$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5UEyt1VzJQB57s8ThUCXOZsEXio.roa File: 5UEyt1VzJQB57s8ThUCXOZsEXio.roa (raw, json) Hash identifier: zGw3T+pkPeZwKsSejK4HMlILJ79+thvVv77tAw+xy1Y= Subject key identifier: E5:41:32:B7:55:73:25:00:79:EE:CF:13:85:40:97:39:9B:04:5E:2A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 361C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5UEyt1VzJQB57s8ThUCXOZsEXio.roa Signing time: Mon 10 Feb 2025 13:53:59 +0000 ROA not before: Mon 10 Feb 2025 13:53:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13852 (0x361c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E54132B75573250079EECF13854097399B045E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:36:56:4d:6f:16:ca:f4:a9:37:19:52:c5:1b: 5f:85:05:c1:65:d9:83:5a:9c:cd:e9:44:4e:9a:03: 3e:d6:a4:30:c8:9f:5f:a7:87:68:bb:d2:65:2c:c6: 79:71:ce:37:59:16:f0:53:f2:9b:e7:0a:85:11:e7: 33:0e:87:e0:cf:96:0d:92:9d:53:c0:72:f3:22:02: a9:1c:59:b9:ca:0a:39:aa:ef:1c:31:97:08:9f:57: 62:db:7a:99:aa:47:19:b1:e0:06:c5:e4:b4:85:9e: ec:26:c8:aa:37:ed:d9:00:80:82:b7:45:e8:68:bc: 52:e0:cb:0c:25:f2:29:bc:d8:18:35:df:82:d1:73: 3a:a7:eb:69:34:20:e7:0d:32:20:f6:64:30:73:7c: d1:a0:63:71:7f:25:02:83:44:5d:eb:41:ae:f4:e7: 01:df:4c:0b:f4:78:71:38:3c:08:cc:f7:cb:6c:fb: 1f:8c:0d:5e:00:21:48:af:56:58:d2:8a:c9:16:4a: 95:96:08:22:bc:cb:8e:93:7f:8f:7e:d5:e1:66:23: d5:12:af:f3:3a:4e:2b:a9:1c:49:34:0b:df:0f:00: bc:bb:72:28:25:d0:2d:44:7c:94:5a:d7:f2:e8:fc: 76:34:5a:93:31:bd:3c:17:3b:bc:81:ce:1b:58:f8: db:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:41:32:B7:55:73:25:00:79:EE:CF:13:85:40:97:39:9B:04:5E:2A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5UEyt1VzJQB57s8ThUCXOZsEXio.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.16.0/21 Signature Algorithm: sha256WithRSAEncryption a0:91:47:af:1c:95:64:8a:ad:c1:d9:2d:4c:88:03:1b:30:05: b6:e8:41:fb:db:b5:3e:73:14:13:7f:91:c6:e6:76:23:9f:11: 1b:c6:5e:e6:98:5e:0b:d9:b3:6c:69:02:ad:66:a6:35:a0:21: ab:57:15:a7:ce:67:79:3d:2a:a3:42:46:7a:54:67:f9:9f:73: 8e:7e:85:b3:23:d1:46:03:61:77:5d:7b:fd:be:82:04:ed:0f: 36:0d:3f:5c:93:d2:13:84:3f:f8:c5:eb:d3:85:74:90:2a:c3: db:ae:54:40:a8:09:5b:40:2c:78:1c:ad:81:97:37:6b:68:2b: 4e:2d:00:53:ce:ab:e8:fc:c1:8e:bb:99:12:06:f0:42:ec:34: 5b:d2:5b:8a:b0:c2:3f:53:ee:35:1b:17:8a:32:e6:2b:9b:9a: ed:8a:5d:c5:70:98:ce:e2:06:2e:ef:0f:97:1a:2d:c9:47:fc: 4b:a9:9e:57:fa:89:f1:56:fb:9a:7d:ed:ec:ac:2f:fa:e9:05: 57:a2:3f:9e:3a:72:73:42:b6:c4:a1:2d:e2:1c:be:bf:6e:10: 67:b0:53:48:5a:e2:2c:d9:c8:a3:32:0e:45:c8:8b:8f:b4:c7: 65:bd:82:a4:6c:9e:22:8b:34:ad:91:1f:7b:9c:2e:e2:e9:f2: 21:15:9c:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU1NDEzMkI3NTU3MzI1 MDA3OUVFQ0YxMzg1NDA5NzM5OUIwNDVFMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnNlZNbxbK9Kk3GVLFG1+FBcFl2YNanM3pRE6aAz7WpDDIn1+n h2i70mUsxnlxzjdZFvBT8pvnCoUR5zMOh+DPlg2SnVPAcvMiAqkcWbnKCjmq7xwx lwifV2LbepmqRxmx4AbF5LSFnuwmyKo37dkAgIK3RehovFLgywwl8im82Bg134LR czqn62k0IOcNMiD2ZDBzfNGgY3F/JQKDRF3rQa705wHfTAv0eHE4PAjM98ts+x+M DV4AIUivVljSiskWSpWWCCK8y46Tf49+1eFmI9USr/M6TiupHEk0C98PALy7cigl 0C1EfJRa1/Lo/HY0WpMxvTwXO7yBzhtY+Nt1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5UEyt1VzJQB57s8ThUCXOZsEXiowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVVRXl0MVZ6SlFCNTdzOFRo VUNYT1pzRVhpby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6RAwDQYJKoZIhvcNAQELBQADggEBAKCRR68clWSKrcHZLUyIAxswBbboQfvbtT5z FBN/kcbmdiOfERvGXuaYXgvZs2xpAq1mpjWgIatXFafOZ3k9KqNCRnpUZ/mfc45+ hbMj0UYDYXdde/2+ggTtDzYNP1yT0hOEP/jF69OFdJAqw9uuVECoCVtALHgcrYGX N2toK04tAFPOq+j8wY67mRIG8ELsNFvSW4qwwj9T7jUbF4oy5iubmu2KXcVwmM7i Bi7vD5caLclH/Eupnlf6ifFW+5p97eysL/rpBVeiP546cnNCtsShLeIcvr9uEGew U0ha4izZyKMyDkXIi4+0x2W9gqRsniKLNK2RH3ucLuLp8iEVnBY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:44 2025 by rpki-client