$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBzFe961u8I3IJoQepXn3HU1U_I.roa File: cBzFe961u8I3IJoQepXn3HU1U_I.roa (raw, json) Hash identifier: 4n23uzdP9dEGQDfq6JpRcUkglyq8nO5z5CO2QqTHGYw= Subject key identifier: 70:1C:C5:7B:DE:B5:BB:C2:37:20:9A:10:7A:95:E7:DC:75:35:53:F2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36AC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBzFe961u8I3IJoQepXn3HU1U_I.roa Signing time: Mon 10 Feb 2025 13:54:33 +0000 ROA not before: Mon 10 Feb 2025 13:54:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13996 (0x36ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=701CC57BDEB5BBC237209A107A95E7DC753553F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3a:71:80:d1:07:88:51:4d:07:a8:d5:78:77: aa:d5:30:75:8d:8a:81:73:39:38:c1:c9:8c:de:16: d2:d5:cf:f2:d2:07:dc:0d:8e:ad:45:0a:7c:f7:52: 27:61:c1:b4:eb:55:10:90:00:f6:21:84:32:53:82: 90:cb:9f:17:a9:d5:8f:a7:df:7a:70:e4:04:61:39: 28:0b:11:bd:cb:c4:7b:85:19:13:6c:33:12:2a:29: fb:93:f5:61:f2:fc:e8:65:42:fd:97:39:2a:0b:68: 15:93:8e:8c:aa:ba:42:94:46:5b:81:0d:44:b4:5c: 71:6a:e0:ac:d0:e4:04:7b:9c:07:01:7c:28:4a:54: 18:00:4b:3d:57:43:fa:ef:91:a7:b1:cb:ab:6f:46: 87:b5:12:ad:7b:d9:61:4c:2d:71:65:2a:c8:30:db: 91:ed:2d:fa:17:7e:7c:35:61:37:7e:e2:e6:0f:08: b0:87:61:de:89:86:2c:79:8e:1f:6d:0c:3b:97:25: 66:12:cf:dc:91:2f:7e:e1:01:56:38:f3:ab:fe:f4: db:c8:d3:72:58:70:1e:b1:ed:e6:45:cb:01:4c:60: 94:81:60:35:4c:a9:8e:82:c8:83:e3:47:59:11:c5: 40:aa:eb:b6:ce:54:5b:8d:cd:ce:22:4a:59:29:9f: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1C:C5:7B:DE:B5:BB:C2:37:20:9A:10:7A:95:E7:DC:75:35:53:F2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBzFe961u8I3IJoQepXn3HU1U_I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.52.0/22 Signature Algorithm: sha256WithRSAEncryption b5:dc:fd:3a:89:bd:f0:83:e0:13:67:ec:a8:ff:45:7b:6f:b1: 52:5b:db:6c:93:8c:46:13:98:23:55:8a:b3:18:37:54:d9:d3: c8:9d:c7:61:d2:fa:21:14:13:dd:1d:38:a9:bd:16:76:a8:f2: d6:ad:a5:19:95:b0:28:8a:1a:0d:d5:d1:b9:fc:66:7d:7c:44: 18:24:68:c6:46:3d:9f:50:7d:4e:07:f7:f6:df:4d:25:b1:18: 32:b0:48:2a:40:92:0d:58:86:9c:46:e8:2c:82:96:17:36:ca: a9:9e:33:fc:ce:83:b6:85:cd:11:56:65:4d:6a:79:8d:ed:aa: 6b:2d:7c:87:a4:d4:6b:76:64:7f:72:88:7d:cf:bb:ad:1a:0d: 64:a0:b2:2a:b7:a7:21:fb:26:8f:ce:56:c0:de:57:c5:72:fb: 77:26:4c:84:b1:f0:5f:1f:4d:05:3f:a6:43:f7:cd:3f:5f:19: ad:81:d8:c3:8a:6d:e6:8a:42:35:1e:af:a8:82:26:42:ef:68: 8e:a3:09:45:7b:64:97:d9:48:1b:bd:08:69:d9:96:ed:95:03: 34:3c:23:25:e8:b3:d0:be:65:31:d6:8a:46:16:ba:46:3a:30: a4:21:d7:ca:b4:4b:1b:9e:94:31:eb:d9:3d:03:3a:05:31:61: d4:a6:ce:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwMUNDNTdCREVCNUJC QzIzNzIwOUExMDdBOTVFN0RDNzUzNTUzRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcOnGA0QeIUU0HqNV4d6rVMHWNioFzOTjByYzeFtLVz/LSB9wN jq1FCnz3UidhwbTrVRCQAPYhhDJTgpDLnxep1Y+n33pw5ARhOSgLEb3LxHuFGRNs MxIqKfuT9WHy/OhlQv2XOSoLaBWTjoyqukKURluBDUS0XHFq4KzQ5AR7nAcBfChK VBgASz1XQ/rvkaexy6tvRoe1Eq172WFMLXFlKsgw25HtLfoXfnw1YTd+4uYPCLCH Yd6Jhix5jh9tDDuXJWYSz9yRL37hAVY486v+9NvI03JYcB6x7eZFywFMYJSBYDVM qY6CyIPjR1kRxUCq67bOVFuNzc4iSlkpn8s7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcBzFe961u8I3IJoQepXn3HU1U/IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NCekZlOTYxdThJM0lKb1Fl cFhuM0hVMVVfSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6DQwDQYJKoZIhvcNAQELBQADggEBALXc/TqJvfCD4BNn7Kj/RXtvsVJb22yTjEYT mCNVirMYN1TZ08idx2HS+iEUE90dOKm9Fnao8tatpRmVsCiKGg3V0bn8Zn18RBgk aMZGPZ9QfU4H9/bfTSWxGDKwSCpAkg1YhpxG6CyClhc2yqmeM/zOg7aFzRFWZU1q eY3tqmstfIek1Gt2ZH9yiH3Pu60aDWSgsiq3pyH7Jo/OVsDeV8Vy+3cmTISx8F8f TQU/pkP3zT9fGa2B2MOKbeaKQjUer6iCJkLvaI6jCUV7ZJfZSBu9CGnZlu2VAzQ8 IyXos9C+ZTHWikYWukY6MKQh18q0SxuelDHr2T0DOgUxYdSmziI= -----END CERTIFICATE-----Generated at Tue Apr 22 15:01:28 2025 by rpki-client