$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2d--uVx-QFVDvv8YfFtDBPapu3s.roa File: 2d--uVx-QFVDvv8YfFtDBPapu3s.roa (raw, json) Hash identifier: V4yAzO49k5q/UOmzysbUL6h122U0t0pKeeH7uyIxWhM= Subject key identifier: D9:DF:BE:B9:5C:7E:40:55:43:BE:FF:18:7C:5B:43:04:F6:A9:BB:7B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33D5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2d--uVx-QFVDvv8YfFtDBPapu3s.roa Signing time: Mon 10 Feb 2025 13:51:49 +0000 ROA not before: Mon 10 Feb 2025 13:51:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13269 (0x33d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D9DFBEB95C7E405543BEFF187C5B4304F6A9BB7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fd:65:8e:f0:13:57:4f:21:ab:03:e3:40:bf: 2d:3b:2d:d4:54:06:60:45:82:4d:8b:ec:19:1b:9a: 9c:4b:ee:68:59:65:e7:e1:35:31:b5:31:43:27:35: 39:7d:48:d1:61:72:d0:f1:c8:80:07:14:b4:57:df: 25:99:c7:20:3b:23:dc:4c:c9:31:44:d4:a9:00:aa: 4d:7c:05:7e:7b:2e:0f:f9:81:2f:d2:36:a1:ea:c9: c5:54:9d:bc:f6:88:7b:01:d7:83:bb:48:c0:4e:30: 22:b6:75:08:f9:4a:a8:cc:05:e8:65:4b:71:fb:61: db:da:75:25:d0:0e:70:d4:31:0a:6a:3b:6f:0a:30: 50:77:ce:56:dd:68:96:8a:cf:31:10:74:1e:be:6e: 1d:26:d0:1f:05:3b:69:d5:2e:9a:18:0d:86:ad:95: dc:fb:eb:ee:04:3b:0f:db:5f:4f:2d:99:97:e4:ec: a9:8e:b3:b8:e6:7c:54:a3:36:4b:19:7b:5b:ff:7c: c5:ef:70:27:56:c6:fc:9c:ee:e2:8c:6f:2b:7c:fa: 80:9a:3b:71:d9:58:ae:5d:c8:6f:d0:3e:8b:0b:e9: 61:cc:9b:32:09:fd:10:50:55:3e:8a:f5:20:26:d7: 68:ee:52:28:76:2d:32:10:9b:ba:24:dd:d2:89:5f: c7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DF:BE:B9:5C:7E:40:55:43:BE:FF:18:7C:5B:43:04:F6:A9:BB:7B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2d--uVx-QFVDvv8YfFtDBPapu3s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.0/24 Signature Algorithm: sha256WithRSAEncryption 02:01:13:25:ac:66:70:c7:d5:f7:df:21:3a:97:4f:0e:5f:93: 26:53:31:ce:33:88:24:ea:22:8e:eb:ae:7b:7e:e2:87:c0:3f: 08:8d:dc:55:ce:18:da:dc:09:39:26:03:f3:31:40:c4:36:1b: 98:c2:d5:ab:6c:6b:6a:79:93:07:d5:18:6e:22:cb:d2:d3:ab: 2a:c3:a2:9b:70:dc:fa:48:a5:04:21:97:be:ce:d3:53:b4:55: f6:01:49:9c:58:12:cb:a1:dc:6f:1c:0d:00:79:7e:5a:eb:1e: ee:86:48:47:76:51:2d:db:66:1c:35:ea:34:14:d2:2b:f7:ee: 9b:21:ea:c7:38:ba:b6:18:6d:ec:6f:b4:b0:aa:17:0c:1d:0d: 07:51:aa:a1:94:57:7a:8d:f8:68:bd:e8:b0:d5:7c:01:ca:e5: 70:f4:6b:f9:f1:d3:44:ee:eb:95:6f:f2:d4:05:37:be:e0:e4: 37:f2:bf:5c:00:74:3a:8b:60:24:c9:b0:bb:4a:ff:b7:ad:d4: 95:7b:af:9a:13:46:01:44:93:a0:c9:d2:ec:ad:54:16:56:2b: 13:6e:c2:b9:07:e7:da:e0:55:ff:fb:e4:98:a9:f1:3e:41:c0: 2e:1d:ca:9b:d1:e5:b8:32:f0:af:c7:e3:06:fd:97:cc:28:87: b0:35:bc:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ5REZCRUI5NUM3RTQw NTU0M0JFRkYxODdDNUI0MzA0RjZBOUJCN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq/WWO8BNXTyGrA+NAvy07LdRUBmBFgk2L7BkbmpxL7mhZZefh NTG1MUMnNTl9SNFhctDxyIAHFLRX3yWZxyA7I9xMyTFE1KkAqk18BX57Lg/5gS/S NqHqycVUnbz2iHsB14O7SMBOMCK2dQj5SqjMBehlS3H7YdvadSXQDnDUMQpqO28K MFB3zlbdaJaKzzEQdB6+bh0m0B8FO2nVLpoYDYatldz76+4EOw/bX08tmZfk7KmO s7jmfFSjNksZe1v/fMXvcCdWxvyc7uKMbyt8+oCaO3HZWK5dyG/QPosL6WHMmzIJ /RBQVT6K9SAm12juUih2LTIQm7ok3dKJX8dfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2d++uVx+QFVDvv8YfFtDBPapu3swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJkLS11VngtUUZWRHZ2OFlm RnREQlBhcHUzcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+4wDQYJKoZIhvcNAQELBQADggEBAAIBEyWsZnDH1fffITqXTw5fkyZTMc4ziCTq Io7rrnt+4ofAPwiN3FXOGNrcCTkmA/MxQMQ2G5jC1atsa2p5kwfVGG4iy9LTqyrD optw3PpIpQQhl77O01O0VfYBSZxYEsuh3G8cDQB5flrrHu6GSEd2US3bZhw16jQU 0iv37psh6sc4urYYbexvtLCqFwwdDQdRqqGUV3qN+Gi96LDVfAHK5XD0a/nx00Tu 65Vv8tQFN77g5Dfyv1wAdDqLYCTJsLtK/7et1JV7r5oTRgFEk6DJ0uytVBZWKxNu wrkH59rgVf/75Jip8T5BwC4dypvR5bgy8K/H4wb9l8woh7A1vDo= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:31 2025 by rpki-client