$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EFnYq8udxXw7Fp5X5Xx2aqgjiso.roa File: EFnYq8udxXw7Fp5X5Xx2aqgjiso.roa (raw, json) Hash identifier: w9nIVa0GxlqmYQ1m28GBr9qoh8eONUq90gG3zYvVzFw= Subject key identifier: 10:59:D8:AB:CB:9D:C5:7C:3B:16:9E:57:E5:7C:76:6A:A8:23:8A:CA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35B6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EFnYq8udxXw7Fp5X5Xx2aqgjiso.roa Signing time: Mon 10 Feb 2025 13:53:37 +0000 ROA not before: Mon 10 Feb 2025 13:53:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13750 (0x35b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1059D8ABCB9DC57C3B169E57E57C766AA8238ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:54:c4:d6:2f:0d:8d:8c:bd:57:f2:65:3c: 7d:17:42:f6:dd:99:b8:81:b3:1f:fa:8b:c7:05:21: 17:aa:9d:3a:33:b5:fc:02:08:6e:5a:aa:3e:a2:ac: dc:1c:2f:c1:36:40:e9:be:20:2f:54:39:90:36:a3: be:e6:a0:4b:9a:90:7c:cb:0d:dd:26:9c:3b:bc:ac: 3a:6b:38:b6:03:16:a0:ce:26:da:0b:60:08:5e:f2: 02:70:ee:72:73:6f:34:bb:f6:9a:8d:c6:bc:64:98: 99:e0:72:68:a5:6f:be:d4:4c:16:10:2b:0b:12:d2: 94:4c:37:fb:42:c6:bf:05:f6:f8:6f:70:08:45:b1: e8:db:8a:ac:ca:5e:42:0d:ab:83:8e:1b:60:17:03: 51:33:11:33:8b:d4:c8:31:4e:b2:04:6c:42:77:9f: 69:5c:e4:cb:6b:96:9c:17:1a:41:1a:5b:ec:9b:09: f9:d7:34:bc:56:b3:de:8d:a2:66:8f:0a:39:dd:3f: 88:22:4a:15:9a:c7:ee:68:24:7f:40:98:c1:06:3f: 00:5b:c9:f8:15:c0:c6:6a:86:07:61:8c:e7:48:be: 64:ba:48:9c:3f:e4:8c:2a:cb:1f:0f:55:f9:5c:f7: e7:d3:69:77:99:8c:b7:7e:73:19:73:02:6d:a1:09: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:59:D8:AB:CB:9D:C5:7C:3B:16:9E:57:E5:7C:76:6A:A8:23:8A:CA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EFnYq8udxXw7Fp5X5Xx2aqgjiso.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.68.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:8f:aa:dd:a7:1a:5a:bb:4d:3a:8e:a3:fc:67:d0:64:24:8c: 47:42:75:c7:6c:e3:78:20:d8:2b:95:c0:ae:05:e7:da:75:66: cc:bb:29:68:19:06:95:c2:a6:14:78:d5:23:c4:82:47:be:e4: b3:26:e5:d8:5b:45:7d:57:36:67:44:64:f0:86:79:bd:73:48: e2:79:14:8e:eb:a7:89:de:9d:58:c2:06:71:36:73:b5:05:cc: 62:92:eb:f1:42:7a:17:35:19:49:38:d6:30:47:40:63:39:31: 95:a5:a0:79:39:1e:40:85:0c:c4:5b:fc:7b:0a:a6:e8:8a:00: 56:ee:3f:3c:13:a8:74:cd:a5:06:a8:e8:10:ad:34:8c:c3:94: 1a:1f:26:61:21:a1:68:6a:c3:0a:ff:36:33:08:5f:04:c3:d9: 61:b8:8c:69:62:71:d1:0f:5b:33:25:97:86:c6:4a:4d:d1:50: 2b:22:9e:3c:2f:31:b4:88:a8:f1:33:85:c6:00:7d:0e:ae:36: c0:71:47:52:c4:ea:f9:de:d5:1a:d0:9e:73:d4:78:4e:74:b9: c4:34:97:75:bb:68:1e:ca:72:8d:b3:fe:78:ec:7a:a5:6d:d4: 32:52:be:c8:bd:b2:04:bd:12:d9:5b:79:6f:4a:c6:28:71:ba: fb:ac:c1:97 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEwNTlEOEFCQ0I5REM1 N0MzQjE2OUU1N0U1N0M3NjZBQTgyMzhBQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiS1TE1i8NjYy9V/JlPH0XQvbdmbiBsx/6i8cFIReqnToztfwC CG5aqj6irNwcL8E2QOm+IC9UOZA2o77moEuakHzLDd0mnDu8rDprOLYDFqDOJtoL YAhe8gJw7nJzbzS79pqNxrxkmJngcmilb77UTBYQKwsS0pRMN/tCxr8F9vhvcAhF sejbiqzKXkINq4OOG2AXA1EzETOL1MgxTrIEbEJ3n2lc5MtrlpwXGkEaW+ybCfnX NLxWs96NomaPCjndP4giShWax+5oJH9AmMEGPwBbyfgVwMZqhgdhjOdIvmS6SJw/ 5Iwqyx8PVflc9+fTaXeZjLd+cxlzAm2hCbFxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEFnYq8udxXw7Fp5X5Xx2aqgjisowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VGbllxOHVkeFh3N0ZwNVg1 WHgyYXFnamlzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w0QwDQYJKoZIhvcNAQELBQADggEBACuPqt2nGlq7TTqOo/xn0GQkjEdCdcds43gg 2CuVwK4F59p1Zsy7KWgZBpXCphR41SPEgke+5LMm5dhbRX1XNmdEZPCGeb1zSOJ5 FI7rp4nenVjCBnE2c7UFzGKS6/FCehc1GUk41jBHQGM5MZWloHk5HkCFDMRb/HsK puiKAFbuPzwTqHTNpQao6BCtNIzDlBofJmEhoWhqwwr/NjMIXwTD2WG4jGlicdEP WzMll4bGSk3RUCsinjwvMbSIqPEzhcYAfQ6uNsBxR1LE6vne1RrQnnPUeE50ucQ0 l3W7aB7Kco2z/njseqVt1DJSvsi9sgS9EtlbeW9KxihxuvuswZc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:50 2025 by rpki-client