$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpbbcREJ2GvqeOU9U5-NvypDxbY.roa File: kpbbcREJ2GvqeOU9U5-NvypDxbY.roa (raw, json) Hash identifier: 4S70l+n0YbF2cqRXLXZbCCeljQ4DYmqc+g22ie2PqNY= Subject key identifier: 92:96:DB:71:11:09:D8:6B:EA:78:E5:3D:53:9F:8D:BF:2A:43:C5:B6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36D5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpbbcREJ2GvqeOU9U5-NvypDxbY.roa Signing time: Mon 10 Feb 2025 13:54:44 +0000 ROA not before: Mon 10 Feb 2025 13:54:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14037 (0x36d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9296DB711109D86BEA78E53D539F8DBF2A43C5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a9:fb:93:5d:55:7e:6b:0d:6b:7e:10:d2:b9: 9f:2c:d2:ec:a3:0c:71:ef:a6:f7:56:43:ad:0e:d7: 71:4f:ed:8d:e4:c8:cb:8c:a3:3c:dc:3d:cd:cd:4d: 26:5c:c4:65:44:d1:90:9f:94:45:03:fc:79:60:f6: bc:67:c3:38:09:f1:58:3a:e8:a5:7a:d5:2f:8a:d3: 25:2c:75:6b:fa:dd:22:eb:77:5d:0e:f2:8d:d8:04: f5:99:50:e1:50:ff:98:c4:3c:43:ba:31:95:04:19: f1:8c:3d:84:c9:89:05:8e:74:0b:1e:b4:02:11:29: ce:34:2a:9b:82:1f:81:bf:cc:cb:34:17:60:ef:e4: 1a:f8:cb:20:90:12:b9:ca:ff:a0:8b:e5:0a:cb:ed: df:2f:fc:6e:68:11:8a:23:0b:71:15:e2:51:1d:aa: 68:c7:4b:ca:c3:71:3e:93:f3:e4:44:5c:b8:f3:47: b1:76:77:eb:0d:39:d1:f4:15:aa:8d:c2:e9:58:cc: 2d:12:5d:7f:34:21:17:c5:39:da:66:f8:65:25:51: 6c:12:27:11:a2:49:8f:10:03:fe:bf:29:ed:cc:b7: 7c:62:4a:58:c2:32:35:16:39:bc:5a:88:b6:81:06: ea:9c:8e:d1:66:f7:b4:c5:f3:14:b5:81:a6:6d:a4: 98:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:96:DB:71:11:09:D8:6B:EA:78:E5:3D:53:9F:8D:BF:2A:43:C5:B6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpbbcREJ2GvqeOU9U5-NvypDxbY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.100.0/22 Signature Algorithm: sha256WithRSAEncryption a0:a8:bf:86:51:ed:ac:93:77:8a:bf:9b:43:9f:51:d0:c5:97: dc:7d:f2:8f:ad:ce:26:df:dc:24:c0:74:6f:b1:e6:39:b8:de: 46:98:9a:bb:48:68:61:03:41:b9:a4:0e:0f:54:4b:9c:0c:30: de:50:31:3e:64:1f:c5:ae:78:45:3d:f3:fd:8a:6a:16:b0:fa: 8d:a0:b4:2f:85:9a:6c:71:6e:12:c6:35:f5:23:d6:8f:d2:93: a0:37:7f:99:a8:bc:d1:b5:b5:c8:6b:0c:2f:a3:53:c0:4d:ab: a6:56:ca:6b:98:a5:39:bb:44:c6:fb:59:a4:3f:ff:e0:4a:5e: 77:86:3a:1a:c6:d3:4d:09:03:78:74:1d:47:21:97:2d:b6:02: e2:f4:65:54:19:41:b3:51:cc:73:22:c8:05:e3:8e:20:bf:e2: ab:2d:e6:c1:1d:9e:92:ae:a2:e5:5e:d9:c6:6c:df:f3:a8:97: db:6c:a8:e3:9d:6a:30:2a:ca:e3:44:4f:46:bb:05:2f:05:1d: 0b:f0:91:ec:58:0f:b0:7d:82:4b:52:36:c4:32:0a:7a:96:c4: 94:be:d9:5e:ce:87:dc:c5:dd:5f:4e:61:8e:f7:4e:90:a8:ab: fb:c0:ad:12:ea:b2:b1:f2:af:61:96:13:6d:ca:9e:33:1a:cd: 65:68:96:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkyOTZEQjcxMTEwOUQ4 NkJFQTc4RTUzRDUzOUY4REJGMkE0M0M1QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpqfuTXVV+aw1rfhDSuZ8s0uyjDHHvpvdWQ60O13FP7Y3kyMuM ozzcPc3NTSZcxGVE0ZCflEUD/Hlg9rxnwzgJ8Vg66KV61S+K0yUsdWv63SLrd10O 8o3YBPWZUOFQ/5jEPEO6MZUEGfGMPYTJiQWOdAsetAIRKc40KpuCH4G/zMs0F2Dv 5Br4yyCQErnK/6CL5QrL7d8v/G5oEYojC3EV4lEdqmjHS8rDcT6T8+REXLjzR7F2 d+sNOdH0FaqNwulYzC0SXX80IRfFOdpm+GUlUWwSJxGiSY8QA/6/Ke3Mt3xiSljC MjUWObxaiLaBBuqcjtFm97TF8xS1gaZtpJjRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkpbbcREJ2GvqeOU9U5+NvypDxbYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2twYmJjUkVKMkd2cWVPVTlV NS1OdnlwRHhiWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6GQwDQYJKoZIhvcNAQELBQADggEBAKCov4ZR7ayTd4q/m0OfUdDFl9x98o+tzibf 3CTAdG+x5jm43kaYmrtIaGEDQbmkDg9US5wMMN5QMT5kH8WueEU98/2Kahaw+o2g tC+FmmxxbhLGNfUj1o/Sk6A3f5movNG1tchrDC+jU8BNq6ZWymuYpTm7RMb7WaQ/ /+BKXneGOhrG000JA3h0HUchly22AuL0ZVQZQbNRzHMiyAXjjiC/4qst5sEdnpKu ouVe2cZs3/Ool9tsqOOdajAqyuNET0a7BS8FHQvwkexYD7B9gktSNsQyCnqWxJS+ 2V7Oh9zF3V9OYY73TpCoq/vArRLqsrHyr2GWE23KnjMazWVolrQ= -----END CERTIFICATE-----Generated at Fri Apr 18 22:44:00 2025 by rpki-client