$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J8tRU4ZaNV8NFuHtmTTwzZXyEZw.roa File: J8tRU4ZaNV8NFuHtmTTwzZXyEZw.roa (raw, json) Hash identifier: MQuOoReP+7kK+iGsz/r5mGNHFT9njucAIxrm4l5BsqM= Subject key identifier: 27:CB:51:53:86:5A:35:5F:0D:16:E1:ED:99:34:F0:CD:95:F2:11:9C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34FB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J8tRU4ZaNV8NFuHtmTTwzZXyEZw.roa Signing time: Mon 10 Feb 2025 13:52:53 +0000 ROA not before: Mon 10 Feb 2025 13:52:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=27CB5153865A355F0D16E1ED9934F0CD95F2119C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:32:6e:ed:bb:21:79:81:e7:fc:39:98:37: 2f:17:40:ab:c1:d9:c3:79:f7:df:66:10:f7:b5:a4: 01:79:80:c5:98:38:e8:e7:e7:d4:a3:36:19:2b:50: 5e:fa:fd:b4:38:e5:42:b4:0b:1b:2d:7e:a5:e2:81: fe:db:fb:b1:54:fd:45:93:20:4f:e2:b7:c6:a2:9b: 6c:3a:a0:c9:f2:39:b4:2e:84:a6:b5:69:fe:52:1a: e3:bd:40:04:f5:1e:7a:af:fe:2f:8d:f9:5b:03:51: 2f:1f:30:1f:d7:a3:58:a6:77:96:95:00:e7:3d:ff: df:3b:e1:da:8d:5d:4b:da:b5:ff:fe:ed:5a:0e:76: 84:a0:3e:c2:c4:bb:61:f1:d3:31:c5:68:e0:e7:36: cf:d7:86:22:0a:27:76:cb:d7:3c:cf:7d:c4:b7:84: a6:b1:0a:d5:ed:23:d7:3e:8d:e9:4e:a2:27:2e:72: 40:c0:62:65:cf:1d:c7:da:e5:27:53:2b:6a:d9:5a: ac:ec:78:21:c0:55:28:90:9a:08:62:b3:eb:40:fe: 83:ee:ae:e9:b1:a7:92:3d:c6:70:0a:26:69:f6:92: 38:8c:3a:e4:00:15:4d:5f:6a:2f:10:6e:bd:a8:f4: 24:5b:d0:06:37:f3:54:a6:fe:a8:97:f2:20:25:c5: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CB:51:53:86:5A:35:5F:0D:16:E1:ED:99:34:F0:CD:95:F2:11:9C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J8tRU4ZaNV8NFuHtmTTwzZXyEZw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.40.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:c9:e4:76:81:c0:ac:dd:f2:3f:fa:36:9c:81:14:73:a3:b6: 7d:87:f1:91:53:47:52:90:61:c3:4c:10:3e:18:f6:b3:98:b8: 2f:ed:82:f2:4d:45:42:8b:35:60:5e:b3:f9:36:47:ce:50:58: d8:2b:84:a6:eb:10:3f:5f:f7:a9:42:10:dd:0a:aa:8f:22:1f: 3f:f3:cc:c2:a0:8d:89:5d:62:47:44:7d:08:28:6a:83:fa:6f: 61:5c:ae:40:eb:56:1d:ac:90:36:3e:aa:11:28:4a:4f:b3:bc: 6c:a2:53:87:aa:a5:ed:56:71:22:97:27:e9:52:7e:23:54:f8: 87:b7:3c:9f:06:42:2b:49:32:9e:10:06:4f:8e:85:f3:ed:53: f9:57:4d:9b:16:c8:fb:91:e6:d3:e2:7e:f0:e5:c3:a7:23:08: c9:6c:e3:81:51:77:d3:ae:c0:ac:77:6c:4f:c9:65:f0:70:2c: 47:13:e4:75:7e:dc:a8:e5:46:de:85:5c:13:91:05:f8:11:6d: 5d:17:36:0d:fc:fb:c4:a4:f5:60:6b:f0:7b:fc:8a:6b:ae:67: 78:9f:10:d2:b3:6e:8f:90:f1:55:12:a7:3b:f8:7d:2f:35:8b: 86:78:ef:5d:81:8b:b0:28:87:29:40:1e:98:7c:76:90:91:4e: e6:30:28:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3Q0I1MTUzODY1QTM1 NUYwRDE2RTFFRDk5MzRGMENEOTVGMjExOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCd6TJu7bsheYHn/DmYNy8XQKvB2cN5999mEPe1pAF5gMWYOOjn 59SjNhkrUF76/bQ45UK0CxstfqXigf7b+7FU/UWTIE/it8aim2w6oMnyObQuhKa1 af5SGuO9QAT1Hnqv/i+N+VsDUS8fMB/Xo1imd5aVAOc9/9874dqNXUvatf/+7VoO doSgPsLEu2Hx0zHFaODnNs/XhiIKJ3bL1zzPfcS3hKaxCtXtI9c+jelOoicuckDA YmXPHcfa5SdTK2rZWqzseCHAVSiQmghis+tA/oPurumxp5I9xnAKJmn2kjiMOuQA FU1fai8Qbr2o9CRb0AY381Sm/qiX8iAlxdyPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJ8tRU4ZaNV8NFuHtmTTwzZXyEZwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0o4dFJVNFphTlY4TkZ1SHRt VFR3elpYeUVady5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wSgwDQYJKoZIhvcNAQELBQADggEBAEzJ5HaBwKzd8j/6NpyBFHOjtn2H8ZFTR1KQ YcNMED4Y9rOYuC/tgvJNRUKLNWBes/k2R85QWNgrhKbrED9f96lCEN0Kqo8iHz/z zMKgjYldYkdEfQgoaoP6b2FcrkDrVh2skDY+qhEoSk+zvGyiU4eqpe1WcSKXJ+lS fiNU+Ie3PJ8GQitJMp4QBk+OhfPtU/lXTZsWyPuR5tPifvDlw6cjCMls44FRd9Ou wKx3bE/JZfBwLEcT5HV+3KjlRt6FXBORBfgRbV0XNg38+8Sk9WBr8Hv8imuuZ3if ENKzbo+Q8VUSpzv4fS81i4Z4712Bi7AohylAHph8dpCRTuYwKCQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:10 2025 by rpki-client