$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cs4bxJGdqE5CPg6OhW-JS3lHfic.roa File: cs4bxJGdqE5CPg6OhW-JS3lHfic.roa (raw, json) Hash identifier: elaRILRwAztqWTPHC+Jtn9B2eUB9ni1VvdNkviADDiE= Subject key identifier: 72:CE:1B:C4:91:9D:A8:4E:42:3E:0E:8E:85:6F:89:4B:79:47:7E:27 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3422 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cs4bxJGdqE5CPg6OhW-JS3lHfic.roa Signing time: Mon 10 Feb 2025 13:52:06 +0000 ROA not before: Mon 10 Feb 2025 13:52:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=72CE1BC4919DA84E423E0E8E856F894B79477E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:83:16:78:a3:7e:83:83:43:d8:d5:5e:6e:bf: 68:12:f5:37:77:7d:40:51:19:b2:4c:ec:77:a4:f7: e8:8d:ae:fa:46:37:23:72:76:24:29:1b:d0:2b:a4: cc:3e:f4:41:4e:66:10:9e:00:27:d4:7c:39:62:96: 8a:d3:c0:7e:22:bf:e5:ce:1b:74:62:df:bb:7e:d8: 9f:c9:2d:d7:e1:d0:ab:02:b5:75:b1:c1:e0:10:83: d7:05:df:4c:de:53:d4:a9:89:09:1b:5c:ec:cf:cc: aa:a8:04:72:dd:5f:0c:6a:a1:b3:8a:f0:43:31:39: 55:a0:a7:ef:77:c9:9b:0a:07:72:72:4b:bb:d0:38: ea:65:8e:76:e5:23:f3:14:7e:83:b7:7a:53:89:c1: b6:93:ef:90:b6:d7:dc:78:07:22:9f:a0:5c:5c:9d: 59:33:57:ae:ec:a1:9f:2f:68:09:2a:e1:8f:af:3b: 6d:40:a8:bb:28:1e:9c:68:9a:65:a1:40:2f:d5:5a: b2:c6:fb:92:ed:74:30:4d:e6:fa:6c:0d:df:f4:c2: d2:d5:aa:a9:68:73:24:5e:37:f6:00:ae:03:22:7b: d6:49:bd:71:da:87:1a:1e:e1:6d:dd:ce:d2:fe:79: 7b:1d:6e:7e:c5:73:98:88:77:ee:f2:f1:53:95:bd: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CE:1B:C4:91:9D:A8:4E:42:3E:0E:8E:85:6F:89:4B:79:47:7E:27 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cs4bxJGdqE5CPg6OhW-JS3lHfic.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.115.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:7e:b1:4e:89:d1:e6:f7:d5:a3:92:3c:b8:bc:8e:d2:e2:7c: 9f:dc:74:94:d2:3c:94:aa:ab:39:b9:26:bd:a1:64:a7:81:98: 75:51:71:f1:aa:9c:cb:48:f9:d6:7f:89:5c:a6:dd:04:11:1e: cc:54:2a:cb:88:4e:46:72:31:19:67:f0:1d:01:02:86:a4:b9: 42:3b:4b:98:9f:73:e9:47:a7:16:ad:9f:6d:10:9b:e8:9d:20: 02:fb:ab:2e:ce:9b:e9:dd:6d:eb:34:ab:1c:c3:9b:cf:57:0c: f4:5a:1b:44:66:a4:c9:cb:c0:7a:a9:cd:a3:94:2a:a2:ed:f4: 03:8e:88:8b:2c:12:dd:af:d8:48:b6:a7:16:23:2c:19:47:b8: 61:04:b4:7d:aa:bf:31:c3:46:2b:35:e2:60:14:c2:f2:ee:5e: a6:7e:04:d2:4f:a9:59:bd:55:50:97:9b:23:aa:96:c4:e3:ad: ed:19:8d:ae:95:ba:04:03:40:a6:fd:6e:f4:d1:a1:5d:85:2f: 5c:f3:0f:43:7d:98:99:d2:36:f2:db:0a:a8:30:f6:c0:08:7b: b7:f6:77:a5:5a:70:c6:fb:b9:41:2f:37:53:3b:78:37:07:55: b6:36:3d:ca:9e:af:b3:3a:33:a1:d5:22:fa:e0:dd:73:ae:96: b5:3a:27:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyQ0UxQkM0OTE5REE4 NEU0MjNFMEU4RTg1NkY4OTRCNzk0NzdFMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCegxZ4o36Dg0PY1V5uv2gS9Td3fUBRGbJM7Hek9+iNrvpGNyNy diQpG9ArpMw+9EFOZhCeACfUfDlilorTwH4iv+XOG3Ri37t+2J/JLdfh0KsCtXWx weAQg9cF30zeU9SpiQkbXOzPzKqoBHLdXwxqobOK8EMxOVWgp+93yZsKB3JyS7vQ OOpljnblI/MUfoO3elOJwbaT75C219x4ByKfoFxcnVkzV67soZ8vaAkq4Y+vO21A qLsoHpxommWhQC/VWrLG+5LtdDBN5vpsDd/0wtLVqqlocyReN/YArgMie9ZJvXHa hxoe4W3dztL+eXsdbn7Fc5iId+7y8VOVvYlXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcs4bxJGdqE5CPg6OhW+JS3lHficwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NzNGJ4SkdkcUU1Q1BnNk9o Vy1KUzNsSGZpYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THMwDQYJKoZIhvcNAQELBQADggEBAFp+sU6J0eb31aOSPLi8jtLifJ/cdJTSPJSq qzm5Jr2hZKeBmHVRcfGqnMtI+dZ/iVym3QQRHsxUKsuITkZyMRln8B0BAoakuUI7 S5ifc+lHpxatn20Qm+idIAL7qy7Om+ndbes0qxzDm89XDPRaG0RmpMnLwHqpzaOU KqLt9AOOiIssEt2v2Ei2pxYjLBlHuGEEtH2qvzHDRis14mAUwvLuXqZ+BNJPqVm9 VVCXmyOqlsTjre0Zja6VugQDQKb9bvTRoV2FL1zzD0N9mJnSNvLbCqgw9sAIe7f2 d6VacMb7uUEvN1M7eDcHVbY2Pcqer7M6M6HVIvrg3XOulrU6JyQ= -----END CERTIFICATE-----Generated at Fri Apr 18 22:41:19 2025 by rpki-client