$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0_lZ7y3vet-IDJ1T1QYKx-FMgiY.roa File: 0_lZ7y3vet-IDJ1T1QYKx-FMgiY.roa (raw, json) Hash identifier: dcAI8ehliuAXqF58VOjcTE/bul8Y9SKWKNkgNLlD0fA= Subject key identifier: D3:F9:59:EF:2D:EF:7A:DF:88:0C:9D:53:D5:06:0A:C7:E1:4C:82:26 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35A3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0_lZ7y3vet-IDJ1T1QYKx-FMgiY.roa Signing time: Mon 10 Feb 2025 13:53:32 +0000 ROA not before: Mon 10 Feb 2025 13:53:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13731 (0x35a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D3F959EF2DEF7ADF880C9D53D5060AC7E14C8226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:26:74:43:06:df:e9:9d:fd:7f:4b:2f:eb: d8:20:b3:8a:bc:44:d6:fb:8a:d3:d8:0d:72:55:a0: d4:2b:76:db:e0:78:0d:d4:8f:7b:08:42:99:13:0d: f5:12:a5:24:dd:45:cc:b0:f8:38:81:38:07:e3:41: 1d:9e:b5:fc:c3:af:a4:33:ac:7d:fc:c5:a1:19:27: 6b:b2:48:a9:e7:20:fa:57:39:26:82:f8:f4:43:70: 10:63:68:14:51:99:12:88:1c:c5:44:c4:74:db:37: 14:0d:bd:c9:92:da:8c:98:26:48:f5:d7:1d:3c:28: b4:7b:ca:c9:26:fc:f0:3f:4d:b6:ab:9b:dd:69:f4: 5b:d5:d4:79:b0:23:db:62:e7:9e:ee:39:32:c3:92: 6e:48:df:40:34:b9:5f:e3:5b:91:07:e3:08:2a:cc: db:23:dd:db:79:62:38:af:62:9c:42:3e:02:56:1f: b8:a6:2b:bf:38:11:7f:38:01:7a:ee:3c:ae:98:8f: 95:a6:35:9e:5d:4f:e2:fa:26:ac:d0:45:4b:03:9e: 17:fe:6f:e9:38:f5:e4:58:51:1a:a9:96:ae:cc:8c: 53:54:d8:f4:ed:dc:88:c0:41:6c:84:20:c4:9d:b1: 85:9e:1f:79:ca:ce:85:48:aa:8a:99:ab:e9:69:de: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F9:59:EF:2D:EF:7A:DF:88:0C:9D:53:D5:06:0A:C7:E1:4C:82:26 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0_lZ7y3vet-IDJ1T1QYKx-FMgiY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.68.0/22 Signature Algorithm: sha256WithRSAEncryption 91:29:e5:77:25:8f:2f:af:2c:ae:d4:63:27:c4:b8:ce:be:e1: b2:34:da:90:cd:65:16:37:d5:30:cf:d3:28:21:26:d0:ad:38: 6a:d2:b7:c0:0b:6f:10:30:b7:c4:64:f0:fc:c1:48:66:4d:c0: 34:28:f4:72:a0:94:c2:ce:a8:22:2f:63:81:1b:6b:86:44:6f: 2f:e7:a9:96:b7:c8:c7:2b:af:2c:07:59:23:cb:f2:9f:46:aa: ca:6a:3e:27:d4:ad:e1:aa:92:96:eb:e0:78:0d:89:c8:b1:ba: 87:9f:dd:3f:4e:0d:14:f6:5f:68:b5:e6:14:b9:a3:2f:e4:8d: 68:70:a6:e0:6a:46:93:46:50:f9:a5:d2:dd:a2:65:86:9e:aa: 0a:2c:b1:b7:22:04:fd:79:8f:1d:ae:fa:f5:dc:ad:16:11:81: 4c:d8:4a:e4:06:fd:0b:f0:0c:3d:3c:86:d5:12:18:f3:bc:ff: 24:f5:49:1d:51:b6:ab:3c:81:78:5e:3c:8f:9f:39:55:5e:11: 2a:1e:5c:5e:00:f3:b6:11:6e:27:56:3a:ab:8f:7f:64:f8:15: 8e:8b:b5:dd:68:fa:87:3e:3e:ca:fb:8b:f4:4e:a2:28:3c:ac: 12:95:3a:e8:22:9f:e7:f7:77:7b:ca:32:26:86:05:f3:31:a8: 67:1d:ea:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNaMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQzRjk1OUVGMkRFRjdB REY4ODBDOUQ1M0Q1MDYwQUM3RTE0QzgyMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrQyZ0Qwbf6Z39f0sv69ggs4q8RNb7itPYDXJVoNQrdtvgeA3U j3sIQpkTDfUSpSTdRcyw+DiBOAfjQR2etfzDr6QzrH38xaEZJ2uySKnnIPpXOSaC +PRDcBBjaBRRmRKIHMVExHTbNxQNvcmS2oyYJkj11x08KLR7yskm/PA/Tbarm91p 9FvV1HmwI9ti557uOTLDkm5I30A0uV/jW5EH4wgqzNsj3dt5YjivYpxCPgJWH7im K784EX84AXruPK6Yj5WmNZ5dT+L6JqzQRUsDnhf+b+k49eRYURqplq7MjFNU2PTt 3IjAQWyEIMSdsYWeH3nKzoVIqoqZq+lp3u8jAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0/lZ7y3vet+IDJ1T1QYKx+FMgiYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBfbFo3eTN2ZXQtSURKMVQx UVlLeC1GTWdpWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6UQwDQYJKoZIhvcNAQELBQADggEBAJEp5Xcljy+vLK7UYyfEuM6+4bI02pDNZRY3 1TDP0yghJtCtOGrSt8ALbxAwt8Rk8PzBSGZNwDQo9HKglMLOqCIvY4Eba4ZEby/n qZa3yMcrrywHWSPL8p9GqspqPifUreGqkpbr4HgNicixuoef3T9ODRT2X2i15hS5 oy/kjWhwpuBqRpNGUPml0t2iZYaeqgossbciBP15jx2u+vXcrRYRgUzYSuQG/Qvw DD08htUSGPO8/yT1SR1Rtqs8gXhePI+fOVVeESoeXF4A87YRbidWOquPf2T4FY6L td1o+oc+Psr7i/ROoig8rBKVOugin+f3d3vKMiaGBfMxqGcd6ks= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:33 2025 by rpki-client