$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxZfPyT_AFhRuobswqp3vYB2SRM.roa File: rxZfPyT_AFhRuobswqp3vYB2SRM.roa (raw, json) Hash identifier: p2r/M56Zv9QfSTWsgbvWJ/Ja4W/HcHqTwRuqE7ozdaI= Subject key identifier: AF:16:5F:3F:24:FF:00:58:51:BA:86:EC:C2:AA:77:BD:80:76:49:13 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35CA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxZfPyT_AFhRuobswqp3vYB2SRM.roa Signing time: Mon 10 Feb 2025 13:53:41 +0000 ROA not before: Mon 10 Feb 2025 13:53:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13770 (0x35ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AF165F3F24FF005851BA86ECC2AA77BD80764913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:f7:4c:51:0c:cc:cf:d2:a5:d7:28:35:6c: 2c:5f:67:a4:97:1c:78:cb:22:10:9a:58:eb:4d:31: d7:c8:9f:4e:fe:5a:88:84:cb:5d:7d:cb:e8:80:8d: 78:98:cb:8a:54:c6:6f:c5:56:c1:1d:e8:3e:07:c7: 45:d0:2c:a0:b7:37:a5:a2:d3:ea:c2:5b:bf:c2:e3: 03:09:b3:8e:98:bc:f3:f0:c5:64:58:1b:ef:0c:12: 97:32:c2:44:c1:a7:6d:10:3b:b7:3c:1e:ce:d3:fd: 5d:f0:15:1b:60:8a:ae:00:e6:e8:9c:49:43:df:c9: df:95:4d:69:65:f5:2d:b7:37:92:e7:c6:1e:32:5c: 64:7e:5d:0a:1a:7a:67:ad:3f:43:c8:ab:93:b2:31: c4:b9:01:ae:a1:28:76:c0:d7:89:f8:4d:49:98:b2: 40:1a:33:69:7c:cc:38:75:4c:63:28:5a:ec:36:17: 5d:62:ae:40:4f:18:fb:a0:40:a0:e0:a8:69:a7:6a: 6d:03:e9:f3:b0:c5:de:0c:4d:40:50:5c:87:9e:f1: 83:86:b8:6a:5c:ee:29:48:3c:27:45:d1:ca:32:5c: 27:6e:ec:c3:fb:eb:d2:96:8d:23:10:cd:52:10:de: 87:16:dd:1c:ea:95:2f:29:58:5a:e0:81:9b:15:b4: ab:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:16:5F:3F:24:FF:00:58:51:BA:86:EC:C2:AA:77:BD:80:76:49:13 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxZfPyT_AFhRuobswqp3vYB2SRM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.224.0/22 Signature Algorithm: sha256WithRSAEncryption 08:bb:59:92:f4:66:6e:b6:7f:19:c4:ad:25:24:7f:77:e6:3a: d2:04:14:02:fb:b2:f2:c4:e6:78:9d:ac:f4:82:a6:3c:8f:6a: e4:21:22:3a:33:09:d9:a3:d9:20:27:33:3a:f7:41:fb:e4:9f: c3:79:02:35:6f:93:f8:2e:49:db:a5:c6:64:b6:f7:e3:69:fa: b4:65:14:31:40:91:00:50:2d:b0:4e:92:4e:59:28:8f:b2:10: a4:36:dc:04:ef:f7:83:36:c0:8e:99:95:1e:19:72:a8:7b:9b: dc:b1:80:6e:7f:65:34:2f:b9:0d:ba:11:78:f5:6a:51:8c:93: d8:c0:00:9b:dc:10:26:44:6f:49:fd:2f:c7:2d:be:3a:d2:48: 23:79:f7:4b:5e:40:a0:ca:63:d7:f4:9f:23:b2:ca:83:38:43: 9f:18:6c:47:6b:71:cd:10:12:ce:a2:a0:2f:db:6d:e9:de:7a: 68:cf:8e:3a:0c:cc:8a:47:c8:c6:50:b4:b8:b5:3f:83:fa:4b: b6:86:67:49:35:07:22:25:fb:71:31:1d:7e:b1:49:fd:62:dc: 72:4e:2d:fe:2d:fc:ba:6c:39:f2:63:bc:66:02:ca:ae:b5:21: 80:c1:a4:a3:bd:7a:6a:1e:48:a1:78:58:4e:f7:43:ec:60:a0: ca:a5:42:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFGMTY1RjNGMjRGRjAw NTg1MUJBODZFQ0MyQUE3N0JEODA3NjQ5MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmOfdMUQzMz9Kl1yg1bCxfZ6SXHHjLIhCaWOtNMdfIn07+WoiE y119y+iAjXiYy4pUxm/FVsEd6D4Hx0XQLKC3N6Wi0+rCW7/C4wMJs46YvPPwxWRY G+8MEpcywkTBp20QO7c8Hs7T/V3wFRtgiq4A5uicSUPfyd+VTWll9S23N5Lnxh4y XGR+XQoaemetP0PIq5OyMcS5Aa6hKHbA14n4TUmYskAaM2l8zDh1TGMoWuw2F11i rkBPGPugQKDgqGmnam0D6fOwxd4MTUBQXIee8YOGuGpc7ilIPCdF0coyXCdu7MP7 69KWjSMQzVIQ3ocW3RzqlS8pWFrggZsVtKs5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrxZfPyT/AFhRuobswqp3vYB2SRMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3J4WmZQeVRfQUZoUnVvYnN3 cXAzdllCMlNSTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6eAwDQYJKoZIhvcNAQELBQADggEBAAi7WZL0Zm62fxnErSUkf3fmOtIEFAL7svLE 5nidrPSCpjyPauQhIjozCdmj2SAnMzr3Qfvkn8N5AjVvk/guSdulxmS29+Np+rRl FDFAkQBQLbBOkk5ZKI+yEKQ23ATv94M2wI6ZlR4Zcqh7m9yxgG5/ZTQvuQ26EXj1 alGMk9jAAJvcECZEb0n9L8ctvjrSSCN590teQKDKY9f0nyOyyoM4Q58YbEdrcc0Q Es6ioC/bbeneemjPjjoMzIpHyMZQtLi1P4P6S7aGZ0k1ByIl+3ExHX6xSf1i3HJO Lf4t/LpsOfJjvGYCyq61IYDBpKO9emoeSKF4WE73Q+xgoMqlQtU= -----END CERTIFICATE-----Generated at Fri Apr 18 22:29:23 2025 by rpki-client