$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FN78jD71Kl2aSYkHzgYOZ8cZc98.roa File: FN78jD71Kl2aSYkHzgYOZ8cZc98.roa (raw, json) Hash identifier: V7LTaXoRd8kPm026aE+1C8a0MQKLfGEB+nMDKQzgMeQ= Subject key identifier: 14:DE:FC:8C:3E:F5:2A:5D:9A:49:89:07:CE:06:0E:67:C7:19:73:DF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 359D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FN78jD71Kl2aSYkHzgYOZ8cZc98.roa Signing time: Mon 10 Feb 2025 13:53:31 +0000 ROA not before: Mon 10 Feb 2025 13:53:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.0.0/15 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13725 (0x359d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=14DEFC8C3EF52A5D9A498907CE060E67C71973DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:34:1f:0c:17:0b:6d:3d:8e:fd:65:69:49: f3:29:2c:3f:39:6c:29:88:2d:9d:4d:94:e4:57:11: e7:e5:01:e9:b2:05:14:3c:67:e5:b7:fd:d0:1b:75: 84:60:31:26:6c:9b:17:3a:5a:59:cf:68:b3:9d:b3: e5:f2:59:79:37:64:93:c9:94:6b:c3:24:cc:87:82: 7b:99:61:f3:f8:95:47:51:2d:f3:57:eb:e6:7a:6e: 5d:76:98:82:5f:ec:e6:f9:94:41:26:ae:cd:a7:36: 7c:c6:26:fd:7b:12:5e:4a:4e:56:fc:70:0b:6a:ae: 40:01:77:18:b5:2c:b6:be:b7:06:d7:80:20:61:1a: 12:56:3b:6f:87:e9:f3:1b:bb:7d:5b:49:83:61:7e: 1f:6a:be:b7:8c:1a:d8:eb:54:b8:4f:a5:42:ce:69: d5:84:30:02:75:fc:27:0f:dc:08:80:47:26:be:5f: 6a:9d:5c:0e:89:87:41:8a:47:1e:53:6c:29:c5:af: 93:b3:19:20:52:59:07:82:1d:11:3c:4c:71:ef:ec: e2:38:4f:d7:37:00:5a:63:c7:21:e2:1e:7b:63:7f: 4e:37:9d:6f:9e:40:b8:c0:18:9c:a2:08:63:a2:e5: 07:09:10:1b:21:e2:ee:19:df:ef:72:10:1e:38:21: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DE:FC:8C:3E:F5:2A:5D:9A:49:89:07:CE:06:0E:67:C7:19:73:DF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FN78jD71Kl2aSYkHzgYOZ8cZc98.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5a:81:c2:3e:9f:3e:a7:ce:f2:5d:49:e9:e1:f8:ad:30:a4:44: dd:82:13:e9:37:1c:29:ff:a2:a5:73:8a:57:52:df:21:56:33: a5:71:ad:f8:fb:6d:62:91:f8:d5:95:cd:15:c9:6f:a3:21:96: c6:c5:63:52:99:b8:fa:ab:eb:2a:ae:1b:79:e0:2d:26:19:e5: d9:06:6e:03:fd:7b:af:bb:c5:12:f7:8e:1d:3c:37:20:3e:eb: c3:27:02:3d:2c:db:6b:95:35:0e:ca:d1:57:a7:c3:45:74:ee: 9d:b0:42:6b:b1:46:d6:23:88:2e:78:ff:c3:04:90:05:c8:ff: 7d:a2:ed:79:ce:4e:3a:69:7e:f4:03:f4:7b:6a:5d:68:c5:63: 34:c0:c8:6e:37:81:15:d6:75:6f:f9:a7:05:c6:fd:4c:80:be: ac:86:fc:29:1a:b9:02:7d:b0:65:93:e2:2b:80:ba:c2:7e:0d: c3:1f:f6:f4:89:f6:27:1e:c8:f6:a5:2c:43:a3:6c:84:d1:b2: 5c:af:d1:25:2e:c7:0c:5c:ae:d6:97:22:81:05:c1:45:4a:a5: 5a:91:db:2f:cf:ac:f7:42:72:4b:9d:95:18:4f:e9:90:46:95: c0:4a:73:6c:7b:34:63:11:18:b1:83:85:fc:5c:fe:28:39:2e: a3:91:df:d8 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0REVGQzhDM0VGNTJB NUQ5QTQ5ODkwN0NFMDYwRTY3QzcxOTczREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUQzQfDBcLbT2O/WVpSfMpLD85bCmILZ1NlORXEeflAemyBRQ8 Z+W3/dAbdYRgMSZsmxc6WlnPaLOds+XyWXk3ZJPJlGvDJMyHgnuZYfP4lUdRLfNX 6+Z6bl12mIJf7Ob5lEEmrs2nNnzGJv17El5KTlb8cAtqrkABdxi1LLa+twbXgCBh GhJWO2+H6fMbu31bSYNhfh9qvreMGtjrVLhPpULOadWEMAJ1/CcP3AiARya+X2qd XA6Jh0GKRx5TbCnFr5OzGSBSWQeCHRE8THHv7OI4T9c3AFpjxyHiHntjf043nW+e QLjAGJyiCGOi5QcJEBsh4u4Z3+9yEB44IQjJAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUFN78jD71Kl2aSYkHzgYOZ8cZc98wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZONzhqRDcxS2wyYVNZa0h6 Z1lPWjhjWmM5OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwF2 6DANBgkqhkiG9w0BAQsFAAOCAQEAWoHCPp8+p87yXUnp4fitMKRE3YIT6TccKf+i pXOKV1LfIVYzpXGt+PttYpH41ZXNFclvoyGWxsVjUpm4+qvrKq4beeAtJhnl2QZu A/17r7vFEveOHTw3ID7rwycCPSzba5U1DsrRV6fDRXTunbBCa7FG1iOILnj/wwSQ Bcj/faLtec5OOml+9AP0e2pdaMVjNMDIbjeBFdZ1b/mnBcb9TIC+rIb8KRq5An2w ZZPiK4C6wn4Nwx/29In2Jx7I9qUsQ6NshNGyXK/RJS7HDFyu1pcigQXBRUqlWpHb L8+s90JyS52VGE/pkEaVwEpzbHs0YxEYsYOF/Fz+KDkuo5Hf2A== -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:46 2025 by rpki-client