$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zrwhA1GyKQt1bH9vCi4e17hMgvg.roa File: zrwhA1GyKQt1bH9vCi4e17hMgvg.roa (raw, json) Hash identifier: k7X3TPOJBQ8SRnOAL/UAmRFhvH+51wU5W9aOHn6O8aE= Subject key identifier: CE:BC:21:03:51:B2:29:0B:75:6C:7F:6F:0A:2E:1E:D7:B8:4C:82:F8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3616 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zrwhA1GyKQt1bH9vCi4e17hMgvg.roa Signing time: Mon 10 Feb 2025 13:53:58 +0000 ROA not before: Mon 10 Feb 2025 13:53:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13846 (0x3616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CEBC210351B2290B756C7F6F0A2E1ED7B84C82F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:66:a9:1d:00:fa:78:1a:c7:74:eb:84:d6: 46:51:a0:7c:9c:8a:85:4e:14:9e:18:ae:4a:87:24: 61:b4:39:1e:4c:e3:fc:76:96:c2:b0:10:dc:e3:c7: bc:1c:56:74:98:4a:c5:7c:db:98:9c:9d:07:e5:8b: 66:8b:16:15:8a:84:06:31:f7:3c:f6:e1:2f:8c:7d: a1:4b:a8:28:42:64:20:30:84:ab:ec:f2:60:9a:f1: ca:39:ec:08:00:27:26:61:ff:cd:b0:a2:a4:24:a0: 20:55:d9:7b:10:c3:11:65:23:f8:aa:a5:70:3e:4e: d0:4d:fc:6b:48:6a:71:28:88:71:1b:17:f6:77:18: 8f:4e:38:5a:14:d6:44:b9:4f:f9:f1:66:51:5b:61: d6:fd:15:dd:03:4f:eb:a9:77:9f:ec:7a:e9:9b:80: d8:0d:79:5b:a2:92:d3:c4:09:6e:87:d9:e1:24:66: a8:b7:93:26:b9:a5:b3:43:7b:67:2e:97:ee:52:c0: 7a:bf:0b:6a:0c:08:d3:5b:95:c3:a1:cc:fa:2e:2d: 15:83:b1:29:38:a3:bf:ea:b8:fb:cb:30:a5:3a:e8: 63:4f:b6:15:76:27:01:3b:ae:f9:13:b1:5e:c3:58: 7c:63:45:08:ea:46:d4:97:40:23:8d:37:8a:de:1b: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:21:03:51:B2:29:0B:75:6C:7F:6F:0A:2E:1E:D7:B8:4C:82:F8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zrwhA1GyKQt1bH9vCi4e17hMgvg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.220.0/22 Signature Algorithm: sha256WithRSAEncryption a0:c3:1e:42:79:0f:bb:2f:17:d3:c8:80:9c:36:95:c3:5f:b1: 43:8b:4c:ed:cc:59:2c:fe:4c:0c:0d:c9:f1:58:f1:2b:cd:ba: 59:9f:26:48:38:2e:eb:19:f7:0d:65:19:20:b3:02:3a:5b:ea: dd:0f:34:6d:54:8c:fb:8a:6d:bb:05:02:cd:32:29:07:12:4b: 75:7c:4e:37:8e:24:0f:a6:6f:73:84:b0:9c:e1:18:b2:03:70: 68:21:c7:71:fd:fc:f8:6f:01:ad:74:61:80:96:30:53:1c:74: 13:e2:c6:ef:df:1f:6a:fe:b0:53:69:fd:a1:5a:39:f2:e0:6c: 57:dd:c9:9d:11:08:66:c0:cf:7b:05:4b:19:f3:88:e6:88:ea: 28:54:4a:1c:2b:1a:ab:dd:a7:99:bd:e5:1a:e3:75:ff:69:b9: 38:d4:b0:69:6a:b0:1e:00:88:b3:9e:56:3e:62:3b:46:a7:fc: 46:71:bc:75:1f:3a:52:42:1f:a7:82:4b:ed:c4:f5:bd:bc:bc: f2:55:22:66:9b:71:41:1b:41:e3:b9:70:9b:d8:99:ae:8a:50: 28:b0:b4:a2:27:0b:01:5d:17:0f:99:ef:10:d7:7a:94:a3:aa: 54:39:eb:8f:f5:fb:b2:51:36:e4:ec:78:9e:7e:45:0b:05:e6: 4c:27:5c:46 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFQkMyMTAzNTFCMjI5 MEI3NTZDN0Y2RjBBMkUxRUQ3Qjg0QzgyRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIT2apHQD6eBrHdOuE1kZRoHycioVOFJ4YrkqHJGG0OR5M4/x2 lsKwENzjx7wcVnSYSsV825icnQfli2aLFhWKhAYx9zz24S+MfaFLqChCZCAwhKvs 8mCa8co57AgAJyZh/82woqQkoCBV2XsQwxFlI/iqpXA+TtBN/GtIanEoiHEbF/Z3 GI9OOFoU1kS5T/nxZlFbYdb9Fd0DT+upd5/seumbgNgNeVuiktPECW6H2eEkZqi3 kya5pbNDe2cul+5SwHq/C2oMCNNblcOhzPouLRWDsSk4o7/quPvLMKU66GNPthV2 JwE7rvkTsV7DWHxjRQjqRtSXQCONN4reG/zPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzrwhA1GyKQt1bH9vCi4e17hMgvgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3pyd2hBMUd5S1F0MWJIOXZD aTRlMTdoTWd2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6NwwDQYJKoZIhvcNAQELBQADggEBAKDDHkJ5D7svF9PIgJw2lcNfsUOLTO3MWSz+ TAwNyfFY8SvNulmfJkg4LusZ9w1lGSCzAjpb6t0PNG1UjPuKbbsFAs0yKQcSS3V8 TjeOJA+mb3OEsJzhGLIDcGghx3H9/PhvAa10YYCWMFMcdBPixu/fH2r+sFNp/aFa OfLgbFfdyZ0RCGbAz3sFSxnziOaI6ihUShwrGqvdp5m95Rrjdf9puTjUsGlqsB4A iLOeVj5iO0an/EZxvHUfOlJCH6eCS+3E9b28vPJVImabcUEbQeO5cJvYma6KUCiw tKInCwFdFw+Z7xDXepSjqlQ564/1+7JRNuTseJ5+RQsF5kwnXEY= -----END CERTIFICATE-----Generated at Wed Apr 23 00:28:07 2025 by rpki-client