$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h-00GHrCuv_WNvwVabeqsrcqdjM.roa File: h-00GHrCuv_WNvwVabeqsrcqdjM.roa (raw, json) Hash identifier: VoDPW/fsH1IGCEfVqvuH84Tn8F6Iqz5iST2vpQAiTy0= Subject key identifier: 87:ED:34:18:7A:C2:BA:FF:D6:36:FC:15:69:B7:AA:B2:B7:2A:76:33 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3611 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h-00GHrCuv_WNvwVabeqsrcqdjM.roa Signing time: Mon 10 Feb 2025 13:53:57 +0000 ROA not before: Mon 10 Feb 2025 13:53:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13841 (0x3611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=87ED34187AC2BAFFD636FC1569B7AAB2B72A7633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:1d:03:f2:6b:4a:91:d6:c2:02:d9:ac:88: f7:3f:d0:82:b7:57:3e:81:a4:6b:10:c8:82:23:b9: a2:cb:ff:b1:20:08:f2:15:8e:c9:9c:80:d9:aa:59: 33:42:df:a7:93:50:6e:6d:a0:21:44:53:85:ac:d5: 45:dd:76:9f:ab:23:a6:60:f3:21:eb:77:5b:3e:dd: 4b:8d:95:1a:22:c7:ec:6d:d9:6a:7c:e2:61:ef:ab: fb:0c:3e:dc:ba:0c:0e:4e:fd:69:20:b7:bd:7e:76: e7:4b:4f:4c:32:c5:8e:0f:78:c1:39:81:a2:e1:04: c6:bc:99:d1:ef:d0:e3:bb:8c:eb:6a:5f:96:2d:77: ae:82:35:2a:71:e3:e8:09:eb:2a:2c:86:98:26:15: 6f:9c:3a:11:31:a8:38:4f:5b:d0:7b:b6:20:e5:f4: a1:18:2a:7c:df:5e:6d:0f:e4:d2:23:f5:23:d7:07: f5:dc:44:46:43:1d:4e:bb:76:0d:fd:dd:d1:f6:ed: 80:49:1a:7d:1a:25:9d:92:b7:43:b6:a7:31:de:a2: 27:97:46:ed:44:83:96:67:67:7c:c6:ec:b7:3b:13: 16:6f:7d:4d:5c:7f:0c:15:5e:b0:7d:12:1a:eb:13: 65:24:0b:44:e7:f0:45:93:b2:bd:c6:a1:0f:19:f2: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:ED:34:18:7A:C2:BA:FF:D6:36:FC:15:69:B7:AA:B2:B7:2A:76:33 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h-00GHrCuv_WNvwVabeqsrcqdjM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.64.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:aa:6c:e1:51:90:83:f9:47:5c:93:f1:d2:29:cd:9f:21:8b: 01:9e:72:f5:19:ca:af:5e:33:52:d2:a3:86:55:7d:92:fa:8c: 6f:61:d2:7b:fc:68:0b:a2:5d:2e:a8:c3:ea:f3:7a:49:e4:6e: 93:91:af:62:d7:55:44:c1:6d:84:e1:47:ed:b9:ea:79:b4:8a: 70:84:55:1b:78:20:6b:85:8e:15:2e:34:28:8b:d3:66:e5:ec: e8:bf:8b:88:20:57:38:75:a8:f9:63:38:ff:bf:17:ba:96:36: 1e:4d:36:4c:f9:7e:6c:de:8d:4b:9b:d7:34:61:a8:cc:0c:88: 77:a2:53:64:7e:91:b7:b9:6b:31:e2:d3:91:c2:4c:b0:9b:ca: 20:d7:0f:9a:0f:7d:a7:8a:06:27:4d:8e:90:c2:11:43:51:5e: cc:96:91:23:84:b5:e3:07:8a:05:99:3f:56:73:a8:20:57:13: 24:fe:8e:55:31:b7:2e:ed:91:31:3f:fd:a2:3f:6d:0f:d2:08: 22:bc:01:4e:18:57:8f:39:d4:31:52:6c:c5:66:2f:4b:aa:eb: 88:19:46:fa:0f:b5:5b:2e:4a:a7:84:e7:3e:22:87:38:68:e8: e2:a7:85:35:d9:b0:23:47:1a:15:cb:f7:33:aa:84:4b:1e:51: 6c:b3:72:be -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg3RUQzNDE4N0FDMkJB RkZENjM2RkMxNTY5QjdBQUIyQjcyQTc2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF4h0D8mtKkdbCAtmsiPc/0IK3Vz6BpGsQyIIjuaLL/7EgCPIV jsmcgNmqWTNC36eTUG5toCFEU4Ws1UXddp+rI6Zg8yHrd1s+3UuNlRoix+xt2Wp8 4mHvq/sMPty6DA5O/Wkgt71+dudLT0wyxY4PeME5gaLhBMa8mdHv0OO7jOtqX5Yt d66CNSpx4+gJ6yoshpgmFW+cOhExqDhPW9B7tiDl9KEYKnzfXm0P5NIj9SPXB/Xc REZDHU67dg393dH27YBJGn0aJZ2St0O2pzHeoieXRu1Eg5ZnZ3zG7Lc7ExZvfU1c fwwVXrB9EhrrE2UkC0Tn8EWTsr3GoQ8Z8hENAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUh+00GHrCuv/WNvwVabeqsrcqdjMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2gtMDBHSHJDdXZfV052d1Zh YmVxc3JjcWRqTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wUAwDQYJKoZIhvcNAQELBQADggEBAJ+qbOFRkIP5R1yT8dIpzZ8hiwGecvUZyq9e M1LSo4ZVfZL6jG9h0nv8aAuiXS6ow+rzeknkbpORr2LXVUTBbYThR+256nm0inCE VRt4IGuFjhUuNCiL02bl7Oi/i4ggVzh1qPljOP+/F7qWNh5NNkz5fmzejUub1zRh qMwMiHeiU2R+kbe5azHi05HCTLCbyiDXD5oPfaeKBidNjpDCEUNRXsyWkSOEteMH igWZP1ZzqCBXEyT+jlUxty7tkTE//aI/bQ/SCCK8AU4YV4851DFSbMVmL0uq64gZ RvoPtVsuSqeE5z4ihzho6OKnhTXZsCNHGhXL9zOqhEseUWyzcr4= -----END CERTIFICATE-----Generated at Fri Apr 18 22:47:21 2025 by rpki-client