$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BSd5vru-H8CAuidwdzwEpdl_mRU.roa File: BSd5vru-H8CAuidwdzwEpdl_mRU.roa (raw, json) Hash identifier: GgoqY8cZcS5JSU/H1zBilcENa2jW+dvidQhJG1FksXs= Subject key identifier: 05:27:79:BE:BB:BE:1F:C0:80:BA:27:70:77:3C:04:A5:D9:7F:99:15 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3571 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BSd5vru-H8CAuidwdzwEpdl_mRU.roa Signing time: Mon 10 Feb 2025 13:53:20 +0000 ROA not before: Mon 10 Feb 2025 13:53:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=052779BEBBBE1FC080BA2770773C04A5D97F9915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:47:cf:30:f1:ab:39:8e:16:3a:92:64:27: 24:62:fe:b4:2d:86:5b:43:1b:97:92:b8:89:e2:96: a8:53:66:2e:b0:d9:18:26:f6:61:7f:3a:51:51:80: 49:02:8a:80:19:60:b8:12:f3:dd:49:a7:38:7e:ba: cc:b7:9f:55:8b:10:a1:bc:61:1e:f1:5b:a1:58:87: 50:ea:be:01:b6:7b:c9:4f:c5:77:ec:45:04:8e:19: a1:b3:ed:82:b0:5e:ad:5f:ce:38:fd:d6:f0:5b:ad: 85:d2:ce:2e:ca:da:9a:9f:a1:a1:3c:be:f9:ed:24: bb:78:8c:7b:b6:a2:fb:96:cf:e9:88:e4:c1:27:17: 09:5b:8a:52:68:e4:0f:ad:ee:e7:68:ab:0c:56:93: 1b:8d:72:45:c2:78:0c:7b:d8:89:5d:59:1d:a7:72: dd:07:44:41:9a:5e:ef:14:b6:33:bc:56:a7:10:df: 5d:51:ce:59:ad:40:09:fe:aa:1f:d7:5a:e9:ed:df: f1:fb:cd:9b:02:30:0b:26:ea:7c:86:a1:3c:9a:45: 77:2e:8b:cb:a1:e3:75:1e:e0:38:02:2e:41:50:00: 13:b7:23:97:4a:cd:24:43:ec:ec:bc:d3:e8:61:d8: d0:d7:4b:6f:53:99:2e:25:6a:a1:be:25:19:f8:c3: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:27:79:BE:BB:BE:1F:C0:80:BA:27:70:77:3C:04:A5:D9:7F:99:15 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BSd5vru-H8CAuidwdzwEpdl_mRU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.192.0/19 Signature Algorithm: sha256WithRSAEncryption ac:77:73:8f:45:9b:b3:21:40:5d:dc:c7:cd:45:76:d2:cc:e5: c4:e4:57:a4:ab:c1:a7:2e:c3:e2:cb:34:cc:b2:44:e2:53:86: fd:14:68:31:8a:22:83:08:1c:42:d1:c2:6b:5a:61:9e:cc:b3: 9c:0c:7e:9e:e4:7c:db:65:6a:79:3d:af:eb:c7:c0:26:ca:c8: c3:55:2c:fe:b6:69:cf:5f:d2:dc:e5:c4:58:38:b6:88:b9:d9: 49:80:a0:a0:c9:cd:06:e6:16:fa:70:ca:70:29:be:2a:77:8b: dc:cc:eb:78:94:98:a8:91:85:7a:9c:96:59:6e:47:dd:97:db: b0:db:98:43:37:e8:88:f2:fe:7b:f4:42:57:6d:38:b4:0c:0b: 67:c1:8c:fa:86:d0:53:11:c9:d2:c5:d3:b2:5b:40:61:1b:da: 3b:a3:10:02:c6:a0:c2:24:2e:c6:51:c3:26:b3:f7:e1:19:2d: 01:c7:85:45:3f:87:17:7b:b4:a4:c5:e8:77:81:bf:f9:ae:8c: 0f:d6:96:79:8c:ab:15:73:02:37:a9:80:57:e7:0e:74:fc:88: 5f:8c:f8:b9:03:ce:28:77:41:57:4c:06:8f:13:dc:ed:39:32: 4f:12:0e:5a:51:cd:85:17:a3:1a:ca:11:27:40:bb:83:11:b0: df:c1:02:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1Mjc3OUJFQkJCRTFG QzA4MEJBMjc3MDc3M0MwNEE1RDk3Rjk5MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC03EfPMPGrOY4WOpJkJyRi/rQthltDG5eSuInilqhTZi6w2Rgm 9mF/OlFRgEkCioAZYLgS891Jpzh+usy3n1WLEKG8YR7xW6FYh1DqvgG2e8lPxXfs RQSOGaGz7YKwXq1fzjj91vBbrYXSzi7K2pqfoaE8vvntJLt4jHu2ovuWz+mI5MEn FwlbilJo5A+t7udoqwxWkxuNckXCeAx72IldWR2nct0HREGaXu8UtjO8VqcQ311R zlmtQAn+qh/XWunt3/H7zZsCMAsm6nyGoTyaRXcui8uh43Ue4DgCLkFQABO3I5dK zSRD7Oy80+hh2NDXS29TmS4laqG+JRn4w2shAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBSd5vru+H8CAuidwdzwEpdl/mRUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JTZDV2cnUtSDhDQXVpZHdk endFcGRsX21SVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6MAwDQYJKoZIhvcNAQELBQADggEBAKx3c49Fm7MhQF3cx81FdtLM5cTkV6Srwacu w+LLNMyyROJThv0UaDGKIoMIHELRwmtaYZ7Ms5wMfp7kfNtlank9r+vHwCbKyMNV LP62ac9f0tzlxFg4toi52UmAoKDJzQbmFvpwynApvip3i9zM63iUmKiRhXqclllu R92X27DbmEM36Ijy/nv0QldtOLQMC2fBjPqG0FMRydLF07JbQGEb2jujEALGoMIk LsZRwyaz9+EZLQHHhUU/hxd7tKTF6HeBv/mujA/WlnmMqxVzAjepgFfnDnT8iF+M +LkDzih3QVdMBo8T3O05Mk8SDlpRzYUXoxrKESdAu4MRsN/BAtg= -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:26 2025 by rpki-client