$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2awGyRoTzkefo6ooPoGXv5ARkv4.roa File: 2awGyRoTzkefo6ooPoGXv5ARkv4.roa (raw, json) Hash identifier: NfSTtJFj/4xqC9lB2khsJqjz8NBXIisBRgnTmKLU5oc= Subject key identifier: D9:AC:06:C9:1A:13:CE:47:9F:A3:AA:28:3E:81:97:BF:90:11:92:FE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 360F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2awGyRoTzkefo6ooPoGXv5ARkv4.roa Signing time: Mon 10 Feb 2025 13:53:56 +0000 ROA not before: Mon 10 Feb 2025 13:53:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13839 (0x360f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D9AC06C91A13CE479FA3AA283E8197BF901192FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:9b:86:c8:83:dc:70:c9:59:b0:fe:fb:55: bd:84:80:24:2f:3b:3b:d0:ec:68:26:54:1b:1d:49: 44:e3:4a:04:a0:07:84:a5:5c:8d:56:56:ca:85:0e: b0:1e:e9:9f:42:20:b3:3d:aa:e6:15:8a:d0:3e:db: b7:af:ea:3f:42:ce:52:4d:79:1c:f1:e3:4c:2d:82: b2:8e:d7:c5:22:9e:d7:4d:94:a7:d9:0a:78:a9:66: b5:60:fb:77:dc:31:30:05:d6:fc:bf:cc:33:a0:fb: 74:92:fb:eb:12:d0:7b:0d:52:42:15:f2:de:91:37: c3:de:55:cc:bc:38:70:4c:ca:01:d6:e5:d6:5e:b7: c3:dc:83:07:ca:db:96:64:0f:ae:70:b4:5d:ca:b9: e5:52:8e:25:e4:17:15:f5:ad:82:18:99:eb:c2:18: cc:d7:74:e2:b0:89:96:84:70:28:71:fe:a4:67:62: c5:3b:64:30:53:d2:94:db:b0:f8:fd:e6:21:19:c9: f2:91:ea:b7:c3:41:bf:88:eb:39:f2:51:56:af:be: 10:c9:47:94:bd:ca:01:d1:6b:be:dc:04:8a:73:8f: 5a:a8:d6:f3:8d:17:0e:23:8c:5e:91:86:50:97:85: 42:60:b1:d2:39:c3:e9:94:b2:a0:17:c0:c0:82:09: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AC:06:C9:1A:13:CE:47:9F:A3:AA:28:3E:81:97:BF:90:11:92:FE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2awGyRoTzkefo6ooPoGXv5ARkv4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.136.0/21 Signature Algorithm: sha256WithRSAEncryption 33:6f:f5:b0:bb:15:6b:86:a0:4f:1b:25:02:6b:90:00:30:eb: 82:2c:67:88:02:4f:95:c8:03:27:79:0a:93:de:af:b1:a6:d0: f3:cd:c4:71:04:04:43:d2:02:f0:77:45:82:f2:5e:54:49:79: 06:f2:e3:9d:e9:d4:7c:76:12:5e:b4:e5:97:df:14:06:11:0c: a4:ad:61:5d:95:7e:a3:39:8b:f3:74:ad:41:67:8e:d9:96:83: 6d:32:75:d4:c3:c7:0f:0b:cd:a4:87:65:2a:6a:ca:58:32:a0: 65:7e:a3:71:30:79:75:d2:c3:44:db:98:77:43:79:9c:f4:6e: 73:ab:b0:ee:ee:08:da:15:2e:e9:9d:00:f4:b2:c8:9c:e5:20: a6:cc:27:cf:ac:f6:87:1e:18:59:2b:96:75:ef:39:93:82:65: 32:41:7e:c7:d1:76:fe:93:8a:29:8c:0f:c7:07:a4:c0:cc:1c: af:51:ae:15:8d:25:53:82:5a:e3:57:85:d5:98:f5:9a:5f:a4: 2b:23:dd:13:f6:a6:d6:da:08:fa:b0:fe:f7:2c:98:2b:0e:62: 32:fc:1b:f4:d2:a5:7d:d3:1a:85:cc:4b:53:d8:15:17:5c:58: bb:83:f1:02:9d:1d:5f:b5:00:31:ae:e5:30:d9:bc:d6:97:bd: 5a:98:ec:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ5QUMwNkM5MUExM0NF NDc5RkEzQUEyODNFODE5N0JGOTAxMTkyRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEt5uGyIPccMlZsP77Vb2EgCQvOzvQ7GgmVBsdSUTjSgSgB4Sl XI1WVsqFDrAe6Z9CILM9quYVitA+27ev6j9CzlJNeRzx40wtgrKO18UintdNlKfZ CnipZrVg+3fcMTAF1vy/zDOg+3SS++sS0HsNUkIV8t6RN8PeVcy8OHBMygHW5dZe t8PcgwfK25ZkD65wtF3KueVSjiXkFxX1rYIYmevCGMzXdOKwiZaEcChx/qRnYsU7 ZDBT0pTbsPj95iEZyfKR6rfDQb+I6znyUVavvhDJR5S9ygHRa77cBIpzj1qo1vON Fw4jjF6RhlCXhUJgsdI5w+mUsqAXwMCCCXbZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2awGyRoTzkefo6ooPoGXv5ARkv4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJhd0d5Um9UemtlZm82b29Q b0dYdjVBUmt2NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6YgwDQYJKoZIhvcNAQELBQADggEBADNv9bC7FWuGoE8bJQJrkAAw64IsZ4gCT5XI Ayd5CpPer7Gm0PPNxHEEBEPSAvB3RYLyXlRJeQby453p1Hx2El605ZffFAYRDKSt YV2VfqM5i/N0rUFnjtmWg20yddTDxw8LzaSHZSpqylgyoGV+o3EweXXSw0TbmHdD eZz0bnOrsO7uCNoVLumdAPSyyJzlIKbMJ8+s9oceGFkrlnXvOZOCZTJBfsfRdv6T iimMD8cHpMDMHK9RrhWNJVOCWuNXhdWY9ZpfpCsj3RP2ptbaCPqw/vcsmCsOYjL8 G/TSpX3TGoXMS1PYFRdcWLuD8QKdHV+1ADGu5TDZvNaXvVqY7PI= -----END CERTIFICATE-----Generated at Wed Feb 19 21:59:48 2025 by rpki-client