$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QoeKxsQSFYqEN_u9FxXWM-tS8Ls.roa File: QoeKxsQSFYqEN_u9FxXWM-tS8Ls.roa (raw, json) Hash identifier: vcbvYQzW1Z1E0k4V9Fu2+AafMFKZiRa+v/5+quPZ+Us= Subject key identifier: 42:87:8A:C6:C4:12:15:8A:84:37:FB:BD:17:15:D6:33:EB:52:F0:BB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3444 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QoeKxsQSFYqEN_u9FxXWM-tS8Ls.roa Signing time: Mon 10 Feb 2025 13:52:13 +0000 ROA not before: Mon 10 Feb 2025 13:52:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13380 (0x3444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=42878AC6C412158A8437FBBD1715D633EB52F0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ba:3a:56:e1:71:92:d5:70:21:16:29:51:f5: a7:d7:16:36:59:0f:b2:87:63:95:90:a5:a5:ca:7f: 9a:d4:cd:ba:5d:6b:fa:49:e8:ca:38:f0:71:71:f5: 00:8d:a5:9e:62:52:49:d3:b8:d2:ac:6c:ae:37:77: f1:f1:34:54:74:39:19:e3:80:a6:ad:5c:d2:b1:6b: 69:1c:17:87:11:6e:14:d0:65:fe:11:6a:3b:31:ef: eb:2a:6b:f5:6b:02:c7:f2:41:00:f4:a3:b7:4d:dc: 04:4b:31:15:e3:19:f4:b2:0c:eb:8e:64:23:70:3d: b1:85:d5:a5:47:9e:de:5c:9e:2d:a6:bd:b1:97:eb: fd:10:8f:97:a3:5c:62:86:51:6a:93:9d:e4:16:e4: 73:2f:4c:4e:78:a8:f5:81:48:86:2a:f8:99:f5:29: 30:2d:97:21:88:22:b6:42:05:49:69:c2:ad:d8:ef: 96:b0:1b:20:ad:e0:b0:5e:31:d0:54:51:fc:01:9d: de:15:69:94:e9:60:f7:e4:cb:33:09:cb:cb:b0:df: cf:5e:d0:2f:d8:d7:7e:a3:f5:41:d8:ea:17:75:aa: 38:0d:60:0e:bf:e4:f8:0e:8b:5c:b1:e4:b5:69:91: 19:90:fa:06:42:5e:2a:42:fa:39:0d:ea:ac:d2:87: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:87:8A:C6:C4:12:15:8A:84:37:FB:BD:17:15:D6:33:EB:52:F0:BB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QoeKxsQSFYqEN_u9FxXWM-tS8Ls.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.8.0/21 Signature Algorithm: sha256WithRSAEncryption 70:e0:5a:77:7d:47:d7:5f:1f:70:5f:84:91:b3:27:3a:8a:04: 45:e7:5f:26:e5:ae:5a:61:90:67:55:12:22:28:e7:c3:cd:af: ae:2d:e7:90:6d:cb:00:4a:ff:d9:d9:ea:d4:58:55:1c:5d:3d: 47:59:31:4b:5b:3c:37:80:db:57:ed:67:42:1e:3f:1c:09:9b: 70:92:33:d2:a3:2f:8c:a9:35:eb:85:77:7d:b1:db:a4:ce:30: 98:4c:65:d9:1c:2d:95:ba:9b:53:ec:74:73:30:87:b0:c5:a3: 20:cc:7e:cc:e0:8b:13:8c:03:70:ab:08:f7:8b:48:ef:cd:da: 31:74:8c:88:db:6f:71:52:05:cb:ae:a3:0d:b5:08:5d:e6:4a: de:d9:55:61:09:6d:9c:c3:87:da:22:19:bd:4f:96:ab:52:7a: e2:46:22:b7:5c:e2:44:5a:02:9e:48:58:61:07:86:da:44:81: d3:76:bd:0b:0f:d8:fc:a8:31:b7:d0:5e:b8:89:a8:98:ee:d0: 1c:c5:c1:18:ec:1f:9e:46:7e:0b:d8:1c:43:da:95:c0:43:91: b6:9e:c1:2d:0f:47:df:f3:bf:09:ad:8e:9e:e2:65:5c:12:89: 15:a1:e3:dd:c9:22:dc:c7:f4:07:01:4a:91:63:c4:38:ef:50: 1f:94:4c:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQyODc4QUM2QzQxMjE1 OEE4NDM3RkJCRDE3MTVENjMzRUI1MkYwQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIujpW4XGS1XAhFilR9afXFjZZD7KHY5WQpaXKf5rUzbpda/pJ 6Mo48HFx9QCNpZ5iUknTuNKsbK43d/HxNFR0ORnjgKatXNKxa2kcF4cRbhTQZf4R ajsx7+sqa/VrAsfyQQD0o7dN3ARLMRXjGfSyDOuOZCNwPbGF1aVHnt5cni2mvbGX 6/0Qj5ejXGKGUWqTneQW5HMvTE54qPWBSIYq+Jn1KTAtlyGIIrZCBUlpwq3Y75aw GyCt4LBeMdBUUfwBnd4VaZTpYPfkyzMJy8uw389e0C/Y136j9UHY6hd1qjgNYA6/ 5PgOi1yx5LVpkRmQ+gZCXipC+jkN6qzShxVtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQoeKxsQSFYqEN/u9FxXWM+tS8LswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FvZUt4c1FTRllxRU5fdTlG eFhXTS10UzhMcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6QgwDQYJKoZIhvcNAQELBQADggEBAHDgWnd9R9dfH3BfhJGzJzqKBEXnXyblrlph kGdVEiIo58PNr64t55BtywBK/9nZ6tRYVRxdPUdZMUtbPDeA21ftZ0IePxwJm3CS M9KjL4ypNeuFd32x26TOMJhMZdkcLZW6m1PsdHMwh7DFoyDMfszgixOMA3CrCPeL SO/N2jF0jIjbb3FSBcuuow21CF3mSt7ZVWEJbZzDh9oiGb1PlqtSeuJGIrdc4kRa Ap5IWGEHhtpEgdN2vQsP2PyoMbfQXriJqJju0BzFwRjsH55GfgvYHEPalcBDkbae wS0PR9/zvwmtjp7iZVwSiRWh493JItzH9AcBSpFjxDjvUB+UTCI= -----END CERTIFICATE-----Generated at Fri Apr 18 22:34:13 2025 by rpki-client