$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tU4acUn3bHk8BTWRuC57lkdixCk.roa File: tU4acUn3bHk8BTWRuC57lkdixCk.roa (raw, json) Hash identifier: sXLtPePR6EYK32FKMKKLKwYgFM5crGLmFB2BtBmefls= Subject key identifier: B5:4E:1A:71:49:F7:6C:79:3C:05:35:91:B8:2E:7B:96:47:62:C4:29 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3520 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tU4acUn3bHk8BTWRuC57lkdixCk.roa Signing time: Mon 10 Feb 2025 13:53:01 +0000 ROA not before: Mon 10 Feb 2025 13:53:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13600 (0x3520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B54E1A7149F76C793C053591B82E7B964762C429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:77:95:4b:9d:12:38:ca:0e:f4:33:82:b9: b4:dd:88:5b:38:1f:6e:8d:0d:3b:aa:6e:ff:9d:30: 88:01:cb:07:db:8f:c6:b0:47:ba:e6:aa:81:be:3d: ce:f1:e4:c4:3c:b5:e2:36:80:bb:4d:64:4c:2d:88: 08:ed:6a:11:ae:ea:19:44:a0:d1:9d:05:ab:64:8f: 10:4a:98:68:84:1c:b6:98:58:13:09:77:22:fe:be: 14:cd:ae:65:34:24:fa:d5:ac:fd:91:7d:50:05:b3: 93:f1:4d:91:08:0e:23:75:6e:aa:1b:9d:ed:f3:9b: 61:16:ac:a3:6e:ec:e7:39:97:79:64:28:57:3f:c9: ea:b5:5f:6b:d8:8a:af:6a:4e:da:2b:86:d7:e1:a6: fc:a7:30:bc:3a:04:02:e8:66:1d:20:cb:69:4e:25: a1:5b:09:89:6e:17:a8:ad:cb:cd:51:e8:34:47:2b: 26:aa:67:57:22:61:1c:ec:0f:f2:ac:9f:f2:27:b7: b4:7c:fa:05:b3:c3:59:fd:93:f0:26:5e:2a:e0:26: 36:40:e6:18:0d:d2:1e:bc:03:c8:00:a4:a9:3d:42: 24:d1:55:b5:66:5f:de:0b:1d:f8:57:6f:cc:7b:cf: fc:d8:c6:44:ec:b7:6b:5b:fc:b1:59:8c:68:bd:a6: be:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4E:1A:71:49:F7:6C:79:3C:05:35:91:B8:2E:7B:96:47:62:C4:29 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tU4acUn3bHk8BTWRuC57lkdixCk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.64.0/22 Signature Algorithm: sha256WithRSAEncryption 42:7a:88:b1:5d:c9:f5:7b:17:35:09:8d:19:6c:49:74:93:30: 9e:cd:6c:d6:32:5b:48:c3:ae:b5:34:96:58:3c:73:c9:1c:51: 0c:f6:19:77:5b:c4:44:34:a8:16:55:a2:43:30:fb:10:91:aa: 9d:7a:3d:79:ad:d1:37:9e:31:a6:3e:1d:8c:9c:ba:63:72:6e: 8f:9b:a8:16:07:44:f7:17:43:ec:88:73:17:99:5a:0a:69:04: 29:33:8e:10:bf:2e:3f:a2:da:65:31:88:b6:36:a0:38:a9:e3: 32:ba:59:c7:eb:4a:d2:b8:5c:ef:92:9d:7d:5d:35:4e:32:5a: ed:fc:79:8f:8f:e0:5d:71:83:a6:f3:e4:0b:e9:1a:f0:37:bc: 63:49:94:f7:5f:0c:1a:ca:e6:d9:99:42:27:74:39:56:db:79: d8:7e:44:86:8d:2b:2a:65:81:46:bd:b1:d0:28:0c:0b:dc:07: 18:ba:17:e4:31:d6:3e:d0:0b:d1:4d:d7:9c:cb:92:34:08:d9: d9:51:1a:c9:01:37:f6:bd:0a:86:96:64:bc:e8:7c:2d:fe:46: af:60:94:63:cc:ca:45:14:f6:64:f1:0d:a6:49:49:97:54:76: d9:5a:c2:96:94:fb:9e:a2:ad:51:08:e8:17:4c:9e:86:c0:13: 79:8d:5d:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI1NEUxQTcxNDlGNzZD NzkzQzA1MzU5MUI4MkU3Qjk2NDc2MkM0MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtoneVS50SOMoO9DOCubTdiFs4H26NDTuqbv+dMIgBywfbj8aw R7rmqoG+Pc7x5MQ8teI2gLtNZEwtiAjtahGu6hlEoNGdBatkjxBKmGiEHLaYWBMJ dyL+vhTNrmU0JPrVrP2RfVAFs5PxTZEIDiN1bqobne3zm2EWrKNu7Oc5l3lkKFc/ yeq1X2vYiq9qTtorhtfhpvynMLw6BALoZh0gy2lOJaFbCYluF6ity81R6DRHKyaq Z1ciYRzsD/Ksn/Int7R8+gWzw1n9k/AmXirgJjZA5hgN0h68A8gApKk9QiTRVbVm X94LHfhXb8x7z/zYxkTst2tb/LFZjGi9pr6xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtU4acUn3bHk8BTWRuC57lkdixCkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RVNGFjVW4zYkhrOEJUV1J1 QzU3bGtkaXhDay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6UAwDQYJKoZIhvcNAQELBQADggEBAEJ6iLFdyfV7FzUJjRlsSXSTMJ7NbNYyW0jD rrU0llg8c8kcUQz2GXdbxEQ0qBZVokMw+xCRqp16PXmt0TeeMaY+HYycumNybo+b qBYHRPcXQ+yIcxeZWgppBCkzjhC/Lj+i2mUxiLY2oDip4zK6WcfrStK4XO+SnX1d NU4yWu38eY+P4F1xg6bz5AvpGvA3vGNJlPdfDBrK5tmZQid0OVbbedh+RIaNKypl gUa9sdAoDAvcBxi6F+Qx1j7QC9FN15zLkjQI2dlRGskBN/a9CoaWZLzofC3+Rq9g lGPMykUU9mTxDaZJSZdUdtlawpaU+56irVEI6BdMnobAE3mNXck= -----END CERTIFICATE-----Generated at Fri Apr 18 22:29:43 2025 by rpki-client