$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KivCzBTcsZgqoTr9qOWpVse9kI0.roa File: KivCzBTcsZgqoTr9qOWpVse9kI0.roa (raw, json) Hash identifier: +nd2nOIVPc8xeeAvul8NZILjXuIJgWLcEP0/JXsdwWI= Subject key identifier: 2A:2B:C2:CC:14:DC:B1:98:2A:A1:3A:FD:A8:E5:A9:56:C7:BD:90:8D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34F0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KivCzBTcsZgqoTr9qOWpVse9kI0.roa Signing time: Mon 10 Feb 2025 13:52:50 +0000 ROA not before: Mon 10 Feb 2025 13:52:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2A2BC2CC14DCB1982AA13AFDA8E5A956C7BD908D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:b5:32:60:52:a9:c9:a9:b7:39:97:36:d6: e8:04:cd:0d:8c:83:5e:d6:0a:96:73:1e:76:5b:b5: 23:0d:96:cd:d8:36:2e:8b:e0:50:82:a0:a5:25:3c: 83:04:2e:29:ca:39:ae:e4:09:6c:3b:84:c8:06:aa: 3e:d9:c3:4f:75:b5:2b:d1:6b:a1:20:a4:a2:e7:87: 03:1c:f7:57:f8:a3:1d:aa:a6:51:8d:40:49:46:e8: ac:73:90:1e:ee:f7:69:cb:08:a3:a6:d8:3a:ce:2d: c6:32:6c:d2:25:04:ee:ba:ea:42:d1:24:5e:b7:16: 06:d6:6a:31:b1:34:64:8f:7a:e1:da:9a:33:7c:41: 3d:a8:ba:28:55:49:99:10:34:a6:b5:b8:b2:82:ba: 05:78:fd:36:7d:f7:09:8e:cd:5c:ae:f8:8f:f3:f7: 81:ee:16:3d:1e:1f:db:6c:83:ec:fb:1d:a7:ec:47: 7f:c5:6c:7c:4f:af:c6:76:68:03:e5:d7:41:5e:05: 95:f3:ed:d5:7f:f3:31:25:92:20:43:1b:c0:cd:21: e5:ef:6c:e8:80:ac:c1:7d:3b:0c:83:f9:89:67:fe: b8:62:5e:f0:9d:e9:0a:ee:43:84:f2:c9:45:6c:05: 11:e2:5f:21:26:b1:9a:5d:3c:2c:59:21:7c:09:0a: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2B:C2:CC:14:DC:B1:98:2A:A1:3A:FD:A8:E5:A9:56:C7:BD:90:8D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KivCzBTcsZgqoTr9qOWpVse9kI0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.88.0/21 Signature Algorithm: sha256WithRSAEncryption 42:d2:bb:60:fe:48:e9:43:bc:5c:95:11:bd:13:d8:ca:6a:5e: 0a:9c:d7:d9:7f:fe:ff:da:1c:80:8d:a6:0c:36:6a:8d:64:a5: f8:3c:d8:a6:dc:2f:b3:bc:c7:ff:c0:88:c7:8b:7f:cd:aa:67: fd:38:fe:ee:8c:9a:ac:ed:e6:b6:5e:8e:fe:06:4e:ef:d3:ec: 4d:db:85:23:9d:f9:79:1a:99:f5:27:f0:89:77:82:42:50:65: f6:57:4e:49:18:20:e1:e1:8b:02:4c:6f:56:a0:2c:ac:c2:2d: 76:19:a9:c3:6f:3d:8d:cf:aa:50:76:4d:39:77:bf:cd:ae:7b: 4d:81:d5:81:35:ed:b7:7f:44:96:39:cf:3c:1a:0e:1f:90:a7: 37:a8:77:71:e0:f1:d1:98:b6:63:4a:80:62:4a:c1:40:0c:cd: 3d:86:2c:18:33:9d:c5:18:7c:dc:64:90:49:18:ca:7f:33:47: a4:02:9c:2a:a5:0a:31:e7:30:c3:1e:9a:76:f1:8c:db:0f:ae: d2:ca:f3:37:c4:bd:f1:e1:da:da:b6:53:d0:1c:92:d9:4f:24: 18:4e:8a:ce:d9:4b:d0:bc:19:f7:d4:da:cb:12:80:74:e8:99: 07:d1:6e:67:a9:85:e9:dc:2c:60:8f:e4:2a:ad:74:be:db:01: 66:fe:50:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBMkJDMkNDMTREQ0Ix OTgyQUExM0FGREE4RTVBOTU2QzdCRDkwOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGjrUyYFKpyam3OZc21ugEzQ2Mg17WCpZzHnZbtSMNls3YNi6L 4FCCoKUlPIMELinKOa7kCWw7hMgGqj7Zw091tSvRa6EgpKLnhwMc91f4ox2qplGN QElG6KxzkB7u92nLCKOm2DrOLcYybNIlBO666kLRJF63FgbWajGxNGSPeuHamjN8 QT2ouihVSZkQNKa1uLKCugV4/TZ99wmOzVyu+I/z94HuFj0eH9tsg+z7HafsR3/F bHxPr8Z2aAPl10FeBZXz7dV/8zElkiBDG8DNIeXvbOiArMF9OwyD+Yln/rhiXvCd 6QruQ4TyyUVsBRHiXyEmsZpdPCxZIXwJCgAdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKivCzBTcsZgqoTr9qOWpVse9kI0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tpdkN6QlRjc1pncW9Ucjlx T1dwVnNlOWtJMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6VgwDQYJKoZIhvcNAQELBQADggEBAELSu2D+SOlDvFyVEb0T2MpqXgqc19l//v/a HICNpgw2ao1kpfg82KbcL7O8x//AiMeLf82qZ/04/u6Mmqzt5rZejv4GTu/T7E3b hSOd+XkamfUn8Il3gkJQZfZXTkkYIOHhiwJMb1agLKzCLXYZqcNvPY3PqlB2TTl3 v82ue02B1YE17bd/RJY5zzwaDh+Qpzeod3Hg8dGYtmNKgGJKwUAMzT2GLBgzncUY fNxkkEkYyn8zR6QCnCqlCjHnMMMemnbxjNsPrtLK8zfEvfHh2tq2U9AcktlPJBhO is7ZS9C8GffU2ssSgHTomQfRbmephencLGCP5CqtdL7bAWb+UG0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:10 2025 by rpki-client