:99:6b:91:e8:c2:e3:ec:3c:0e:55: ee:20:99:f5:ba:9f:3f:11:fd:4c:68:87:61:4c:1a:9d:3e:32: bc:2f:18:6d:b2:d8:1f:1b:28:3c:ee:2a:8b:ba:0a:d0:18:f5: 6d:30:79:47:6e:56:f6:ea:7e:58:f7:9d:3c:85:d9:c2:9c:a3: b4:2a:df:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyRkE1MTM4MTM2Rjky OEVCOEQzNEU1RjkzM0MxNDhFNThDQzM3QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3tvO30qi9piWagAncVNzuce2QhYVo9/jRRuF28pclrvwwzWPN JjzdDh9BJmS6l9DoBv6htIJNfyqMYSl/8LvqqVHuIbnAkJ8mAzCffZGV0sj/bri/ /ZEsJQJJIVlC2u/0/X8dh4g5Avoq0IU2dQT9z48dZoOkJUyG3tASZJOHmnKFvdm5 0fu0D6mOmHmz76mt+asnG5nyBu8C10eMGY6AtbJRPs6hjRv4A+ZaZYbx2qjooNlB eVKumfxXiWenP+TuvRevsaVGcI9MpxSSTxhlM/rzmfJQN6APP2HL4kPGyMeBv67d fgEzBDBLafuLxHi20XL1LL7Mh25GZCmeFWypAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMvpROBNvko64005fkzwUjljMN8kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL012cFJPQk52a282NDAwNWZr endVamxqTU44ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6fQwDQYJKoZIhvcNAQELBQADggEBAECBFlEydcm6CCOc8YvPbKZB+2DFCt4BxlV4 bNIkEttu5vlaTCirdSXLkDQ2eAnm7XOLcmf5zziktNZuqTM1D1k6Py2FF3BQlW4V GOefG7X3/ze8eo5YVxziN9oZBv+lpdENRveOdddqIu7dkHPxD1xGsCS/TQt+FtwX xDvF5UUQ2XCm803ATUqicTsXNbPWtSk6F/g3edI8kb+VG1aBqv7yCWGcoFTOPZoG kd67her4WfoOJtzk+OX5oP+7mWuR6MLj7DwOVe4gmfW6nz8R/Uxoh2FMGp0+Mrwv GG2y2B8bKDzuKou6CtAY9W0weUduVvbqflj3nTyF2cKco7Qq32Q= -----END CERTIFICATE-----Generated at Fri Apr 18 23:20:27 2025 by rpki-client