$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-Kwv6vBQw-TzdybuX-Q-fgVF-A.roa File: k-Kwv6vBQw-TzdybuX-Q-fgVF-A.roa (raw, json) Hash identifier: NBajgSI4vy8kDQVkN1M2M9lVvDA969hG/QGViGIiK9E= Subject key identifier: 93:E2:B0:BF:AB:C1:43:0F:93:CD:DC:9B:B9:7F:90:F9:F8:15:17:E0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 366D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-Kwv6vBQw-TzdybuX-Q-fgVF-A.roa Signing time: Mon 10 Feb 2025 13:54:19 +0000 ROA not before: Mon 10 Feb 2025 13:54:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13933 (0x366d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=93E2B0BFABC1430F93CDDC9BB97F90F9F81517E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:b2:6f:3f:04:0c:bf:28:0a:b7:58:b7:97: 70:56:35:78:d8:90:f0:d7:8d:36:3c:79:04:1d:58: ce:15:88:8c:46:94:53:b7:6d:c9:dd:e1:2b:54:e6: 44:8d:93:aa:48:94:48:41:f5:db:86:dd:46:47:d7: 13:f1:f4:c9:4e:7c:6f:4d:3a:23:e0:b6:dc:16:fb: 60:d7:42:a1:10:de:a5:ca:69:1d:7e:bf:71:16:18: d7:02:95:f8:d9:ee:72:25:c1:71:2b:b8:49:78:f0: 91:15:e4:44:38:a4:5d:d9:d9:a3:d5:48:44:46:93: 80:c8:10:cd:07:28:96:c4:2c:20:d1:65:3a:ec:c6: 3d:4a:2f:81:b3:cc:20:66:2e:55:c6:9c:18:76:24: 9b:6c:37:0d:48:7c:98:1c:07:cb:62:81:3e:94:7d: 11:5b:3f:15:8a:da:ab:e4:bc:3c:e2:ea:f0:50:d4: 51:ae:80:4a:23:57:bd:a0:dc:39:07:a5:b8:f6:99: 4a:6a:fb:3e:02:46:b6:da:10:e5:a9:8b:62:ea:71: f8:74:c9:58:5a:97:1d:4f:e9:c4:03:32:f6:b3:be: 98:99:ca:a4:08:1a:47:e7:64:d7:56:3d:a9:d5:cc: 49:c6:69:9d:f9:cf:2e:75:47:1b:de:aa:c8:1d:25: bb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E2:B0:BF:AB:C1:43:0F:93:CD:DC:9B:B9:7F:90:F9:F8:15:17:E0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-Kwv6vBQw-TzdybuX-Q-fgVF-A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.132.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:0a:16:35:fb:0e:21:3b:6f:c6:f9:c7:ec:e2:29:4f:35:0f: 26:b3:d3:dc:c9:7a:40:c8:b4:e1:55:93:e9:cd:b1:69:a8:ec: 8b:12:21:a2:81:db:f4:83:ac:7b:ab:a1:39:de:2b:de:c4:a9: 08:6b:63:75:ca:8f:0c:2d:46:37:66:9e:9e:39:35:be:17:d7: 53:aa:bf:22:14:a1:33:2a:b5:34:2c:35:e6:4d:74:18:2b:d1: 18:0d:99:9f:62:49:b3:a3:1d:b9:87:9e:63:a3:2c:80:2e:6b: 05:8c:ba:34:44:50:41:79:a8:d9:1a:ac:97:33:60:2b:28:50: 24:fa:f4:5b:27:04:97:db:c1:75:cd:cd:48:60:7b:75:6e:d5: dc:12:17:21:d4:11:15:bd:59:d0:6e:2e:1e:02:7a:8b:83:e7: ac:87:65:ac:33:de:11:5f:4b:c6:22:06:88:f4:d0:f6:9d:82: 12:fa:01:ab:ad:38:96:ab:43:82:6e:1e:a4:bc:73:81:ef:58: 40:2b:23:d6:ca:29:c0:ae:d7:8c:86:6d:21:4b:b1:cf:b0:1d: 1b:6c:63:8b:6f:63:a4:1c:af:fd:97:5c:64:7f:a7:21:b1:b3: e0:47:5b:e2:94:e1:2e:a5:eb:6f:8d:41:aa:a1:56:75:4b:49: 08:f8:df:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkzRTJCMEJGQUJDMTQz MEY5M0NEREM5QkI5N0Y5MEY5RjgxNTE3RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3zrJvPwQMvygKt1i3l3BWNXjYkPDXjTY8eQQdWM4ViIxGlFO3 bcnd4StU5kSNk6pIlEhB9duG3UZH1xPx9MlOfG9NOiPgttwW+2DXQqEQ3qXKaR1+ v3EWGNcClfjZ7nIlwXEruEl48JEV5EQ4pF3Z2aPVSERGk4DIEM0HKJbELCDRZTrs xj1KL4GzzCBmLlXGnBh2JJtsNw1IfJgcB8tigT6UfRFbPxWK2qvkvDzi6vBQ1FGu gEojV72g3DkHpbj2mUpq+z4CRrbaEOWpi2Lqcfh0yVhalx1P6cQDMvazvpiZyqQI GkfnZNdWPanVzEnGaZ35zy51RxveqsgdJbtBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUk+Kwv6vBQw+TzdybuX+Q+fgVF+AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2stS3d2NnZCUXctVHpkeWJ1 WC1RLWZnVkYtQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6YQwDQYJKoZIhvcNAQELBQADggEBAIsKFjX7DiE7b8b5x+ziKU81Dyaz09zJekDI tOFVk+nNsWmo7IsSIaKB2/SDrHuroTneK97EqQhrY3XKjwwtRjdmnp45Nb4X11Oq vyIUoTMqtTQsNeZNdBgr0RgNmZ9iSbOjHbmHnmOjLIAuawWMujREUEF5qNkarJcz YCsoUCT69FsnBJfbwXXNzUhge3Vu1dwSFyHUERW9WdBuLh4CeouD56yHZawz3hFf S8YiBoj00PadghL6AautOJarQ4JuHqS8c4HvWEArI9bKKcCu14yGbSFLsc+wHRts Y4tvY6Qcr/2XXGR/pyGxs+BHW+KU4S6l62+NQaqhVnVLSQj43zo= -----END CERTIFICATE-----Generated at Wed Apr 23 04:43:42 2025 by rpki-client