$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDa9qIARkP41szs5uiITw3r5Tdo.roa File: cDa9qIARkP41szs5uiITw3r5Tdo.roa (raw, json) Hash identifier: 9aaOwqbR+3Za7EStHdW0u2QHzrJ37GVfWFVuXNzozJA= Subject key identifier: 70:36:BD:A8:80:11:90:FE:35:B3:3B:39:BA:22:13:C3:7A:F9:4D:DA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3645 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDa9qIARkP41szs5uiITw3r5Tdo.roa Signing time: Mon 10 Feb 2025 13:54:09 +0000 ROA not before: Mon 10 Feb 2025 13:54:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 45.64.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13893 (0x3645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7036BDA8801190FE35B33B39BA2213C37AF94DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:d6:44:b5:68:2c:da:a2:d2:d1:3c:da:ed: ba:ba:f5:2c:68:50:77:24:1c:9b:23:d8:17:d1:49: 0d:45:35:7f:ba:c5:29:59:46:d5:89:9d:01:37:54: 43:46:06:19:79:7f:55:2b:54:4c:b5:f7:1f:b1:0e: ac:ad:92:ef:4d:e2:68:ef:67:5c:2e:78:b7:c1:5d: 3d:7c:34:e2:2f:b3:1b:84:ba:c3:1d:8c:6c:fe:ce: fe:63:e8:7c:89:77:74:00:ef:bd:10:30:dd:0d:d7: e2:10:f0:77:66:08:e2:67:e3:f3:68:99:67:a1:c4: e1:1d:e5:3c:5b:35:ee:96:e9:f8:d7:13:ba:73:3a: 76:5e:39:ac:e4:7a:d5:98:ed:c3:b1:37:7a:2b:93: b8:70:13:56:2b:1b:a8:1f:d1:b9:b4:10:ee:c0:4c: b6:53:28:5d:bf:21:0e:8e:1b:12:aa:3e:ae:4e:eb: c0:d4:87:de:a6:c2:d7:db:c6:19:5f:40:34:21:91: 69:9d:14:99:8d:9a:20:01:e1:9f:dd:ba:3a:a0:6d: d0:d6:1d:21:01:25:26:8c:a3:dd:3f:af:59:74:e4: 44:a2:d4:2a:0a:04:77:c1:2d:0f:ba:74:c0:da:03: 0b:e0:cc:43:27:c1:32:20:3d:fa:71:af:a8:3c:66: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:36:BD:A8:80:11:90:FE:35:B3:3B:39:BA:22:13:C3:7A:F9:4D:DA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDa9qIARkP41szs5uiITw3r5Tdo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.30.0/24 Signature Algorithm: sha256WithRSAEncryption 06:98:45:09:24:7c:b3:2a:a2:7c:df:cc:02:bb:ac:26:9e:4c: ea:ac:8d:7e:6f:4b:1a:8a:86:ec:f7:c2:e4:27:32:76:51:01: d8:f6:9c:aa:3a:00:ba:a4:5d:b0:36:03:3e:58:72:74:f3:1d: 10:21:c8:54:d1:d5:f1:5b:7f:15:53:44:5e:bb:34:7e:4e:8c: 99:3a:1f:d4:d5:b5:61:8e:51:54:7e:6a:2c:7d:81:36:1d:2e: 4d:fd:cc:2d:93:07:b6:f9:32:26:03:2f:12:b1:41:bc:73:c1: 7f:68:06:31:55:60:5e:d1:e8:dc:2e:3e:36:08:ef:e4:03:f9: cb:b9:15:c1:ef:f0:c6:af:c5:35:d7:7b:8f:b7:7c:d4:4b:2a: 5d:3a:ba:a5:d5:83:69:d6:3d:3e:e5:ca:6f:ca:86:7f:21:8d: 06:04:e2:e0:ee:00:7c:dc:3c:af:01:08:da:8f:98:3b:5a:e8: af:12:93:53:77:7c:a9:45:98:d7:1c:9b:45:9f:1d:7a:82:c1: c6:61:51:aa:a1:f9:7b:1a:23:13:c9:6c:fd:63:a4:21:1f:cf: 6f:af:62:bd:06:77:0e:de:9e:96:77:ab:88:f4:7f:79:f9:9b: 69:4f:ba:ed:74:a1:62:76:1b:c5:81:b2:3f:36:1e:67:42:f7: 5d:58:3d:3b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwMzZCREE4ODAxMTkw RkUzNUIzM0IzOUJBMjIxM0MzN0FGOTREREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA7tZEtWgs2qLS0Tza7bq69SxoUHckHJsj2BfRSQ1FNX+6xSlZ RtWJnQE3VENGBhl5f1UrVEy19x+xDqytku9N4mjvZ1wueLfBXT18NOIvsxuEusMd jGz+zv5j6HyJd3QA770QMN0N1+IQ8HdmCOJn4/NomWehxOEd5TxbNe6W6fjXE7pz OnZeOazketWY7cOxN3ork7hwE1YrG6gf0bm0EO7ATLZTKF2/IQ6OGxKqPq5O68DU h96mwtfbxhlfQDQhkWmdFJmNmiAB4Z/dujqgbdDWHSEBJSaMo90/r1l05ESi1CoK BHfBLQ+6dMDaAwvgzEMnwTIgPfpxr6g8ZvrTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcDa9qIARkP41szs5uiITw3r5TdowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NEYTlxSUFSa1A0MXN6czV1 aUlUdzNyNVRkby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt QB4wDQYJKoZIhvcNAQELBQADggEBAAaYRQkkfLMqonzfzAK7rCaeTOqsjX5vSxqK huz3wuQnMnZRAdj2nKo6ALqkXbA2Az5YcnTzHRAhyFTR1fFbfxVTRF67NH5OjJk6 H9TVtWGOUVR+aix9gTYdLk39zC2TB7b5MiYDLxKxQbxzwX9oBjFVYF7R6NwuPjYI 7+QD+cu5FcHv8MavxTXXe4+3fNRLKl06uqXVg2nWPT7lym/Khn8hjQYE4uDuAHzc PK8BCNqPmDta6K8Sk1N3fKlFmNccm0WfHXqCwcZhUaqh+XsaIxPJbP1jpCEfz2+v Yr0Gdw7enpZ3q4j0f3n5m2lPuu10oWJ2G8WBsj82HmdC911YPTs= -----END CERTIFICATE-----Generated at Fri Apr 18 22:34:25 2025 by rpki-client