$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q5Yn9vBRbyIm32RvQfYPwGTrvE8.roa File: Q5Yn9vBRbyIm32RvQfYPwGTrvE8.roa (raw, json) Hash identifier: 8noW7pISccF86JYUzxhl5KeoIYRcRrW+0/JusanAmwc= Subject key identifier: 43:96:27:F6:F0:51:6F:22:26:DF:64:6F:41:F6:0F:C0:64:EB:BC:4F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 349B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q5Yn9vBRbyIm32RvQfYPwGTrvE8.roa Signing time: Mon 10 Feb 2025 13:52:33 +0000 ROA not before: Mon 10 Feb 2025 13:52:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=439627F6F0516F2226DF646F41F60FC064EBBC4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:9e:e7:71:cd:68:de:90:22:ec:28:93:d6: bf:05:f9:fe:77:4b:68:32:cf:17:52:d9:83:cc:30: 22:fc:a4:51:19:93:d5:b0:e7:20:aa:38:43:1e:33: 03:31:98:1c:6d:32:a0:b0:32:89:20:7d:2c:11:ad: f1:c2:80:b5:7e:f1:67:88:f6:b9:da:3d:46:4c:f3: b3:91:1b:7b:62:bf:a0:f5:1b:4e:66:b9:0b:8e:60: a9:3b:30:1d:b1:ed:91:eb:31:fd:2e:51:b6:5e:e5: 97:c6:c4:65:37:ff:0d:c4:68:07:91:4a:f4:29:84: 2b:e4:52:7c:62:27:3f:0e:b3:0f:cb:65:eb:46:3e: 33:d4:d1:fb:a7:d9:55:6f:31:26:26:f1:51:af:1e: 1a:4a:c1:8b:80:f5:88:78:83:4c:0a:64:c9:1f:55: ae:14:54:e2:b9:0c:f5:37:03:7c:d0:b2:a6:1f:2d: 55:1c:4a:24:4e:94:8e:22:8c:81:c2:46:45:2f:03: 90:d0:c7:51:37:3f:f9:09:e0:08:87:67:17:02:89: 83:7d:b9:2c:98:99:eb:45:e3:2b:19:5f:17:08:7d: 96:93:7d:2c:52:34:38:49:2a:80:cf:c1:b6:6e:23: b2:39:22:20:ca:26:28:0c:9e:d7:96:13:5c:fa:c2: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:96:27:F6:F0:51:6F:22:26:DF:64:6F:41:F6:0F:C0:64:EB:BC:4F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q5Yn9vBRbyIm32RvQfYPwGTrvE8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.224.0/21 Signature Algorithm: sha256WithRSAEncryption af:5b:71:b3:28:ec:7a:3b:ca:25:6f:f8:3f:80:b1:5a:c2:ef: 0f:13:9d:2d:4e:78:e7:c6:6c:a7:b6:25:6e:e6:77:61:70:f4: c2:8d:48:57:f5:cb:39:73:cd:7a:cf:d6:10:23:8d:ea:bc:95: 60:26:6d:84:69:0b:d3:03:e3:10:9a:d2:fd:6a:b2:ee:93:c5: 32:a8:14:e8:98:31:29:01:77:87:5c:a1:7b:0e:1e:84:f5:b3: d8:79:f5:5d:bf:8c:7f:6a:f0:0e:07:c2:97:64:ee:5e:8a:8d: 64:c7:0f:d2:28:54:cd:42:b2:aa:4b:75:c3:4d:5e:6d:75:7a: ef:d2:3a:66:69:1b:4f:1e:d1:b7:55:58:fd:fe:9d:c1:76:ab: 00:24:f4:f4:0e:97:e6:12:bf:2b:9d:02:c9:0a:cb:21:a7:5a: 6a:6f:7b:86:66:56:d2:c7:d0:fb:35:f4:13:25:7c:86:01:50: dd:e8:1f:67:49:33:a1:f1:db:b3:80:cd:50:27:64:78:6d:04: a4:cd:d0:89:4a:0e:87:80:d8:ce:33:d6:57:e6:6b:2f:3a:3e: aa:eb:4e:7d:06:db:71:10:cf:df:e5:be:4b:39:fe:92:f1:b3: a7:7b:e9:a5:ad:19:ac:bc:88:ac:65:60:c3:5f:aa:d3:a9:ed: 53:f7:e5:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQzOTYyN0Y2RjA1MTZG MjIyNkRGNjQ2RjQxRjYwRkMwNjRFQkJDNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+L57ncc1o3pAi7CiT1r8F+f53S2gyzxdS2YPMMCL8pFEZk9Ww 5yCqOEMeMwMxmBxtMqCwMokgfSwRrfHCgLV+8WeI9rnaPUZM87ORG3tiv6D1G05m uQuOYKk7MB2x7ZHrMf0uUbZe5ZfGxGU3/w3EaAeRSvQphCvkUnxiJz8Osw/LZetG PjPU0fun2VVvMSYm8VGvHhpKwYuA9Yh4g0wKZMkfVa4UVOK5DPU3A3zQsqYfLVUc SiROlI4ijIHCRkUvA5DQx1E3P/kJ4AiHZxcCiYN9uSyYmetF4ysZXxcIfZaTfSxS NDhJKoDPwbZuI7I5IiDKJigMnteWE1z6wpBdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQ5Yn9vBRbyIm32RvQfYPwGTrvE8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1E1WW45dkJSYnlJbTMyUnZR ZllQd0dUcnZFOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6OAwDQYJKoZIhvcNAQELBQADggEBAK9bcbMo7Ho7yiVv+D+AsVrC7w8TnS1OeOfG bKe2JW7md2Fw9MKNSFf1yzlzzXrP1hAjjeq8lWAmbYRpC9MD4xCa0v1qsu6TxTKo FOiYMSkBd4dcoXsOHoT1s9h59V2/jH9q8A4Hwpdk7l6KjWTHD9IoVM1CsqpLdcNN Xm11eu/SOmZpG08e0bdVWP3+ncF2qwAk9PQOl+YSvyudAskKyyGnWmpve4ZmVtLH 0Ps19BMlfIYBUN3oH2dJM6Hx27OAzVAnZHhtBKTN0IlKDoeA2M4z1lfmay86Pqrr Tn0G23EQz9/lvks5/pLxs6d76aWtGay8iKxlYMNfqtOp7VP35SY= -----END CERTIFICATE-----Generated at Wed Apr 23 04:43:24 2025 by rpki-client