$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qr6EBWNgoYq-ZtnIRxsHBzjFJpA.roa File: qr6EBWNgoYq-ZtnIRxsHBzjFJpA.roa (raw, json) Hash identifier: vwt8zcXlNvDhzdGX6DZWVQHoICQbzW/2OA7oK1JZjho= Subject key identifier: AA:BE:84:05:63:60:A1:8A:BE:66:D9:C8:47:1B:07:07:38:C5:26:90 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36AB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qr6EBWNgoYq-ZtnIRxsHBzjFJpA.roa Signing time: Mon 10 Feb 2025 13:54:33 +0000 ROA not before: Mon 10 Feb 2025 13:54:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13995 (0x36ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AABE84056360A18ABE66D9C8471B070738C52690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:e3:3d:5e:b1:f0:59:6f:19:8b:39:e1:a0: fb:fc:66:b3:31:c6:9b:19:cf:d6:4e:8d:e8:3b:73: b9:fa:96:83:b7:a3:50:59:93:c2:13:45:27:ac:3d: f0:a3:bf:58:90:10:a1:16:40:30:e6:d2:32:e1:5f: 7c:c7:40:ee:b8:92:e0:65:64:89:9b:f5:28:0e:b1: 9b:f8:1c:36:a8:a4:20:87:cb:fd:a3:5a:43:f9:39: f7:1a:4e:c0:54:d8:24:52:d1:f7:06:52:d5:a6:b8: 3e:81:a7:d4:27:2d:12:cd:d5:83:6d:eb:d4:62:ed: 75:4a:a1:91:5f:22:de:1c:d2:70:52:82:07:7c:8b: e8:40:b6:b8:bd:22:90:05:10:23:da:f8:4d:ac:36: 18:38:28:00:5a:05:00:63:4d:ab:f9:fc:cb:26:bb: f6:6a:34:61:bb:98:b1:05:67:3e:2e:18:9e:3c:59: a1:14:d3:f9:d0:eb:f8:fe:4d:24:d2:fb:6d:9e:15: d1:56:2c:64:d7:67:81:6f:1e:d3:d9:a6:82:80:1f: 40:0e:5d:cf:93:44:e1:36:44:1e:20:6d:fa:f3:fd: 29:5b:75:39:b6:bf:ac:38:04:8e:b7:21:44:f3:a2: 2c:e7:21:38:7e:ac:1e:fc:3c:46:ca:43:22:a9:09: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BE:84:05:63:60:A1:8A:BE:66:D9:C8:47:1B:07:07:38:C5:26:90 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qr6EBWNgoYq-ZtnIRxsHBzjFJpA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.100.0/22 Signature Algorithm: sha256WithRSAEncryption 70:92:c9:67:4f:92:ea:a0:47:ee:b0:cb:9b:e0:4d:d2:0f:6f: e8:cb:d2:8d:b0:44:ce:db:51:fc:9a:73:0d:70:dd:c3:25:1e: 0c:8a:11:61:53:ac:df:2e:4e:91:13:fe:49:34:aa:31:e7:ea: e9:b5:81:0e:78:0e:ef:fa:91:06:20:51:6a:c6:8e:71:0a:dc: d1:df:99:9d:21:37:5f:9b:df:2e:0d:ab:c0:7c:ef:a9:7d:c6: d5:47:ff:46:6f:7f:28:df:31:bf:a4:4d:06:29:c6:a3:32:3d: ee:a9:d9:d2:04:e4:7a:ec:e4:d2:2d:89:52:e9:51:4a:7f:28: bc:3d:11:58:3c:1f:79:e5:55:31:cb:87:4a:a6:d8:58:b4:4b: 88:b4:f1:a2:b5:69:75:23:a4:57:96:46:e5:2c:23:f6:f9:60: 05:8a:50:f2:3e:67:fe:0b:01:8d:68:ed:d4:9d:d3:55:fc:4d: e1:e6:76:89:0c:f0:76:0e:12:c3:6f:f6:61:71:91:80:d9:6c: 48:50:05:68:8f:7f:21:8f:dc:4f:d6:52:f1:ef:c8:38:74:b1: dc:b8:ca:44:40:26:a7:e5:55:39:66:d8:a8:b2:2b:7e:5a:33: 8b:25:57:8e:0f:59:9e:95:82:5c:99:b3:45:eb:da:ea:b2:74: 6a:c2:5c:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFBQkU4NDA1NjM2MEEx OEFCRTY2RDlDODQ3MUIwNzA3MzhDNTI2OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ7+M9XrHwWW8ZiznhoPv8ZrMxxpsZz9ZOjeg7c7n6loO3o1BZ k8ITRSesPfCjv1iQEKEWQDDm0jLhX3zHQO64kuBlZImb9SgOsZv4HDaopCCHy/2j WkP5OfcaTsBU2CRS0fcGUtWmuD6Bp9QnLRLN1YNt69Ri7XVKoZFfIt4c0nBSggd8 i+hAtri9IpAFECPa+E2sNhg4KABaBQBjTav5/Msmu/ZqNGG7mLEFZz4uGJ48WaEU 0/nQ6/j+TSTS+22eFdFWLGTXZ4FvHtPZpoKAH0AOXc+TROE2RB4gbfrz/SlbdTm2 v6w4BI63IUTzoiznITh+rB78PEbKQyKpCXI5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqr6EBWNgoYq+ZtnIRxsHBzjFJpAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FyNkVCV05nb1lxLVp0bklS eHNIQnpqRkpwQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6WQwDQYJKoZIhvcNAQELBQADggEBAHCSyWdPkuqgR+6wy5vgTdIPb+jL0o2wRM7b Ufyacw1w3cMlHgyKEWFTrN8uTpET/kk0qjHn6um1gQ54Du/6kQYgUWrGjnEK3NHf mZ0hN1+b3y4Nq8B876l9xtVH/0ZvfyjfMb+kTQYpxqMyPe6p2dIE5Hrs5NItiVLp UUp/KLw9EVg8H3nlVTHLh0qm2Fi0S4i08aK1aXUjpFeWRuUsI/b5YAWKUPI+Z/4L AY1o7dSd01X8TeHmdokM8HYOEsNv9mFxkYDZbEhQBWiPfyGP3E/WUvHvyDh0sdy4 ykRAJqflVTlm2KiyK35aM4slV44PWZ6VglyZs0Xr2uqydGrCXHQ= -----END CERTIFICATE-----Generated at Wed Apr 23 04:36:58 2025 by rpki-client