$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qKu2e6F9qUdHa1-1zQnqkKBqDME.roa File: qKu2e6F9qUdHa1-1zQnqkKBqDME.roa (raw, json) Hash identifier: bg4AOrjc4LB56dzk2mjA3CZ1+1F5VA9skcKxQf7jGeY= Subject key identifier: A8:AB:B6:7B:A1:7D:A9:47:47:6B:5F:B5:CD:09:EA:90:A0:6A:0C:C1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3579 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qKu2e6F9qUdHa1-1zQnqkKBqDME.roa Signing time: Mon 10 Feb 2025 13:53:22 +0000 ROA not before: Mon 10 Feb 2025 13:53:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13689 (0x3579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A8ABB67BA17DA947476B5FB5CD09EA90A06A0CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a6:3a:53:2a:86:5f:e0:67:59:9d:d0:36:67: de:20:0f:ac:98:b9:89:27:85:71:70:ab:5e:40:8a: 6c:de:1a:80:12:52:67:c2:88:a4:db:2a:9e:d6:5a: d2:f9:77:e4:10:dc:9a:d4:6e:df:21:07:29:e3:1d: 4a:46:38:37:43:5b:8b:48:1d:b7:23:26:2b:8c:a1: f9:a8:24:22:e3:e5:c0:cb:65:98:de:24:af:67:23: 6f:fd:76:70:2f:5b:ea:56:b5:73:41:68:06:5c:08: b0:b8:88:04:45:b4:6c:d8:5d:3c:b6:fb:26:4f:93: 1d:ad:c5:c2:e2:91:d5:0f:aa:86:6f:e2:14:93:d2: ef:44:a5:23:c0:b2:c4:9b:6c:c2:e5:87:cf:6d:df: 15:3b:21:bd:fb:9f:9b:01:f1:e3:e0:19:11:23:50: d8:30:c1:40:1c:8c:55:18:2d:99:c6:4f:ad:ba:c7: bb:e9:4f:90:31:62:9d:0c:d5:0c:e3:5e:aa:d5:ef: ce:aa:c3:fa:87:08:5a:0f:c1:3c:3e:14:44:f6:6e: b3:1e:87:10:04:cf:cb:8b:c0:38:40:54:3e:dc:79: d2:55:34:8c:6e:a8:47:e2:4f:4a:22:c1:00:41:6e: 25:e0:4a:c3:82:1e:af:0f:6b:ee:d6:43:c2:d2:d8: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AB:B6:7B:A1:7D:A9:47:47:6B:5F:B5:CD:09:EA:90:A0:6A:0C:C1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qKu2e6F9qUdHa1-1zQnqkKBqDME.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.144.0/22 Signature Algorithm: sha256WithRSAEncryption 40:ef:c6:85:5f:51:c2:5b:eb:b0:11:1e:da:57:4a:47:1e:95: 37:64:1e:c5:d8:fb:13:b5:9e:89:73:05:ff:fd:e0:d3:75:3c: 4c:e9:81:f3:ab:2c:4a:d9:4a:63:5d:95:08:43:40:e1:fe:e0: 3b:0e:2f:d5:a6:32:ea:0a:6a:30:65:03:24:c6:d4:23:d1:aa: f8:3e:b2:ae:21:b0:9f:48:00:fd:cf:8a:12:41:12:2e:10:3a: 5b:63:cc:e7:b1:17:5e:82:ff:c5:82:64:2d:3e:ee:61:b2:1d: ee:06:60:cf:68:91:18:c4:d5:61:d9:1d:51:17:90:64:6f:53: a0:76:08:54:41:c3:55:0d:3d:0d:ff:c1:cb:20:ad:26:b4:d7: f4:9b:0f:f8:e5:65:be:15:44:10:64:6f:3c:24:ba:be:6e:a0: 2b:90:f2:4d:ac:24:79:04:27:c3:a7:73:a2:29:36:7d:5e:3c: 3a:a9:64:ec:4e:34:9d:56:ff:0e:84:8e:a9:0e:a0:cc:37:c0: a4:9c:85:03:b6:b4:51:02:93:5f:8a:66:62:75:b0:17:b6:e9: 56:89:88:14:f1:04:03:eb:7b:80:2e:10:6b:0c:77:39:15:10: b4:d1:3d:20:27:ea:bb:8a:fe:e2:e0:d9:ab:c9:04:61:be:7d: 56:5f:a1:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE4QUJCNjdCQTE3REE5 NDc0NzZCNUZCNUNEMDlFQTkwQTA2QTBDQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvpjpTKoZf4GdZndA2Z94gD6yYuYknhXFwq15AimzeGoASUmfC iKTbKp7WWtL5d+QQ3JrUbt8hBynjHUpGODdDW4tIHbcjJiuMofmoJCLj5cDLZZje JK9nI2/9dnAvW+pWtXNBaAZcCLC4iARFtGzYXTy2+yZPkx2txcLikdUPqoZv4hST 0u9EpSPAssSbbMLlh89t3xU7Ib37n5sB8ePgGREjUNgwwUAcjFUYLZnGT626x7vp T5AxYp0M1QzjXqrV786qw/qHCFoPwTw+FET2brMehxAEz8uLwDhAVD7cedJVNIxu qEfiT0oiwQBBbiXgSsOCHq8Pa+7WQ8LS2GoZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqKu2e6F9qUdHa1+1zQnqkKBqDMEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FLdTJlNkY5cVVkSGExLTF6 UW5xa0tCcURNRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6ZAwDQYJKoZIhvcNAQELBQADggEBAEDvxoVfUcJb67ARHtpXSkcelTdkHsXY+xO1 nolzBf/94NN1PEzpgfOrLErZSmNdlQhDQOH+4DsOL9WmMuoKajBlAyTG1CPRqvg+ sq4hsJ9IAP3PihJBEi4QOltjzOexF16C/8WCZC0+7mGyHe4GYM9okRjE1WHZHVEX kGRvU6B2CFRBw1UNPQ3/wcsgrSa01/SbD/jlZb4VRBBkbzwkur5uoCuQ8k2sJHkE J8Onc6IpNn1ePDqpZOxONJ1W/w6EjqkOoMw3wKSchQO2tFECk1+KZmJ1sBe26VaJ iBTxBAPre4AuEGsMdzkVELTRPSAn6ruK/uLg2avJBGG+fVZfoTw= -----END CERTIFICATE-----Generated at Fri Apr 18 22:23:47 2025 by rpki-client