$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3C8RRnScUftHOYK0aLgIKc3wbi4.roa File: 3C8RRnScUftHOYK0aLgIKc3wbi4.roa (raw, json) Hash identifier: J9XMgBXRaCqkPylV83u7LSMBDqOF5LYA8kp11K1TbUU= Subject key identifier: DC:2F:11:46:74:9C:51:FB:47:39:82:B4:68:B8:08:29:CD:F0:6E:2E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34D3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3C8RRnScUftHOYK0aLgIKc3wbi4.roa Signing time: Mon 10 Feb 2025 13:52:43 +0000 ROA not before: Mon 10 Feb 2025 13:52:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DC2F1146749C51FB473982B468B80829CDF06E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:24:57:fa:15:29:3b:c1:ef:c5:57:b3:f6: f5:eb:90:85:74:00:26:cd:94:af:03:ac:f4:b4:89: 16:14:0e:7f:07:8c:19:d6:25:0f:0d:f4:8a:e7:8b: 74:09:8d:6d:f5:2f:6c:23:5a:d5:e5:b3:b8:d8:11: 0f:90:ec:e4:ec:ac:da:74:df:61:8e:3a:3a:d6:7b: 0b:b7:8a:ed:43:fe:92:07:9f:7b:76:43:29:0b:9e: d1:89:f5:a5:83:86:7c:ab:fb:eb:ec:0f:8f:dd:0b: 6f:ea:60:fe:ce:a1:2e:5a:98:fc:61:19:ce:3a:ef: e9:9a:99:21:21:3b:98:13:18:25:11:60:c9:82:71: 3e:bb:3a:77:03:87:63:6b:ed:08:1f:41:a5:e5:c5: a7:05:ab:98:20:60:c6:80:cd:8a:b6:f4:27:bb:b2: b2:05:4f:f3:3e:56:9e:4a:d7:32:7e:38:5f:e9:91: 79:77:13:db:bf:cb:f2:7f:48:b8:81:55:ff:10:ad: 0f:32:cc:20:39:5f:72:5c:86:48:44:85:0a:3a:75: 8a:25:f7:bc:76:14:45:97:27:c8:bd:90:41:75:be: e6:c9:b0:48:a9:15:0c:dc:44:3d:a5:d5:6e:f9:4f: 39:86:a8:1a:bb:01:1a:2f:d7:a6:a6:90:5e:2d:f6: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2F:11:46:74:9C:51:FB:47:39:82:B4:68:B8:08:29:CD:F0:6E:2E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3C8RRnScUftHOYK0aLgIKc3wbi4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.128.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:1d:0a:38:94:67:79:8c:76:8d:91:d0:13:2f:5f:80:b9:a1: 72:5e:31:d1:ef:49:44:f9:00:82:34:e4:55:a0:68:2d:e3:60: ba:e8:1c:aa:1d:25:f6:0e:ba:58:46:ac:a0:98:3d:c2:7e:4f: 79:fc:3d:87:d7:1e:1d:e5:14:e3:ff:31:ee:a7:c3:1d:08:5a: 28:d6:37:18:de:11:ab:0d:97:e9:07:f3:f2:23:d8:93:11:37: 06:98:05:bd:54:e5:61:f8:90:66:c5:be:92:16:15:8d:8c:c3: 20:a8:51:94:de:f0:ae:58:62:88:21:25:fb:81:26:dd:b8:84: 7b:60:f7:74:4e:16:5d:86:4f:11:a6:07:2d:41:68:00:cd:81: e7:93:ca:f0:b7:a7:1c:b6:df:23:8e:ba:4b:ef:ca:5a:28:7e: ae:f6:bc:7a:5d:ff:09:20:26:4e:01:e0:bd:c8:48:fc:ae:7b: fc:92:0d:36:21:b8:82:72:91:3a:52:66:33:cc:c8:8c:26:8d: a6:18:26:41:32:5b:70:17:f4:e9:ae:4f:81:75:91:eb:4e:a7: 9e:dc:52:45:63:93:b4:be:b8:f8:50:3d:20:d8:e0:10:84:9e: 5c:f6:e0:f8:ff:07:ef:e0:14:27:2a:a8:a2:63:54:5f:15:74: 5f:b5:5b:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERDMkYxMTQ2NzQ5QzUx RkI0NzM5ODJCNDY4QjgwODI5Q0RGMDZFMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE7iRX+hUpO8HvxVez9vXrkIV0ACbNlK8DrPS0iRYUDn8HjBnW JQ8N9Irni3QJjW31L2wjWtXls7jYEQ+Q7OTsrNp032GOOjrWewu3iu1D/pIHn3t2 QykLntGJ9aWDhnyr++vsD4/dC2/qYP7OoS5amPxhGc467+mamSEhO5gTGCURYMmC cT67OncDh2Nr7QgfQaXlxacFq5ggYMaAzYq29Ce7srIFT/M+Vp5K1zJ+OF/pkXl3 E9u/y/J/SLiBVf8QrQ8yzCA5X3JchkhEhQo6dYol97x2FEWXJ8i9kEF1vubJsEip FQzcRD2l1W75TzmGqBq7ARov16amkF4t9qjnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3C8RRnScUftHOYK0aLgIKc3wbi4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNDOFJSblNjVWZ0SE9ZSzBh TGdJS2Mzd2JpNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6IAwDQYJKoZIhvcNAQELBQADggEBAC8dCjiUZ3mMdo2R0BMvX4C5oXJeMdHvSUT5 AII05FWgaC3jYLroHKodJfYOulhGrKCYPcJ+T3n8PYfXHh3lFOP/Me6nwx0IWijW NxjeEasNl+kH8/Ij2JMRNwaYBb1U5WH4kGbFvpIWFY2MwyCoUZTe8K5YYoghJfuB Jt24hHtg93ROFl2GTxGmBy1BaADNgeeTyvC3pxy23yOOukvvyloofq72vHpd/wkg Jk4B4L3ISPyue/ySDTYhuIJykTpSZjPMyIwmjaYYJkEyW3AX9OmuT4F1ketOp57c UkVjk7S+uPhQPSDY4BCEnlz24Pj/B+/gFCcqqKJjVF8VdF+1W0k= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:12 2025 by rpki-client