$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6sqxK2XNfdU3iKGj-vcKtP0JC1c.roa File: 6sqxK2XNfdU3iKGj-vcKtP0JC1c.roa (raw, json) Hash identifier: SGVWBhJ7c0wccnFhdC2krBVikCTrGKHggON8sdzkfbc= Subject key identifier: EA:CA:B1:2B:65:CD:7D:D5:37:88:A1:A3:FA:F7:0A:B4:FD:09:0B:57 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3528 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6sqxK2XNfdU3iKGj-vcKtP0JC1c.roa Signing time: Mon 10 Feb 2025 13:53:05 +0000 ROA not before: Mon 10 Feb 2025 13:53:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EACAB12B65CD7DD53788A1A3FAF70AB4FD090B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e8:8e:0e:9b:1d:c8:d0:33:1e:4f:cd:bd:49: f1:07:6b:1c:8f:d4:e3:4c:7a:3a:a6:07:9a:79:63: 4e:41:52:63:3b:32:14:f7:0d:b1:1f:d8:84:69:1f: 5a:cf:91:94:9f:da:5c:7a:09:24:1f:b3:3b:b4:7d: 09:ff:67:1f:17:fa:7a:02:c8:81:67:2c:b3:e8:04: 15:f8:d5:36:36:d4:06:06:62:2a:c4:15:e2:53:bc: ac:44:54:8e:47:59:dd:3f:d8:37:04:5b:72:b9:67: 3d:51:e3:f0:2f:ff:a0:30:eb:d8:bb:13:d3:a9:c1: 68:ed:78:64:57:64:9f:26:35:24:0c:f9:f2:14:71: 97:d3:77:3c:e4:01:ae:e2:18:44:97:bb:3a:50:73: 53:63:9e:af:eb:40:d2:3d:8d:cd:fc:cc:54:e9:00: 74:d8:66:ec:69:31:d0:a9:67:d6:f4:72:27:eb:8c: ae:d4:72:77:17:e0:fa:a3:e4:39:8e:c7:4e:71:14: 7c:16:ba:b0:6b:29:39:0b:e6:51:7c:7b:07:1a:5e: 38:dd:83:d3:41:cb:46:85:7a:5f:1d:34:d6:8f:23: 9e:67:74:ad:41:12:f6:15:c2:4a:5d:25:84:3c:6e: 0b:2c:12:cd:a9:6b:2b:05:19:74:0e:31:6a:db:1b: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CA:B1:2B:65:CD:7D:D5:37:88:A1:A3:FA:F7:0A:B4:FD:09:0B:57 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6sqxK2XNfdU3iKGj-vcKtP0JC1c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.32.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:03:03:22:66:be:be:c6:ee:c0:ac:62:e6:9e:79:13:60:fb: e8:a4:36:53:c8:83:86:4d:be:60:2a:ef:c3:d4:f1:b9:0d:8a: 91:a4:a8:90:d5:8e:10:bd:d9:87:2f:64:2c:8b:12:51:d6:7f: 99:f9:06:5d:aa:7c:e9:3e:e6:4c:6b:1c:d0:6b:36:b1:0f:24: eb:1a:46:5a:da:44:e0:76:1d:dc:d3:62:04:5e:5b:f8:7a:7b: 6b:bc:16:63:e1:0c:c4:f9:5c:4f:c9:0c:ba:e1:e6:9c:8e:c5: 72:90:21:4f:98:c8:63:81:4d:86:ae:ee:b5:02:de:b3:e5:90: 14:dc:cc:65:40:0e:45:70:85:31:92:a2:72:58:55:41:03:4e: 46:c0:b4:d7:9d:d7:33:53:03:a5:63:31:bd:2b:fc:a2:c5:37: 76:31:91:f0:98:1c:bd:00:c6:33:b6:0b:c1:6d:85:b2:b4:8a: c1:6a:51:a3:fc:7a:84:6c:56:50:f9:1b:72:31:e5:3d:ed:8a: ec:f2:4c:dd:22:09:68:e2:e8:bc:38:50:6b:45:ea:36:73:0b: 1f:ad:f7:98:da:b3:9c:9f:81:62:66:98:bc:d4:75:05:06:b0: 4f:0b:cf:9c:aa:70:c5:d2:59:88:05:bc:c3:86:7b:a7:26:20: 03:a7:80:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVBQ0FCMTJCNjVDRDdE RDUzNzg4QTFBM0ZBRjcwQUI0RkQwOTBCNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX6I4Omx3I0DMeT829SfEHaxyP1ONMejqmB5p5Y05BUmM7MhT3 DbEf2IRpH1rPkZSf2lx6CSQfszu0fQn/Zx8X+noCyIFnLLPoBBX41TY21AYGYirE FeJTvKxEVI5HWd0/2DcEW3K5Zz1R4/Av/6Aw69i7E9OpwWjteGRXZJ8mNSQM+fIU cZfTdzzkAa7iGESXuzpQc1Njnq/rQNI9jc38zFTpAHTYZuxpMdCpZ9b0cifrjK7U cncX4Pqj5DmOx05xFHwWurBrKTkL5lF8ewcaXjjdg9NBy0aFel8dNNaPI55ndK1B EvYVwkpdJYQ8bgssEs2paysFGXQOMWrbG+ohAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6sqxK2XNfdU3iKGj+vcKtP0JC1cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZzcXhLMlhOZmRVM2lLR2ot dmNLdFAwSkMxYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wCAwDQYJKoZIhvcNAQELBQADggEBADoDAyJmvr7G7sCsYuaeeRNg++ikNlPIg4ZN vmAq78PU8bkNipGkqJDVjhC92YcvZCyLElHWf5n5Bl2qfOk+5kxrHNBrNrEPJOsa RlraROB2HdzTYgReW/h6e2u8FmPhDMT5XE/JDLrh5pyOxXKQIU+YyGOBTYau7rUC 3rPlkBTczGVADkVwhTGSonJYVUEDTkbAtNed1zNTA6VjMb0r/KLFN3YxkfCYHL0A xjO2C8FthbK0isFqUaP8eoRsVlD5G3Ix5T3tiuzyTN0iCWji6Lw4UGtF6jZzCx+t 95jas5yfgWJmmLzUdQUGsE8Lz5yqcMXSWYgFvMOGe6cmIAOngFA= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:25 2025 by rpki-client