$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/au1U5scuqz-11KznC_jOBskpt-c.roa File: au1U5scuqz-11KznC_jOBskpt-c.roa (raw, json) Hash identifier: Hwq4VKFdnhE722Tes/uHAE1LzIJgJPSpdPFXq4VvQhc= Subject key identifier: 6A:ED:54:E6:C7:2E:AB:3F:B5:D4:AC:E7:0B:F8:CE:06:C9:29:B7:E7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35A2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/au1U5scuqz-11KznC_jOBskpt-c.roa Signing time: Mon 10 Feb 2025 13:53:32 +0000 ROA not before: Mon 10 Feb 2025 13:53:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13730 (0x35a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6AED54E6C72EAB3FB5D4ACE70BF8CE06C929B7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:59:f8:86:7f:e1:ac:ee:84:00:43:63:d8: 5e:f4:b4:c9:d5:31:7d:5a:12:ed:db:25:8d:e4:a3: 5b:2a:e7:df:cf:ac:be:64:9c:73:a8:1c:11:17:2b: 6c:de:59:0f:09:e4:f8:56:7d:f3:f5:81:62:06:7e: f5:16:b4:66:33:87:5a:05:ee:3e:63:6f:c8:40:83: c0:d6:5e:cb:c0:00:ac:2a:e5:69:61:7c:a2:57:b1: c1:47:4a:00:12:61:29:a5:e7:ab:f7:58:64:26:ec: a7:fe:3a:8b:3d:a5:8c:85:28:d2:0b:4c:0d:3a:37: cc:95:e4:ef:bb:1f:fe:b0:64:0a:31:b5:62:34:55: 41:a4:3f:c7:a9:05:9e:0f:4c:2b:dc:f0:ec:1f:cb: 89:55:59:19:87:f5:55:3f:af:97:7c:68:c5:f4:ea: 44:d2:26:b4:52:c2:9e:ef:58:ce:06:23:67:5a:21: db:1d:5c:24:7f:79:56:42:b7:ae:64:2e:71:0b:69: 72:b3:96:d8:8e:68:68:a1:48:ca:55:d7:a5:e6:5e: 4c:1f:2c:6e:7c:b2:47:6d:d5:8e:b8:b3:fe:f8:28: 35:c3:14:9a:6a:f6:e2:d6:c9:eb:78:f4:0c:44:2e: 14:c5:bb:91:35:54:de:f8:03:39:5d:b7:7a:11:d3: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:ED:54:E6:C7:2E:AB:3F:B5:D4:AC:E7:0B:F8:CE:06:C9:29:B7:E7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/au1U5scuqz-11KznC_jOBskpt-c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.100.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:99:21:14:09:10:4c:9c:68:81:f8:fc:a6:13:fe:7b:f8:2c: 49:3c:eb:fa:bb:b7:d9:29:48:91:1f:40:6a:50:f0:c9:7b:de: 37:dd:33:38:56:94:ca:b3:48:0a:1f:c9:96:b9:a4:14:51:fa: ba:fe:5b:12:5c:17:bc:63:f1:71:d8:a1:85:0b:83:05:b4:92: 7b:48:c3:5a:f6:ee:7b:1b:4d:cb:d4:ef:6d:ca:91:e1:bd:2c: a5:cb:d0:e1:93:8c:e9:e3:26:91:48:10:68:b2:21:6d:36:6b: 42:50:76:29:ef:4c:80:97:8d:d2:be:6e:b5:b1:53:c5:79:74: 0a:45:2a:b2:24:ee:57:99:ad:59:6e:26:f7:ee:3b:d9:8c:72: 0b:35:84:b4:75:dc:94:9e:ed:fa:71:b6:b7:3d:8f:cc:c0:ff: 95:7c:c4:8f:f8:6e:b4:d0:33:c3:2e:c2:97:b2:dd:bf:c9:95: a1:0c:ab:60:39:41:07:9e:7a:a4:e4:f0:96:bc:83:ff:a0:d6: f6:e0:60:65:34:e3:f2:a8:ff:61:32:01:43:65:bd:53:43:b2: 93:dd:91:1e:5e:b9:23:5a:55:9a:40:b6:4a:4e:ee:b3:a9:a1: 5c:cc:5c:40:0a:43:2b:c2:6b:05:9c:42:ea:24:dc:72:be:3d: 63:d7:bb:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZBRUQ1NEU2QzcyRUFC M0ZCNUQ0QUNFNzBCRjhDRTA2QzkyOUI3RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClfln4hn/hrO6EAENj2F70tMnVMX1aEu3bJY3ko1sq59/PrL5k nHOoHBEXK2zeWQ8J5PhWffP1gWIGfvUWtGYzh1oF7j5jb8hAg8DWXsvAAKwq5Wlh fKJXscFHSgASYSml56v3WGQm7Kf+Oos9pYyFKNILTA06N8yV5O+7H/6wZAoxtWI0 VUGkP8epBZ4PTCvc8Owfy4lVWRmH9VU/r5d8aMX06kTSJrRSwp7vWM4GI2daIdsd XCR/eVZCt65kLnELaXKzltiOaGihSMpV16XmXkwfLG58skdt1Y64s/74KDXDFJpq 9uLWyet49AxELhTFu5E1VN74Azldt3oR02RhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUau1U5scuqz+11KznC/jOBskpt+cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2F1MVU1c2N1cXotMTFLem5D X2pPQnNrcHQtYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6WQwDQYJKoZIhvcNAQELBQADggEBAF6ZIRQJEEycaIH4/KYT/nv4LEk86/q7t9kp SJEfQGpQ8Ml73jfdMzhWlMqzSAofyZa5pBRR+rr+WxJcF7xj8XHYoYULgwW0kntI w1r27nsbTcvU723KkeG9LKXL0OGTjOnjJpFIEGiyIW02a0JQdinvTICXjdK+brWx U8V5dApFKrIk7leZrVluJvfuO9mMcgs1hLR13JSe7fpxtrc9j8zA/5V8xI/4brTQ M8Muwpey3b/JlaEMq2A5QQeeeqTk8Ja8g/+g1vbgYGU04/Ko/2EyAUNlvVNDspPd kR5euSNaVZpAtkpO7rOpoVzMXEAKQyvCawWcQuok3HK+PWPXu3E= -----END CERTIFICATE-----Generated at Wed Apr 23 04:39:45 2025 by rpki-client