$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dO5XQq_LVoJk4k9Cn942kWxPNkI.roa File: dO5XQq_LVoJk4k9Cn942kWxPNkI.roa (raw, json) Hash identifier: dnOtXmlvys5fUjATXc3cMi/L0aeS4YVMJ4vn/5+GrUU= Subject key identifier: 74:EE:57:42:AF:CB:56:82:64:E2:4F:42:9F:DE:36:91:6C:4F:36:42 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34BC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dO5XQq_LVoJk4k9Cn942kWxPNkI.roa Signing time: Mon 10 Feb 2025 13:52:39 +0000 ROA not before: Mon 10 Feb 2025 13:52:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.201.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=74EE5742AFCB568264E24F429FDE36916C4F3642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:0d:c1:eb:14:87:04:37:85:18:43:b2:ca: 64:45:4a:fc:81:54:c5:02:36:62:21:03:2d:d5:66: 52:42:e1:3f:66:74:c5:7f:68:70:df:22:87:96:12: 56:bd:49:78:14:cc:60:0e:70:61:61:38:f2:e6:0c: e8:4e:33:df:cb:37:75:a2:d5:d0:7b:73:c6:9c:5c: ed:bb:24:f0:8b:43:68:01:fd:91:b4:d7:6b:a7:d9: e4:b7:c5:9d:2e:92:9c:72:f4:a0:cd:9c:1f:82:52: 04:4e:bd:c7:36:bd:80:ca:42:dc:f6:01:66:f9:0d: e4:00:4d:e3:df:86:75:e8:02:35:c1:5f:86:f9:71: de:bd:70:45:19:3d:f6:26:2e:85:7a:19:3d:14:50: 8c:d1:32:d7:ba:1c:24:8d:18:3f:b2:b9:16:f0:1e: 87:f1:35:01:37:87:53:01:bf:bc:ce:fd:fd:b9:52: c7:19:cb:2c:28:54:77:95:33:32:09:76:81:32:af: d2:57:f5:0d:ea:fd:07:ab:bb:2b:aa:86:21:b0:f4: 69:17:c4:82:70:b1:e6:1b:f5:bb:71:49:2f:eb:e2: d2:1f:07:f2:a6:6c:a9:51:b4:38:ef:76:dd:90:ec: e0:ee:d0:36:aa:89:6d:c1:ba:b3:86:ed:6d:1a:da: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EE:57:42:AF:CB:56:82:64:E2:4F:42:9F:DE:36:91:6C:4F:36:42 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dO5XQq_LVoJk4k9Cn942kWxPNkI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.201.64/26 Signature Algorithm: sha256WithRSAEncryption 94:fe:7b:90:f1:67:9a:5c:ac:73:00:e4:de:06:d0:01:df:97: bf:80:c4:e0:7d:70:34:a0:32:9d:ac:ec:3f:f1:21:cd:be:78: a2:8e:f3:b4:94:1a:b5:b2:bc:39:18:49:e4:b5:12:dd:f8:ab: 62:c2:f5:da:77:c6:96:bc:83:4a:5f:a8:f3:a2:35:df:2e:d9: fb:50:fa:80:c3:de:b8:91:ba:75:34:8a:1d:2d:7f:86:2c:8d: 83:30:c6:99:a7:1a:f3:e3:50:c5:98:65:2e:1b:47:20:25:7f: 8a:85:3c:ac:ae:a9:6a:75:17:04:de:17:83:12:58:f3:3b:0c: 90:e2:b3:73:dc:4a:c6:e5:c7:2f:d2:44:68:b3:1e:65:c3:f9: e0:46:39:5f:a5:34:cb:4a:a4:97:6c:12:dc:ae:72:d1:cf:14: 4e:f7:9a:1b:85:78:e7:f6:26:3e:d9:da:44:6e:e5:69:1b:35: 82:10:b1:f2:03:de:95:13:ec:69:fe:4b:f0:c7:68:a3:24:c9: 5e:bd:4a:47:a3:ca:7b:f0:e4:7d:7a:40:52:9e:5d:71:8d:68: 9d:dc:bc:5d:13:b0:d9:da:ee:de:d4:7c:70:d1:0f:92:59:44: 5f:06:af:7c:7c:f3:e7:f1:33:da:84:5c:78:76:a9:44:61:b1: be:91:28:56 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc0RUU1NzQyQUZDQjU2 ODI2NEUyNEY0MjlGREUzNjkxNkM0RjM2NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYHg3B6xSHBDeFGEOyymRFSvyBVMUCNmIhAy3VZlJC4T9mdMV/ aHDfIoeWEla9SXgUzGAOcGFhOPLmDOhOM9/LN3Wi1dB7c8acXO27JPCLQ2gB/ZG0 12un2eS3xZ0ukpxy9KDNnB+CUgROvcc2vYDKQtz2AWb5DeQATePfhnXoAjXBX4b5 cd69cEUZPfYmLoV6GT0UUIzRMte6HCSNGD+yuRbwHofxNQE3h1MBv7zO/f25UscZ yywoVHeVMzIJdoEyr9JX9Q3q/QeruyuqhiGw9GkXxIJwseYb9btxSS/r4tIfB/Km bKlRtDjvdt2Q7ODu0DaqiW3BurOG7W0a2lF3AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUdO5XQq/LVoJk4k9Cn942kWxPNkIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RPNVhRcV9MVm9KazRrOUNu OTQya1d4UE5rSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ2 6MlAMA0GCSqGSIb3DQEBCwUAA4IBAQCU/nuQ8WeaXKxzAOTeBtAB35e/gMTgfXA0 oDKdrOw/8SHNvniijvO0lBq1srw5GEnktRLd+KtiwvXad8aWvINKX6jzojXfLtn7 UPqAw964kbp1NIodLX+GLI2DMMaZpxrz41DFmGUuG0cgJX+KhTysrqlqdRcE3heD EljzOwyQ4rNz3ErG5ccv0kRosx5lw/ngRjlfpTTLSqSXbBLcrnLRzxRO95obhXjn 9iY+2dpEbuVpGzWCELHyA96VE+xp/kvwx2ijJMlevUpHo8p78OR9ekBSnl1xjWid 3LxdE7DZ2u7e1Hxw0Q+SWURfBq98fPPn8TPahFx4dqlEYbG+kShW -----END CERTIFICATE-----Generated at Wed Apr 23 04:50:28 2025 by rpki-client