$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ne8ybw5ydCbejIxa0wxXIA5-di4.roa File: ne8ybw5ydCbejIxa0wxXIA5-di4.roa (raw, json) Hash identifier: TZwtNtL8hb9w6x0nxYzTMSpwsxmOL4gEI8aYcIU2naA= Subject key identifier: 9D:EF:32:6F:0E:72:74:26:DE:8C:8C:5A:D3:0C:57:20:0E:7E:76:2E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3605 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ne8ybw5ydCbejIxa0wxXIA5-di4.roa Signing time: Mon 10 Feb 2025 13:53:54 +0000 ROA not before: Mon 10 Feb 2025 13:53:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13829 (0x3605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9DEF326F0E727426DE8C8C5AD30C57200E7E762E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:62:ea:cb:f5:9e:30:99:e8:59:73:52:57: 98:62:b0:59:cd:32:66:85:f3:22:f4:15:67:99:53: 0a:cb:01:bf:d1:26:07:f4:10:6e:92:f9:5c:e1:c4: c2:32:6c:27:f5:70:14:3c:24:51:b3:d0:c3:82:07: b2:c4:98:d5:7b:09:f7:15:6b:d9:a2:8b:92:e0:bf: 0c:74:9f:19:0b:43:93:80:ea:07:0b:05:fa:d8:78: 2b:3a:99:14:54:99:bf:8c:63:b2:b9:79:7d:c5:6f: ce:09:4a:ad:63:d1:ab:e4:ad:15:4b:37:dd:ab:2c: 11:e3:ef:c1:8d:17:3d:fd:8c:93:6a:32:d7:8e:1b: 9b:c7:05:1f:0e:41:90:21:57:1c:8d:4d:83:47:e0: d0:9e:a6:37:d4:e2:55:57:fc:6c:55:0f:ea:c2:70: ea:cc:1b:cc:07:bf:39:35:88:ac:89:dd:27:44:38: 3e:7a:b3:64:ee:e4:c0:f0:39:a3:84:e3:fa:7c:4f: 10:33:e5:2d:c6:8e:a3:49:7a:ea:43:b5:46:73:5c: 49:06:0c:1d:b6:d8:ac:22:ca:90:0a:22:73:2b:9b: ba:4b:18:24:93:7c:93:df:02:2c:a0:a9:fa:00:d5: df:ba:bf:73:1b:5f:c5:58:31:70:e0:80:81:10:30: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EF:32:6F:0E:72:74:26:DE:8C:8C:5A:D3:0C:57:20:0E:7E:76:2E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ne8ybw5ydCbejIxa0wxXIA5-di4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.192.0/22 Signature Algorithm: sha256WithRSAEncryption b8:86:da:50:b8:ce:1e:38:17:7d:b5:55:f2:5b:ba:0e:80:a3: 3a:f3:bb:e5:90:f8:dc:3b:57:21:19:e1:05:60:01:93:0d:7d: 84:2a:aa:84:a8:26:de:ee:a5:01:52:ff:b3:3a:b1:97:bc:58: fa:8b:16:d6:5a:b9:b4:7c:19:11:e6:17:4c:92:23:35:0e:95: 9c:ed:42:21:f5:9c:67:b7:9b:5c:b8:d2:14:fb:67:7e:3b:7d: 57:d7:d2:ad:fd:52:02:01:1a:c6:3d:0f:d0:9e:12:0c:8c:36: c9:80:06:9e:25:de:30:f2:13:9e:3e:cb:e9:55:24:f5:16:95: 9c:2d:47:d1:f0:47:da:14:24:42:6a:24:74:ca:c1:c8:17:45: a9:8a:9a:4d:25:98:d0:05:e9:cf:25:fb:29:50:7e:89:8b:be: ae:d9:51:db:a6:2a:cf:b1:4f:52:0e:f3:93:90:99:96:44:8c: 72:ad:ad:39:ae:3e:64:61:ee:de:6e:00:c0:16:aa:9c:10:40: ce:e9:76:d8:17:d3:f1:ec:20:a0:c2:60:16:e5:8f:b9:40:11: f4:29:a9:b8:8b:67:c7:fb:4e:72:21:12:19:c3:63:99:92:46: 7f:cd:d1:72:ba:47:d9:8f:f0:7d:37:cf:0b:07:fc:23:a5:19: cd:08:d8:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlERUYzMjZGMEU3Mjc0 MjZERThDOEM1QUQzMEM1NzIwMEU3RTc2MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqUWLqy/WeMJnoWXNSV5hisFnNMmaF8yL0FWeZUwrLAb/RJgf0 EG6S+VzhxMIybCf1cBQ8JFGz0MOCB7LEmNV7CfcVa9mii5Lgvwx0nxkLQ5OA6gcL BfrYeCs6mRRUmb+MY7K5eX3Fb84JSq1j0avkrRVLN92rLBHj78GNFz39jJNqMteO G5vHBR8OQZAhVxyNTYNH4NCepjfU4lVX/GxVD+rCcOrMG8wHvzk1iKyJ3SdEOD56 s2Tu5MDwOaOE4/p8TxAz5S3GjqNJeupDtUZzXEkGDB222KwiypAKInMrm7pLGCST fJPfAiygqfoA1d+6v3MbX8VYMXDggIEQMPHDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUne8ybw5ydCbejIxa0wxXIA5+di4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25lOHlidzV5ZENiZWpJeGEw d3hYSUE1LWRpNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w8AwDQYJKoZIhvcNAQELBQADggEBALiG2lC4zh44F321VfJbug6Aozrzu+WQ+Nw7 VyEZ4QVgAZMNfYQqqoSoJt7upQFS/7M6sZe8WPqLFtZaubR8GRHmF0ySIzUOlZzt QiH1nGe3m1y40hT7Z347fVfX0q39UgIBGsY9D9CeEgyMNsmABp4l3jDyE54+y+lV JPUWlZwtR9HwR9oUJEJqJHTKwcgXRamKmk0lmNAF6c8l+ylQfomLvq7ZUdumKs+x T1IO85OQmZZEjHKtrTmuPmRh7t5uAMAWqpwQQM7pdtgX0/HsIKDCYBblj7lAEfQp qbiLZ8f7TnIhEhnDY5mSRn/N0XK6R9mP8H03zwsH/COlGc0I2CY= -----END CERTIFICATE-----Generated at Wed Apr 23 00:37:46 2025 by rpki-client