$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FNDJ0jwGT2UzWzsBM8SHLPGmDUQ.roa File: FNDJ0jwGT2UzWzsBM8SHLPGmDUQ.roa (raw, json) Hash identifier: lgWtiXRJOpu3nRNp94rwC8UNZcwrCPmPYSFPhViYULg= Subject key identifier: 14:D0:C9:D2:3C:06:4F:65:33:5B:3B:01:33:C4:87:2C:F1:A6:0D:44 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33C0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FNDJ0jwGT2UzWzsBM8SHLPGmDUQ.roa Signing time: Mon 10 Feb 2025 13:51:44 +0000 ROA not before: Mon 10 Feb 2025 13:51:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 211.76.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13248 (0x33c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=14D0C9D23C064F65335B3B0133C4872CF1A60D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:1c:b3:66:98:7f:83:fd:c1:60:88:c9:31: 2e:a6:d6:1c:db:80:b1:28:8f:d8:2a:2d:f2:5a:11: 87:fd:05:32:56:36:de:c9:99:18:1e:d1:bf:9b:b8: 07:20:f9:2a:77:7c:89:54:7b:13:34:f6:be:05:3b: 1b:cc:55:be:41:c5:97:92:e4:ef:ed:c5:70:07:08: 2c:81:2e:84:3a:0e:0d:82:ee:58:57:66:8e:2c:09: 9d:ae:63:c0:e5:28:55:fe:f3:e7:a8:a8:bc:1c:17: 1e:63:01:8f:7d:1c:88:80:e0:1b:09:30:06:b1:0a: f3:f1:0f:eb:95:37:44:ab:74:7d:bd:21:2c:8e:e0: 69:87:54:32:a2:fb:3e:28:3b:5d:28:3b:a5:1c:2e: 59:5a:8a:b2:95:ce:b3:b7:70:9e:97:b1:76:2f:fd: b1:9e:fb:ee:cd:02:54:59:b2:21:d5:ed:60:e2:a0: 1a:54:4e:2c:c7:30:fc:ab:c3:46:18:e2:79:5f:0c: 10:b0:a6:cd:bd:6b:ca:9f:79:6e:52:cd:da:df:7a: 03:95:0f:ea:5f:8d:10:5b:de:b4:fa:a0:5e:e0:fc: f2:7f:f6:dc:08:b4:03:57:f0:97:2e:ed:4c:09:1a: 2d:d7:b7:18:02:bf:39:d7:9e:82:f6:b0:4f:97:90: 62:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D0:C9:D2:3C:06:4F:65:33:5B:3B:01:33:C4:87:2C:F1:A6:0D:44 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FNDJ0jwGT2UzWzsBM8SHLPGmDUQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.124.0/24 Signature Algorithm: sha256WithRSAEncryption af:49:b4:07:ef:c6:66:4f:76:f8:5f:c2:98:e8:19:15:bf:5c: 35:63:c0:63:db:c0:68:9b:0e:65:43:df:50:0b:54:df:4c:91: f1:96:55:d9:94:e3:c3:56:64:85:73:63:84:97:c6:02:c3:e1: 7f:85:74:0e:3e:bb:1b:9f:b3:6f:dd:ee:fb:98:07:41:bc:d7: 83:8d:bc:cb:e5:4a:c0:0c:ae:c2:da:70:90:5d:15:0e:6a:5c: 82:1e:63:34:36:6d:61:71:01:01:a6:ed:de:26:4c:ac:a2:7f: 8e:9d:26:38:12:0d:4a:60:53:e5:85:4a:f2:d0:e6:af:1d:6e: b7:74:36:56:70:4c:26:f7:85:1d:f7:a4:f3:a8:a7:66:75:89: 6b:42:69:e5:38:06:59:fa:ac:92:90:13:46:63:1e:c4:c5:95: 49:82:f3:d2:b8:90:29:49:77:bd:f5:a3:04:ef:ff:e3:e3:11: 2b:af:09:48:e4:8e:56:4b:81:41:88:ca:9f:23:bf:da:2f:0c: c4:50:42:bf:96:38:fa:8a:50:4f:01:4b:d3:e5:60:d3:03:7a: f0:d3:42:51:b6:2d:73:22:53:77:00:c4:4d:07:46:03:5d:4d: 2a:b0:48:f9:3a:50:ba:a6:43:c6:4d:ef:66:ad:39:54:90:13: bc:42:74:0f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0RDBDOUQyM0MwNjRG NjUzMzVCM0IwMTMzQzQ4NzJDRjFBNjBENDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCexxyzZph/g/3BYIjJMS6m1hzbgLEoj9gqLfJaEYf9BTJWNt7J mRge0b+buAcg+Sp3fIlUexM09r4FOxvMVb5BxZeS5O/txXAHCCyBLoQ6Dg2C7lhX Zo4sCZ2uY8DlKFX+8+eoqLwcFx5jAY99HIiA4BsJMAaxCvPxD+uVN0SrdH29ISyO 4GmHVDKi+z4oO10oO6UcLllairKVzrO3cJ6XsXYv/bGe++7NAlRZsiHV7WDioBpU TizHMPyrw0YY4nlfDBCwps29a8qfeW5SzdrfegOVD+pfjRBb3rT6oF7g/PJ/9twI tANX8Jcu7UwJGi3XtxgCvznXnoL2sE+XkGKpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFNDJ0jwGT2UzWzsBM8SHLPGmDUQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZOREowandHVDJVeld6c0JN OFNITFBHbURVUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THwwDQYJKoZIhvcNAQELBQADggEBAK9JtAfvxmZPdvhfwpjoGRW/XDVjwGPbwGib DmVD31ALVN9MkfGWVdmU48NWZIVzY4SXxgLD4X+FdA4+uxufs2/d7vuYB0G814ON vMvlSsAMrsLacJBdFQ5qXIIeYzQ2bWFxAQGm7d4mTKyif46dJjgSDUpgU+WFSvLQ 5q8dbrd0NlZwTCb3hR33pPOop2Z1iWtCaeU4Bln6rJKQE0ZjHsTFlUmC89K4kClJ d731owTv/+PjESuvCUjkjlZLgUGIyp8jv9ovDMRQQr+WOPqKUE8BS9PlYNMDevDT QlG2LXMiU3cAxE0HRgNdTSqwSPk6ULqmQ8ZN72atOVSQE7xCdA8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:22 2025 by rpki-client