$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/enRcwSYrRBoY9uW5r7QZG3zX2bY.roa File: enRcwSYrRBoY9uW5r7QZG3zX2bY.roa (raw, json) Hash identifier: Y99eAV4v1ucBmJ+QeesllKpcRIvwAZ6K3lOvQXDRqug= Subject key identifier: 7A:74:5C:C1:26:2B:44:1A:18:F6:E5:B9:AF:B4:19:1B:7C:D7:D9:B6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 351A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/enRcwSYrRBoY9uW5r7QZG3zX2bY.roa Signing time: Mon 10 Feb 2025 13:53:00 +0000 ROA not before: Mon 10 Feb 2025 13:53:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13594 (0x351a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7A745CC1262B441A18F6E5B9AFB4191B7CD7D9B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:3b:21:df:79:fb:c4:54:e3:ec:e0:77:16: 28:29:38:fc:f2:c0:c8:3c:61:00:6b:76:5d:51:62: af:e1:cd:e2:da:7a:b8:62:b4:f6:7f:66:cc:3d:63: 84:6f:0d:b5:3f:42:1d:18:3f:4e:f0:e6:8b:43:84: af:ec:03:44:15:09:a4:3f:88:c0:a8:47:f2:11:c4: 71:a8:5e:eb:b7:ad:c0:aa:25:dd:93:de:e7:d4:c4: 5e:78:72:e2:37:d3:e4:35:f4:9a:db:b8:5b:0a:3e: 1e:b9:3e:1d:c1:c4:7d:9d:f0:7c:7a:74:2b:09:18: 4a:d9:9d:b5:45:79:6f:82:e4:ae:c7:e7:ab:e9:b7: e3:28:16:cb:e9:d0:e3:da:7a:67:17:e3:9b:04:e6: 90:65:ba:c1:44:5e:75:8f:ee:78:ab:df:e0:40:e1: dc:48:67:e2:32:87:57:1f:5d:32:1d:5c:f4:de:54: f8:4f:48:f4:1d:64:aa:c6:fb:49:0c:cf:c2:87:50: 7f:29:02:e5:35:63:86:31:fd:e7:19:8b:91:7e:a4: d7:4f:8f:3a:73:b2:ff:ac:93:ec:3e:f2:e1:b2:b4: 5d:fa:ad:06:af:a5:ac:50:ef:7b:56:03:86:9d:ed: cc:91:11:22:d4:a6:9f:37:1a:04:8d:98:ef:ad:f6: 07:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:74:5C:C1:26:2B:44:1A:18:F6:E5:B9:AF:B4:19:1B:7C:D7:D9:B6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/enRcwSYrRBoY9uW5r7QZG3zX2bY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.32.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:f0:31:56:18:de:78:be:82:79:00:e5:da:fb:ad:9c:81:10: 80:80:eb:87:11:3c:7e:b3:1a:51:69:93:e4:57:d2:38:1f:75: c2:3c:57:9d:9a:4a:5e:45:12:c2:eb:5e:db:61:39:e9:bd:56: 77:f8:94:fb:05:49:7b:e1:5d:24:59:cf:36:13:30:12:cb:f3: e7:96:01:79:ad:41:dc:e3:75:f6:8a:15:38:bb:fe:4e:33:97: 2c:05:cb:8e:67:9e:3e:b4:99:55:11:ed:c4:6e:75:e4:fb:2f: a7:7e:76:94:7e:18:ae:94:43:5c:b4:a8:43:c5:b2:c1:5d:57: 5f:03:98:b8:83:48:21:4e:5e:06:49:f5:91:f6:b3:57:07:5d: 95:31:83:69:d4:85:aa:db:b5:f2:10:2b:9c:a9:55:95:d7:83: 1e:44:a2:b1:7f:34:83:12:eb:7f:a7:44:3c:fa:73:10:3d:33: 97:95:a3:33:d3:00:11:46:07:22:43:f4:02:04:7b:6a:fb:09: 65:c0:b3:3d:f7:aa:aa:6d:b1:8f:a2:c6:f9:5e:12:3d:4b:16: cb:6c:1f:6f:f4:94:20:2e:33:61:c3:3d:22:c5:f8:03:b1:a8: 97:40:7b:21:37:cb:1c:0e:a8:b0:44:8e:dc:e3:93:83:7d:05: 64:0d:d3:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdBNzQ1Q0MxMjYyQjQ0 MUExOEY2RTVCOUFGQjQxOTFCN0NEN0Q5QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCthjsh33n7xFTj7OB3FigpOPzywMg8YQBrdl1RYq/hzeLaerhi tPZ/Zsw9Y4RvDbU/Qh0YP07w5otDhK/sA0QVCaQ/iMCoR/IRxHGoXuu3rcCqJd2T 3ufUxF54cuI30+Q19JrbuFsKPh65Ph3BxH2d8Hx6dCsJGErZnbVFeW+C5K7H56vp t+MoFsvp0OPaemcX45sE5pBlusFEXnWP7nir3+BA4dxIZ+Iyh1cfXTIdXPTeVPhP SPQdZKrG+0kMz8KHUH8pAuU1Y4Yx/ecZi5F+pNdPjzpzsv+sk+w+8uGytF36rQav paxQ73tWA4ad7cyRESLUpp83GgSNmO+t9gdLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUenRcwSYrRBoY9uW5r7QZG3zX2bYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VuUmN3U1lyUkJvWTl1VzVy N1FaRzN6WDJiWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wSAwDQYJKoZIhvcNAQELBQADggEBAJ3wMVYY3ni+gnkA5dr7rZyBEICA64cRPH6z GlFpk+RX0jgfdcI8V52aSl5FEsLrXtthOem9Vnf4lPsFSXvhXSRZzzYTMBLL8+eW AXmtQdzjdfaKFTi7/k4zlywFy45nnj60mVUR7cRudeT7L6d+dpR+GK6UQ1y0qEPF ssFdV18DmLiDSCFOXgZJ9ZH2s1cHXZUxg2nUharbtfIQK5ypVZXXgx5EorF/NIMS 63+nRDz6cxA9M5eVozPTABFGByJD9AIEe2r7CWXAsz33qqptsY+ixvleEj1LFsts H2/0lCAuM2HDPSLF+AOxqJdAeyE3yxwOqLBEjtzjk4N9BWQN07c= -----END CERTIFICATE-----Generated at Tue Apr 22 15:13:17 2025 by rpki-client