$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqxttQXoEZvlipvBrdYYHJS7HF8.roa File: lqxttQXoEZvlipvBrdYYHJS7HF8.roa (raw, json) Hash identifier: 03SyU7dwB2CcW1nrkqruWaq6xdSiiSjfV+bJKFqwRc0= Subject key identifier: 96:AC:6D:B5:05:E8:11:9B:E5:8A:9B:C1:AD:D6:18:1C:94:BB:1C:5F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3542 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqxttQXoEZvlipvBrdYYHJS7HF8.roa Signing time: Mon 10 Feb 2025 13:53:10 +0000 ROA not before: Mon 10 Feb 2025 13:53:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13634 (0x3542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=96AC6DB505E8119BE58A9BC1ADD6181C94BB1C5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:ab:90:63:11:67:8d:65:ad:bf:19:5c:0a: 14:25:99:5e:9f:50:58:70:64:46:5b:32:69:1e:95: 0f:6e:41:15:8a:cf:2f:b1:45:08:47:b8:f9:b3:be: 2f:b5:89:79:b0:fc:b3:6d:e3:5e:0d:f3:8b:6b:e6: 01:15:33:6b:1f:32:11:82:55:0c:ce:f1:0c:96:3d: 26:82:5c:e1:31:e1:b1:06:6f:3d:e7:cd:fc:45:a2: 0a:0e:fc:52:39:c6:bb:73:9f:63:d2:5e:b7:fb:ed: 42:6c:02:84:b9:b9:d8:b5:8d:c9:1a:b7:ce:8b:57: 26:ef:7d:bb:48:de:3b:b3:bb:73:18:bf:ba:e6:eb: a8:22:82:04:dc:14:8c:6a:58:ea:25:d5:28:85:ac: 12:b5:15:a4:15:6d:29:ca:b8:fe:66:26:b7:26:64: f3:7b:11:9c:c1:c6:bf:62:4e:eb:ec:60:21:72:a6: d1:d7:ed:16:c5:92:da:61:89:90:9c:4a:bb:df:f5: 1f:78:42:d3:69:5e:41:4e:a3:9f:6d:be:55:40:e5: ef:5d:7d:e8:02:0d:50:40:c3:ea:bc:48:37:70:d9: 60:11:87:b6:5d:25:6e:23:94:1b:9c:ed:1a:63:f7: cf:8c:89:a4:82:3a:14:a3:36:8b:e5:39:a3:16:28: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AC:6D:B5:05:E8:11:9B:E5:8A:9B:C1:AD:D6:18:1C:94:BB:1C:5F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqxttQXoEZvlipvBrdYYHJS7HF8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.48.0/22 Signature Algorithm: sha256WithRSAEncryption a4:34:48:55:75:86:c1:36:66:25:49:32:ea:8c:46:84:a6:ce: 16:a0:d1:5b:f2:93:6f:4e:39:fc:f1:23:f5:b8:e7:75:29:f3: 25:50:29:83:9e:0f:c4:d1:91:d7:b7:d8:32:56:0a:cb:be:47: 00:98:28:5b:36:07:1e:75:63:be:3c:30:b6:a1:f2:2d:77:5a: 27:66:c4:5e:7f:ba:f2:38:2a:f5:9a:b6:79:c1:28:7e:9d:29: 87:58:b3:fd:3a:90:91:5b:84:96:16:75:30:b2:b5:98:83:c6: 1a:7b:b8:f2:d1:78:ce:7a:7f:e9:43:8b:9b:9a:f0:29:2d:03: 82:cd:a6:0d:c3:4c:eb:ea:71:54:03:88:94:bd:01:90:7d:ee: b6:c9:11:66:84:24:a8:32:77:a3:68:94:a4:5d:9c:7d:6b:7c: 22:27:3c:29:b0:32:13:2c:d6:fd:ac:8b:ae:a5:a5:8e:4b:bb: d8:ca:76:5e:54:d9:21:44:ce:f6:2f:ac:e1:a0:a9:26:be:73: aa:ab:b0:1a:45:c3:f9:71:84:be:b0:ec:31:ca:cd:d2:3e:b2: 7a:23:74:08:13:ac:ff:3f:86:a2:fa:49:9f:0d:51:f9:55:75: 91:8f:d9:67:90:f4:d5:e3:0c:cb:d2:11:2f:da:8b:f5:9d:97: d4:32:51:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk2QUM2REI1MDVFODEx OUJFNThBOUJDMUFERDYxODFDOTRCQjFDNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSiquQYxFnjWWtvxlcChQlmV6fUFhwZEZbMmkelQ9uQRWKzy+x RQhHuPmzvi+1iXmw/LNt414N84tr5gEVM2sfMhGCVQzO8QyWPSaCXOEx4bEGbz3n zfxFogoO/FI5xrtzn2PSXrf77UJsAoS5udi1jckat86LVybvfbtI3juzu3MYv7rm 66giggTcFIxqWOol1SiFrBK1FaQVbSnKuP5mJrcmZPN7EZzBxr9iTuvsYCFyptHX 7RbFktphiZCcSrvf9R94QtNpXkFOo59tvlVA5e9dfegCDVBAw+q8SDdw2WARh7Zd JW4jlBuc7Rpj98+MiaSCOhSjNovlOaMWKDRnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlqxttQXoEZvlipvBrdYYHJS7HF8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xxeHR0UVhvRVp2bGlwdkJy ZFlZSEpTN0hGOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6DAwDQYJKoZIhvcNAQELBQADggEBAKQ0SFV1hsE2ZiVJMuqMRoSmzhag0Vvyk29O OfzxI/W453Up8yVQKYOeD8TRkde32DJWCsu+RwCYKFs2Bx51Y748MLah8i13Widm xF5/uvI4KvWatnnBKH6dKYdYs/06kJFbhJYWdTCytZiDxhp7uPLReM56f+lDi5ua 8CktA4LNpg3DTOvqcVQDiJS9AZB97rbJEWaEJKgyd6NolKRdnH1rfCInPCmwMhMs 1v2si66lpY5Lu9jKdl5U2SFEzvYvrOGgqSa+c6qrsBpFw/lxhL6w7DHKzdI+snoj dAgTrP8/hqL6SZ8NUflVdZGP2WeQ9NXjDMvSES/ai/Wdl9QyUaM= -----END CERTIFICATE-----Generated at Fri Apr 18 22:41:28 2025 by rpki-client