$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3aRcUlsjdQpKJxIZCoKLqqzskA0.roa File: 3aRcUlsjdQpKJxIZCoKLqqzskA0.roa (raw, json) Hash identifier: XwlLELF0CUdXzgOuvbfsX37UeQyfASm7pB0YPpqpMvo= Subject key identifier: DD:A4:5C:52:5B:23:75:0A:4A:27:12:19:0A:82:8B:AA:AC:EC:90:0D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3549 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3aRcUlsjdQpKJxIZCoKLqqzskA0.roa Signing time: Mon 10 Feb 2025 13:53:12 +0000 ROA not before: Mon 10 Feb 2025 13:53:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13641 (0x3549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DDA45C525B23750A4A2712190A828BAAACEC900D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:74:a5:42:de:5a:ab:cd:f2:0a:44:85:c5: 3d:73:9c:35:f6:a7:ff:d5:34:af:e4:fa:7b:ed:00: 9a:d2:a9:82:95:46:51:5e:d4:bb:07:08:6f:7e:e3: 2d:7a:50:d7:83:3a:fb:07:24:a6:20:7a:fd:7c:0e: a1:99:01:6b:f0:71:87:e7:56:e1:31:85:31:80:dc: ec:f6:a8:53:cb:88:1a:da:cc:a5:41:c0:bf:a3:f0: ce:7c:94:2e:75:5c:70:e0:5a:d1:01:bb:89:4d:d2: b1:8b:6b:d9:6a:d1:34:6e:9d:85:ec:37:77:5d:03: a3:2a:9a:8c:44:fd:f3:a7:30:a3:f7:f2:ee:c1:77: e8:39:c7:d3:8e:11:5a:ee:ed:99:c6:6d:a5:c2:95: ae:a5:35:a8:54:42:a0:7a:95:d4:aa:e7:86:b7:ac: ed:79:93:05:4f:51:71:74:93:0f:a3:a3:f7:69:9f: 15:90:20:69:b4:31:0e:16:0f:06:8a:09:a7:d0:01: e1:f8:7e:57:e4:7c:21:46:3a:d3:02:cb:9f:f0:0a: bc:04:de:26:ed:82:72:f1:29:fe:9d:b8:9d:1b:88: ba:5f:01:71:f5:c6:4b:03:74:c4:d6:ec:49:3a:71: 6f:f8:9f:4f:ae:13:df:61:f3:10:8f:bd:5f:d5:77: 54:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A4:5C:52:5B:23:75:0A:4A:27:12:19:0A:82:8B:AA:AC:EC:90:0D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3aRcUlsjdQpKJxIZCoKLqqzskA0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.0.0/15 Signature Algorithm: sha256WithRSAEncryption 60:a3:82:35:18:82:9a:81:a9:f8:9b:84:81:ab:a9:11:aa:94: 1d:21:4d:df:43:24:57:ce:41:8c:5c:63:61:c5:f2:de:15:97: 3d:99:e7:3e:3c:2a:a4:25:55:c6:e7:9d:9e:d3:c9:bd:56:e9: 6f:65:76:b0:10:b9:cb:d3:62:d7:8a:96:61:55:12:f8:70:64: db:f9:f5:88:fd:e2:2b:2c:d6:25:aa:83:06:e4:4a:56:da:38: 67:6e:74:27:45:f4:46:ea:be:cd:7a:7f:4f:70:9a:aa:ca:c9: 8a:21:25:da:ac:87:31:66:14:8d:47:ea:b1:a0:56:13:de:fc: 11:07:e9:30:6f:8f:4b:02:62:b4:5b:05:b0:3c:7d:e9:e0:46: 9b:9b:7a:1d:70:91:c8:cf:36:dd:9c:43:bf:8b:f9:2f:f7:07: 1c:25:80:ad:e3:ba:b0:af:3b:41:21:7e:a1:6d:9d:74:03:80: d9:3e:65:08:71:6b:ad:f7:7f:23:1f:69:89:28:e3:12:10:27: 75:af:d3:4f:2a:3e:b9:74:41:0a:30:a1:45:1e:fe:63:67:ca: a2:90:8b:e8:85:ed:a8:00:b8:5a:45:c3:b4:53:0d:7a:c4:2a: e2:66:8f:94:34:7d:a4:c5:9c:52:4c:7e:52:12:40:c1:ab:69: 5f:a1:0a:f7 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICNUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEREQTQ1QzUyNUIyMzc1 MEE0QTI3MTIxOTBBODI4QkFBQUNFQzkwMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzQHSlQt5aq83yCkSFxT1znDX2p//VNK/k+nvtAJrSqYKVRlFe 1LsHCG9+4y16UNeDOvsHJKYgev18DqGZAWvwcYfnVuExhTGA3Oz2qFPLiBrazKVB wL+j8M58lC51XHDgWtEBu4lN0rGLa9lq0TRunYXsN3ddA6MqmoxE/fOnMKP38u7B d+g5x9OOEVru7ZnGbaXCla6lNahUQqB6ldSq54a3rO15kwVPUXF0kw+jo/dpnxWQ IGm0MQ4WDwaKCafQAeH4flfkfCFGOtMCy5/wCrwE3ibtgnLxKf6duJ0biLpfAXH1 xksDdMTW7Ek6cW/4n0+uE99h8xCPvV/Vd1QpAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU3aRcUlsjdQpKJxIZCoKLqqzskA0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNhUmNVbHNqZFFwS0p4SVpD b0tMcXF6c2tBMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwF2 6DANBgkqhkiG9w0BAQsFAAOCAQEAYKOCNRiCmoGp+JuEgaupEaqUHSFN30MkV85B jFxjYcXy3hWXPZnnPjwqpCVVxuedntPJvVbpb2V2sBC5y9Ni14qWYVUS+HBk2/n1 iP3iKyzWJaqDBuRKVto4Z250J0X0Ruq+zXp/T3CaqsrJiiEl2qyHMWYUjUfqsaBW E978EQfpMG+PSwJitFsFsDx96eBGm5t6HXCRyM823ZxDv4v5L/cHHCWAreO6sK87 QSF+oW2ddAOA2T5lCHFrrfd/Ix9piSjjEhAnda/TTyo+uXRBCjChRR7+Y2fKopCL 6IXtqAC4WkXDtFMNesQq4maPlDR9pMWcUkx+UhJAwatpX6EK9w== -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:07 2025 by rpki-client