$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/6Ohke8UxV8hjYnL2jBKqpVKd_NA.roa File: 6Ohke8UxV8hjYnL2jBKqpVKd_NA.roa (raw, json) Hash identifier: DnGoKu+INdUdPDHmCRpSFGcDwDIg/MZHuxS3gwRkOUg= Subject key identifier: E8:E8:64:7B:C5:31:57:C8:63:62:72:F6:8C:12:AA:A5:52:9D:FC:D0 Certificate issuer: /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337 Certificate serial: 130B Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/6Ohke8UxV8hjYnL2jBKqpVKd_NA.roa Signing time: Mon 10 Feb 2025 14:32:02 +0000 ROA not before: Mon 10 Feb 2025 14:32:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 202.126.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4875 (0x130b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337 Validity Not Before: Feb 10 14:32:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E8E8647BC53157C8636272F68C12AAA5529DFCD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:9d:cc:ed:43:39:83:86:d7:30:f4:ac:4d: a8:3d:e3:35:c1:a4:1c:2d:ea:26:ea:cc:cc:c3:b3: 21:e6:8f:c3:8b:5d:32:7c:ec:0f:f9:38:72:6d:56: 46:b7:57:b3:f0:69:c0:ae:f3:f0:86:2a:6b:27:1a: 24:a2:8c:f3:40:43:85:85:4b:e2:52:6b:fe:cc:ac: 92:02:b4:8f:91:9d:9d:45:f5:6f:df:f3:d4:ae:ad: 27:b2:15:aa:8e:2d:40:e0:e8:4b:cb:83:af:c3:0f: 95:b4:36:f5:04:fd:76:a4:15:07:53:bd:1d:fa:81: 66:01:7b:74:05:99:04:fa:51:b3:ac:0e:3c:5d:42: 87:3a:44:33:7b:20:2d:a6:c1:02:42:3f:96:6d:b8: 94:9d:d0:4a:f8:42:5e:9b:b3:63:31:dc:9a:a6:ac: d3:ee:f9:50:42:43:9f:96:76:79:35:14:63:9a:b5: 30:ff:7c:19:50:ba:41:78:da:da:f8:06:1c:fb:e4: aa:06:6b:cb:8a:ee:b6:55:e0:6c:90:b5:96:31:c4: 9c:74:91:27:d7:28:12:9f:fd:9c:97:2a:f7:fc:c1: 34:b5:0f:1a:75:e2:11:41:7c:6b:15:e3:25:10:82: 74:60:35:12:a4:16:1b:2e:d9:bb:4d:b0:8c:be:15: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E8:64:7B:C5:31:57:C8:63:62:72:F6:8C:12:AA:A5:52:9D:FC:D0 X509v3 Authority Key Identifier: keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/6Ohke8UxV8hjYnL2jBKqpVKd_NA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.126.64.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:43:ef:e7:14:dc:bf:7d:08:c2:6f:6b:68:c6:ff:cf:24:89: c4:96:b0:15:72:92:d4:58:81:04:fa:17:b0:f4:a2:73:c0:40: 2d:88:ee:66:fe:27:6d:45:46:a9:1f:e1:b6:1e:bf:33:c7:18: 0e:ad:3a:c0:00:c8:75:ad:5d:0b:7f:21:5b:d6:90:18:fb:35: da:37:7e:70:3e:d9:52:dc:17:0d:2d:ed:64:21:10:44:26:3c: 86:94:dc:3f:28:e0:ec:d8:16:1b:19:e0:be:7d:b1:56:78:8e: 52:a5:81:ba:c1:4e:b4:0c:7b:3a:52:ba:45:dd:ac:b1:43:46: 65:d7:98:ef:c8:56:60:d5:b6:70:d5:cb:88:a3:2f:a7:ae:f0: 6b:03:d3:e2:17:81:bb:bf:4e:63:d4:3f:27:1f:c0:95:9e:75: e3:d3:83:63:64:d2:a4:80:1b:f4:39:12:6a:e5:cc:cb:d8:e1: 63:af:d9:c5:9f:c9:d0:ed:58:78:91:a8:c2:aa:60:92:06:f3: da:e2:b5:32:09:cb:9f:11:11:c4:fd:0c:7f:1f:67:b0:51:73: df:17:a8:c4:fa:98:7c:15:af:4d:eb:f7:fe:94:86:63:72:d8: e1:6c:7a:ec:14:a7:ce:6f:c8:13:33:b8:0c:30:f6:07:3b:1d: 2d:68:5d:92 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E2 QkU4RkFENzhFOTVDNDY5MEVEOTk5OTFGQTc5REY3NUYzRDMzNzAeFw0yNTAyMTAx NDMyMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4RTg2NDdCQzUzMTU3 Qzg2MzYyNzJGNjhDMTJBQUE1NTI5REZDRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvCZ3M7UM5g4bXMPSsTag94zXBpBwt6ibqzMzDsyHmj8OLXTJ8 7A/5OHJtVka3V7PwacCu8/CGKmsnGiSijPNAQ4WFS+JSa/7MrJICtI+RnZ1F9W/f 89SurSeyFaqOLUDg6EvLg6/DD5W0NvUE/XakFQdTvR36gWYBe3QFmQT6UbOsDjxd Qoc6RDN7IC2mwQJCP5ZtuJSd0Er4Ql6bs2Mx3JqmrNPu+VBCQ5+Wdnk1FGOatTD/ fBlQukF42tr4Bhz75KoGa8uK7rZV4GyQtZYxxJx0kSfXKBKf/ZyXKvf8wTS1Dxp1 4hFBfGsV4yUQgnRgNRKkFhsu2btNsIy+FWaLAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU6Ohke8UxV8hjYnL2jBKqpVKd/NAwHwYDVR0jBBgwFoAUOmvo+teOlcRpDtmZ kfp533Xz0zcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFNNQy9P bXZvLXRlT2xjUnBEdG1aa2ZwNTMzWHowemMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L09tdm8tdGVPbGNScER0bVprZnA1MzNYejB6Yy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RTTUMvNk9oa2U4VXhWOGhqWW5MMmpCS3Fw VktkX05BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsp+QDAN BgkqhkiG9w0BAQsFAAOCAQEAjkPv5xTcv30Iwm9raMb/zySJxJawFXKS1FiBBPoX sPSic8BALYjuZv4nbUVGqR/hth6/M8cYDq06wADIda1dC38hW9aQGPs12jd+cD7Z UtwXDS3tZCEQRCY8hpTcPyjg7NgWGxngvn2xVniOUqWBusFOtAx7OlK6Rd2ssUNG ZdeY78hWYNW2cNXLiKMvp67wawPT4heBu79OY9Q/Jx/AlZ5149ODY2TSpIAb9DkS auXMy9jhY6/ZxZ/J0O1YeJGowqpgkgbz2uK1MgnLnxERxP0Mfx9nsFFz3xeoxPqY fBWvTev3/pSGY3LY4Wx67BSnzm/IEzO4DDD2BzsdLWhdkg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:28 2025 by rpki-client