$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zAOYe5eHNgsvtfOLVn0O0RNd_e8.roa File: zAOYe5eHNgsvtfOLVn0O0RNd_e8.roa (raw, json) Hash identifier: gVHZhgjXUR3E013sWyROeKtV+277cA2OSnw9t+TOhw0= Subject key identifier: CC:03:98:7B:97:87:36:0B:2F:B5:F3:8B:56:7D:0E:D1:13:5D:FD:EF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3487 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zAOYe5eHNgsvtfOLVn0O0RNd_e8.roa Signing time: Mon 10 Feb 2025 13:52:28 +0000 ROA not before: Mon 10 Feb 2025 13:52:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.205.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13447 (0x3487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CC03987B9787360B2FB5F38B567D0ED1135DFDEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:57:e4:b1:c0:ba:77:bf:57:75:96:be:c8: db:0b:b3:bb:87:fe:a5:7d:0e:ce:f5:5e:bf:a7:3f: 45:10:0b:20:3e:13:8f:48:44:af:5d:d6:49:bb:96: 2f:4f:56:72:5e:03:8e:9d:ec:63:20:e4:88:bc:19: 6a:15:b4:5a:fb:9a:ed:11:1d:09:5c:2c:58:4c:83: cb:50:3b:30:bd:3c:e6:8e:7c:1e:1e:e7:9a:ca:0e: 47:5e:91:64:67:7e:bf:ba:c4:e2:0c:f6:70:64:50: 61:0c:43:7c:5f:ce:e2:ef:1d:2c:68:fb:49:ea:84: 7e:96:17:fb:d7:50:ae:01:0b:b9:34:99:86:80:6b: 58:43:72:73:4e:87:e3:44:de:a1:4f:8a:99:c7:eb: af:66:8e:ec:76:a7:99:87:fa:e6:b6:a9:13:d3:df: cf:22:41:64:a0:9d:47:b3:50:19:82:89:90:db:09: f5:50:99:06:0f:34:72:c6:b2:91:c7:40:64:cd:ac: 30:2e:32:62:98:1f:43:28:7b:25:46:0b:0e:45:0c: 90:15:5c:15:4a:f4:3e:1a:f8:14:85:fd:b9:15:e2: 6d:f2:13:c2:62:0b:e9:2c:00:05:4f:0d:ee:c2:71: 1a:0e:02:38:b1:07:fa:b6:f6:39:6f:74:28:73:50: b0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:03:98:7B:97:87:36:0B:2F:B5:F3:8B:56:7D:0E:D1:13:5D:FD:EF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zAOYe5eHNgsvtfOLVn0O0RNd_e8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.205.0/28 Signature Algorithm: sha256WithRSAEncryption 9b:3e:f6:f7:cd:f1:2a:5e:12:86:ee:95:d7:bf:58:2f:86:32: 34:3e:51:a8:c7:f0:cf:69:21:83:23:1a:75:20:96:1b:00:4d: aa:b1:59:77:02:c8:c9:08:6c:a5:5d:d9:64:37:81:0f:6c:47: 27:72:70:66:9f:72:ab:b2:83:be:cb:63:6a:fd:de:14:8f:d1: a0:d3:a4:ff:2d:0a:39:db:5f:2f:a1:83:de:d2:c5:b6:f8:5f: ce:36:26:13:13:af:d5:2e:26:fd:b6:29:84:67:c0:e4:0c:ef: f5:59:b1:ee:f0:cc:30:6d:78:6a:4e:06:24:d0:90:92:26:64: 39:72:dd:02:d0:0e:16:ca:77:63:5f:c3:37:48:a9:c6:29:73: 60:ef:67:f9:3d:df:bc:47:5a:a4:d2:5e:35:df:b8:7f:6e:1d: ae:6e:2d:b4:9c:0e:f7:8b:d6:f6:bd:dc:e5:4c:da:92:11:5f: a7:3e:54:07:f5:c5:da:93:f6:ac:3b:3c:ef:f9:e6:81:5e:3c: a7:f1:dd:d9:44:bf:30:12:fc:9a:b2:0f:6c:5c:d3:02:52:2e: 2a:a1:d3:19:a9:0b:85:ac:91:36:f8:50:a2:a6:39:58:a6:8a: e1:f9:b3:85:ee:24:f8:c5:2b:d8:bd:aa:00:86:2a:bb:e2:e8: 65:08:3f:0e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDMDM5ODdCOTc4NzM2 MEIyRkI1RjM4QjU2N0QwRUQxMTM1REZERUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6NFfkscC6d79XdZa+yNsLs7uH/qV9Ds71Xr+nP0UQCyA+E49I RK9d1km7li9PVnJeA46d7GMg5Ii8GWoVtFr7mu0RHQlcLFhMg8tQOzC9POaOfB4e 55rKDkdekWRnfr+6xOIM9nBkUGEMQ3xfzuLvHSxo+0nqhH6WF/vXUK4BC7k0mYaA a1hDcnNOh+NE3qFPipnH669mjux2p5mH+ua2qRPT388iQWSgnUezUBmCiZDbCfVQ mQYPNHLGspHHQGTNrDAuMmKYH0MoeyVGCw5FDJAVXBVK9D4a+BSF/bkV4m3yE8Ji C+ksAAVPDe7CcRoOAjixB/q29jlvdChzULBnAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUzAOYe5eHNgsvtfOLVn0O0RNd/e8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3pBT1llNWVITmdzdnRmT0xW bjBPMFJOZF9lOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7 ws0AMA0GCSqGSIb3DQEBCwUAA4IBAQCbPvb3zfEqXhKG7pXXv1gvhjI0PlGox/DP aSGDIxp1IJYbAE2qsVl3AsjJCGylXdlkN4EPbEcncnBmn3KrsoO+y2Nq/d4Uj9Gg 06T/LQo5218voYPe0sW2+F/ONiYTE6/VLib9timEZ8DkDO/1WbHu8MwwbXhqTgYk 0JCSJmQ5ct0C0A4WyndjX8M3SKnGKXNg72f5Pd+8R1qk0l4137h/bh2ubi20nA73 i9b2vdzlTNqSEV+nPlQH9cXak/asOzzv+eaBXjyn8d3ZRL8wEvyasg9sXNMCUi4q odMZqQuFrJE2+FCipjlYporh+bOF7iT4xSvYvaoAhiq74uhlCD8O -----END CERTIFICATE-----Generated at Fri Apr 18 22:43:36 2025 by rpki-client