$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K5yb1IonfDKc4vDKt3IywDA7ddY.roa File: K5yb1IonfDKc4vDKt3IywDA7ddY.roa (raw, json) Hash identifier: Fdy0TiFIDijNPYBRXAmvHSe+d2U/gNqaKOz3g1BRH70= Subject key identifier: 2B:9C:9B:D4:8A:27:7C:32:9C:E2:F0:CA:B7:72:32:C0:30:3B:75:D6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3577 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K5yb1IonfDKc4vDKt3IywDA7ddY.roa Signing time: Mon 10 Feb 2025 13:53:22 +0000 ROA not before: Mon 10 Feb 2025 13:53:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13687 (0x3577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2B9C9BD48A277C329CE2F0CAB77232C0303B75D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6f:24:64:50:a8:a0:db:87:5c:05:ca:d9:6a: b7:40:86:98:be:36:59:85:36:90:43:a9:7d:2b:47: 51:3e:2d:1b:b6:8c:55:4f:00:9f:ea:c4:94:77:c5: f1:bb:b4:c3:dc:3c:49:ef:31:6e:88:78:7e:dc:d8: c3:38:6e:84:19:b3:b1:eb:76:89:61:a2:80:3f:62: f2:32:0e:b1:e7:a6:37:d4:81:da:5d:e2:32:f7:37: 8e:d6:37:85:a9:38:4d:68:57:4a:85:a3:ea:b7:c2: 76:97:65:05:3f:36:29:f3:b7:dc:f8:52:36:39:42: 74:7a:ae:d7:d0:06:e5:73:8b:0d:f4:d1:42:40:fc: c8:36:98:13:b2:4c:53:76:43:bb:e4:4a:f7:f8:71: 56:66:0e:4d:cd:79:05:08:c4:51:a0:4f:7b:e4:60: 31:3e:2d:f5:ed:ec:c7:ae:05:b0:a6:b7:4f:a6:5b: f2:80:6f:0f:82:ec:81:7b:dc:62:70:e0:05:c6:50: b9:f6:a9:f2:33:21:1b:d3:e2:22:e8:9b:33:8b:d6: 8b:2c:65:ff:e9:05:5c:fd:49:29:f6:d1:f0:14:4e: 3c:47:b5:5c:2b:58:cb:15:17:a3:48:9a:04:54:85: 79:9a:b0:34:d0:93:24:fb:9a:6c:f4:6a:04:e6:5a: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9C:9B:D4:8A:27:7C:32:9C:E2:F0:CA:B7:72:32:C0:30:3B:75:D6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K5yb1IonfDKc4vDKt3IywDA7ddY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.20.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:09:35:36:af:94:a8:29:e7:6a:2a:fc:e7:9d:43:9b:95:ee: c0:dd:62:b3:35:fd:93:d6:d5:2e:ba:46:0b:34:c1:99:ae:13: e9:bf:33:8f:4c:9d:83:69:9e:bc:7f:ce:38:3d:72:aa:3e:b0: 4b:ae:70:a7:b1:81:6f:9a:59:9f:8e:a4:a5:88:4b:a7:44:f3: 7c:37:c9:e0:1c:3a:7f:95:62:2c:c1:5f:f1:1d:22:cd:9b:67: 8a:b5:15:90:75:13:57:44:71:c0:47:9c:b9:4a:fc:8c:26:19: 18:7b:1d:e8:f6:28:33:ae:36:b3:1b:6a:63:b8:01:73:a0:88: 36:ba:ce:41:d4:8c:f3:2d:2c:1e:07:80:83:e7:d9:40:c2:a6: 32:55:a6:b3:71:b7:42:1d:d3:72:36:6a:7a:e1:42:c5:02:6f: 4b:79:ed:62:f8:a6:cf:64:58:58:ec:3c:aa:e8:f4:89:41:54: a8:08:68:7a:15:ef:d8:86:ae:4a:e5:76:a3:8b:5a:c4:64:33: 60:ed:86:6f:87:b9:43:bc:ff:35:62:70:00:55:cb:67:11:e8: 4e:b0:54:ab:03:78:37:f2:6f:9e:39:f8:14:49:a9:83:6f:9c: 1d:a3:0c:66:9f:ae:4c:55:49:a0:b9:c3:e5:f4:c7:c9:a6:f8: 48:f2:88:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJCOUM5QkQ0OEEyNzdD MzI5Q0UyRjBDQUI3NzIzMkMwMzAzQjc1RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsbyRkUKig24dcBcrZardAhpi+NlmFNpBDqX0rR1E+LRu2jFVP AJ/qxJR3xfG7tMPcPEnvMW6IeH7c2MM4boQZs7HrdolhooA/YvIyDrHnpjfUgdpd 4jL3N47WN4WpOE1oV0qFo+q3wnaXZQU/Ninzt9z4UjY5QnR6rtfQBuVziw300UJA /Mg2mBOyTFN2Q7vkSvf4cVZmDk3NeQUIxFGgT3vkYDE+LfXt7MeuBbCmt0+mW/KA bw+C7IF73GJw4AXGULn2qfIzIRvT4iLomzOL1ossZf/pBVz9SSn20fAUTjxHtVwr WMsVF6NImgRUhXmasDTQkyT7mmz0agTmWsj3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUK5yb1IonfDKc4vDKt3IywDA7ddYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0s1eWIxSW9uZkRLYzR2REt0 M0l5d0RBN2RkWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6BQwDQYJKoZIhvcNAQELBQADggEBAB4JNTavlKgp52oq/OedQ5uV7sDdYrM1/ZPW 1S66Rgs0wZmuE+m/M49MnYNpnrx/zjg9cqo+sEuucKexgW+aWZ+OpKWIS6dE83w3 yeAcOn+VYizBX/EdIs2bZ4q1FZB1E1dEccBHnLlK/IwmGRh7Hej2KDOuNrMbamO4 AXOgiDa6zkHUjPMtLB4HgIPn2UDCpjJVprNxt0Id03I2anrhQsUCb0t57WL4ps9k WFjsPKro9IlBVKgIaHoV79iGrkrldqOLWsRkM2Dthm+HuUO8/zVicABVy2cR6E6w VKsDeDfyb545+BRJqYNvnB2jDGafrkxVSaC5w+X0x8mm+EjyiDQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:06 2025 by rpki-client