$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/33qdDt6anSAxpqZ45OLGqUpD0TI.roa File: 33qdDt6anSAxpqZ45OLGqUpD0TI.roa (raw, json) Hash identifier: b1124NuKKRHB25Qbx+xdnSma5Bt3pmVVW5+1P63oGKU= Subject key identifier: DF:7A:9D:0E:DE:9A:9D:20:31:A6:A6:78:E4:E2:C6:A9:4A:43:D1:32 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3673 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/33qdDt6anSAxpqZ45OLGqUpD0TI.roa Signing time: Mon 10 Feb 2025 13:54:20 +0000 ROA not before: Mon 10 Feb 2025 13:54:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.192.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13939 (0x3673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DF7A9D0EDE9A9D2031A6A678E4E2C6A94A43D132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e1:e4:14:17:73:d5:07:10:44:15:ce:68:d1: 96:e0:32:bd:cf:61:72:ee:5e:84:2d:29:d0:87:3a: 5f:29:3e:90:4e:bd:6a:0b:d0:70:71:05:bd:b3:25: 33:bd:82:71:cb:cd:65:69:4e:54:f4:44:52:39:57: 47:b5:f1:32:83:2f:3b:48:8f:77:c4:4e:6b:79:90: 53:3d:25:10:d3:35:d3:66:e7:99:d4:24:f4:cd:c9: 0c:3f:69:38:a7:ce:95:80:14:ac:7a:95:21:fc:99: 24:84:8c:5b:1e:0e:95:5c:85:fc:af:66:1e:f2:bb: eb:fc:ac:61:99:1f:96:13:80:5b:21:71:35:1c:eb: 0f:e6:6b:08:ea:a6:01:70:3e:e8:88:31:4b:5f:90: 99:45:01:e0:d7:b3:c8:9b:68:fd:89:90:39:18:36: e3:8c:86:cc:ad:64:a8:97:6f:0e:82:ba:2f:f5:85: fa:2b:06:90:85:c2:99:a0:bb:14:cf:e5:5f:8c:18: 9c:b7:fa:9f:c7:9e:2a:5c:13:db:a5:fd:00:f6:13: fa:54:1a:d3:85:a4:f0:cd:e7:b3:cb:ec:09:6b:e9: 31:91:03:a8:80:0a:e9:c3:b0:9a:b0:77:d7:86:8d: 03:e3:3b:7c:9a:14:e8:41:28:be:51:30:5a:cb:74: 14:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7A:9D:0E:DE:9A:9D:20:31:A6:A6:78:E4:E2:C6:A9:4A:43:D1:32 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/33qdDt6anSAxpqZ45OLGqUpD0TI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.192.0/19 Signature Algorithm: sha256WithRSAEncryption a0:0f:5f:b3:23:8c:89:dc:bd:1b:00:7b:10:7e:aa:93:22:86: a7:ce:ed:73:43:02:af:f5:9d:db:f0:f3:4d:c4:79:5b:4a:ba: b9:b9:e9:3b:4b:67:41:2a:e4:e8:f1:7f:15:38:b0:a6:30:64: 05:37:ac:69:f9:bc:86:1d:10:08:ee:4f:88:85:96:8e:4d:eb: dc:40:ba:cb:2b:05:52:76:02:20:df:cb:03:30:81:54:47:b3: 31:38:7d:54:fe:0d:8e:bf:c8:9b:8e:be:d1:fb:8b:c8:a5:03: 65:3e:8d:95:40:29:b2:67:f3:99:e8:88:4a:56:cf:1b:f7:9a: 0c:36:a9:17:8a:7c:88:0a:8f:3b:fb:ac:47:50:bc:24:11:4e: 35:db:52:28:81:fd:26:18:6c:13:10:1a:8f:66:18:3a:47:c4: 00:9c:d4:3b:87:16:15:22:67:6b:76:40:fe:39:8e:f3:c8:dd: a9:c4:77:7a:83:70:53:49:cf:c6:be:84:cb:7d:c3:42:8d:22: e9:b7:eb:1b:3e:65:88:cf:27:66:77:85:d6:f3:3e:92:1c:03: e6:ec:db:f9:ef:0d:01:ab:a1:47:a0:2a:88:7f:5c:2e:5e:e1: 29:05:d6:bb:ab:5f:32:04:d0:f9:0e:b1:a8:62:30:9d:6e:b5: 9f:0d:ed:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGN0E5RDBFREU5QTlE MjAzMUE2QTY3OEU0RTJDNkE5NEE0M0QxMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk4eQUF3PVBxBEFc5o0ZbgMr3PYXLuXoQtKdCHOl8pPpBOvWoL 0HBxBb2zJTO9gnHLzWVpTlT0RFI5V0e18TKDLztIj3fETmt5kFM9JRDTNdNm55nU JPTNyQw/aTinzpWAFKx6lSH8mSSEjFseDpVchfyvZh7yu+v8rGGZH5YTgFshcTUc 6w/mawjqpgFwPuiIMUtfkJlFAeDXs8ibaP2JkDkYNuOMhsytZKiXbw6Cui/1hfor BpCFwpmguxTP5V+MGJy3+p/HnipcE9ul/QD2E/pUGtOFpPDN57PL7Alr6TGRA6iA CunDsJqwd9eGjQPjO3yaFOhBKL5RMFrLdBTnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU33qdDt6anSAxpqZ45OLGqUpD0TIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzMzcWREdDZhblNBeHBxWjQ1 T0xHcVVwRDBUSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 wcAwDQYJKoZIhvcNAQELBQADggEBAKAPX7MjjIncvRsAexB+qpMihqfO7XNDAq/1 ndvw803EeVtKurm56TtLZ0Eq5OjxfxU4sKYwZAU3rGn5vIYdEAjuT4iFlo5N69xA ussrBVJ2AiDfywMwgVRHszE4fVT+DY6/yJuOvtH7i8ilA2U+jZVAKbJn85noiEpW zxv3mgw2qReKfIgKjzv7rEdQvCQRTjXbUiiB/SYYbBMQGo9mGDpHxACc1DuHFhUi Z2t2QP45jvPI3anEd3qDcFNJz8a+hMt9w0KNIum36xs+ZYjPJ2Z3hdbzPpIcA+bs 2/nvDQGroUegKoh/XC5e4SkF1rurXzIE0PkOsahiMJ1utZ8N7TE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:12 2025 by rpki-client