$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZKKDD50v6z9VFa9xacMZKVkhx_E.roa File: ZKKDD50v6z9VFa9xacMZKVkhx_E.roa (raw, json) Hash identifier: iAl8rhmLKay3+iSe8XoCExsj1mV0s5WViuW6PtH4k9E= Subject key identifier: 64:A2:83:0F:9D:2F:EB:3F:55:15:AF:71:69:C3:19:29:59:21:C7:F1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 339C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZKKDD50v6z9VFa9xacMZKVkhx_E.roa Signing time: Mon 10 Feb 2025 13:51:35 +0000 ROA not before: Mon 10 Feb 2025 13:51:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13212 (0x339c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=64A2830F9D2FEB3F5515AF7169C319295921C7F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:af:2f:d6:11:29:ac:7f:c9:da:1d:9c:bd: 53:fe:d7:7f:1d:b9:4b:93:28:cf:51:eb:a6:ba:f8: 0f:32:1d:49:f2:3d:55:25:a0:b2:a6:1e:ac:04:d7: e5:61:f8:a4:01:26:e5:43:13:07:f0:20:bf:6f:c0: 1f:5a:a6:07:82:ef:bb:a5:5a:0e:9b:29:f0:62:3d: bf:06:e0:e3:30:88:09:8f:dc:46:cf:93:2d:57:98: 8a:15:c7:bf:62:3f:46:c3:64:3e:cc:96:64:34:2e: 95:d6:17:05:29:11:7e:05:fa:92:2f:95:63:e1:4c: 63:65:d4:6e:d0:4d:bd:38:6d:e7:0a:b3:f5:d1:9b: ca:cb:28:99:73:98:dd:9b:91:e2:cb:f4:ed:83:f3: e1:af:d7:2f:fd:63:ea:92:5c:df:68:a7:fc:7d:1e: fc:bc:b4:9a:bd:ae:7f:05:51:0b:e2:7f:f1:de:49: 2b:d8:a1:aa:10:f2:92:7d:84:06:5f:d8:1e:23:14: 5d:66:98:47:52:e6:eb:1c:fa:a1:70:89:15:dd:92: 98:ff:de:6d:fb:4b:b7:66:b7:36:bb:10:56:89:bf: 45:99:67:8b:56:29:2c:a7:8b:a8:7e:14:b4:10:d1: 82:c5:ce:42:0f:a8:e8:39:bd:b6:36:1e:f4:02:9d: 89:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A2:83:0F:9D:2F:EB:3F:55:15:AF:71:69:C3:19:29:59:21:C7:F1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZKKDD50v6z9VFa9xacMZKVkhx_E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.0.0/15 Signature Algorithm: sha256WithRSAEncryption 24:43:eb:78:08:87:15:13:15:b9:6c:b5:25:29:9e:e6:ad:1b: 5b:5d:83:79:90:40:3f:a7:da:a6:a3:6f:7e:3b:83:ba:ab:de: f4:52:31:35:9e:25:f6:64:fa:da:fe:52:da:f1:43:28:1a:fa: 62:a2:cf:2d:d7:ee:46:89:95:77:54:45:46:e7:d1:98:6b:01: 38:da:a2:41:32:3d:53:3d:95:c3:0f:1c:69:d2:18:aa:bc:3d: 23:10:f3:f3:18:df:e6:56:7e:15:be:83:75:a6:ec:ee:eb:54: 44:36:86:92:8f:18:5e:e0:b1:da:0b:cd:f7:91:b2:0c:24:51: 33:7d:bd:cd:d5:8f:65:93:ca:64:bd:7b:ef:e5:3a:64:31:12: 8d:ef:ee:c0:74:8a:f5:42:ec:bb:4c:73:6d:a9:60:06:59:a2: b3:4d:47:42:50:7f:c7:5e:81:56:40:b4:df:03:42:aa:84:cf: 77:3a:54:b9:5e:1d:a5:76:ad:5d:b2:9d:b6:6b:8e:46:92:45: b9:a1:88:6b:fd:2e:31:85:60:c7:79:ad:f2:a3:6c:b9:34:5c: 2d:05:38:8f:6b:6d:db:6a:44:96:48:74:16:0f:4e:32:57:21: 5f:8a:3a:86:57:3e:ba:ab:f0:35:9f:0b:7a:b9:27:c0:2a:5f: 67:d3:eb:3a -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICM5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0QTI4MzBGOUQyRkVC M0Y1NTE1QUY3MTY5QzMxOTI5NTkyMUM3RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPna8v1hEprH/J2h2cvVP+138duUuTKM9R66a6+A8yHUnyPVUl oLKmHqwE1+Vh+KQBJuVDEwfwIL9vwB9apgeC77ulWg6bKfBiPb8G4OMwiAmP3EbP ky1XmIoVx79iP0bDZD7MlmQ0LpXWFwUpEX4F+pIvlWPhTGNl1G7QTb04becKs/XR m8rLKJlzmN2bkeLL9O2D8+Gv1y/9Y+qSXN9op/x9Hvy8tJq9rn8FUQvif/HeSSvY oaoQ8pJ9hAZf2B4jFF1mmEdS5usc+qFwiRXdkpj/3m37S7dmtza7EFaJv0WZZ4tW KSyni6h+FLQQ0YLFzkIPqOg5vbY2HvQCnYnRAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUZKKDD50v6z9VFa9xacMZKVkhx/EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pLS0RENTB2Nno5VkZhOXhh Y01aS1ZraHhfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwF2 6DANBgkqhkiG9w0BAQsFAAOCAQEAJEPreAiHFRMVuWy1JSme5q0bW12DeZBAP6fa pqNvfjuDuqve9FIxNZ4l9mT62v5S2vFDKBr6YqLPLdfuRomVd1RFRufRmGsBONqi QTI9Uz2Vww8cadIYqrw9IxDz8xjf5lZ+Fb6Ddabs7utURDaGko8YXuCx2gvN95Gy DCRRM329zdWPZZPKZL177+U6ZDESje/uwHSK9ULsu0xzbalgBlmis01HQlB/x16B VkC03wNCqoTPdzpUuV4dpXatXbKdtmuORpJFuaGIa/0uMYVgx3mt8qNsuTRcLQU4 j2tt22pElkh0Fg9OMlchX4o6hlc+uqvwNZ8LerknwCpfZ9PrOg== -----END CERTIFICATE-----Generated at Fri Apr 18 22:26:29 2025 by rpki-client