$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O0UT3nqm3f6V_tpVvBJvazv6Dtc.roa File: O0UT3nqm3f6V_tpVvBJvazv6Dtc.roa (raw, json) Hash identifier: VwsekJU94WBl9F9s4xfBRn1pJcUfQS/8dF3vAn1iA2c= Subject key identifier: 3B:45:13:DE:7A:A6:DD:FE:95:FE:DA:55:BC:12:6F:6B:3B:FA:0E:D7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 361D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O0UT3nqm3f6V_tpVvBJvazv6Dtc.roa Signing time: Mon 10 Feb 2025 13:53:59 +0000 ROA not before: Mon 10 Feb 2025 13:53:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.144.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13853 (0x361d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3B4513DE7AA6DDFE95FEDA55BC126F6B3BFA0ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:27:48:f2:68:8c:28:fe:42:72:1d:6f:ed:d4: 01:81:56:9c:56:84:33:0f:02:20:33:57:40:0c:c1: 4e:23:c0:8a:44:03:ee:4a:4c:71:71:55:b5:8b:ce: 1c:a9:ac:05:4e:18:16:55:be:25:ff:11:8d:11:b2: 5a:fb:eb:f7:12:63:82:71:5c:c8:99:89:e1:b8:af: 2f:3f:5c:b8:be:b1:a6:3e:35:9d:f0:c6:bc:a2:18: 81:71:85:c6:d6:36:42:ba:e0:e6:f9:4b:50:0d:a0: 18:89:30:92:34:92:3e:f3:12:b6:5b:31:70:8a:df: 16:04:da:ad:4e:16:38:5f:30:94:45:e7:de:81:33: 49:da:30:fa:31:d4:70:38:3f:55:65:c8:3e:0d:7b: e1:4f:31:ab:c6:24:dc:ac:b3:c7:23:2c:79:4d:09: 30:49:4c:d6:3a:ee:ed:50:24:cf:a1:64:02:a5:ff: 9f:f0:2b:93:a6:b6:54:8a:e5:43:6c:ce:51:9a:ca: 5e:58:d2:fc:0a:77:75:1a:8e:bc:c9:2a:d5:68:0c: 37:bb:33:d6:61:14:49:6c:34:a9:c1:57:36:e8:18: c0:f8:d5:95:67:40:2f:e4:ef:bd:51:13:c6:5b:28: e5:54:b9:1b:ba:44:35:1b:8c:ce:a9:c2:41:d6:e2: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:45:13:DE:7A:A6:DD:FE:95:FE:DA:55:BC:12:6F:6B:3B:FA:0E:D7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O0UT3nqm3f6V_tpVvBJvazv6Dtc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.128/26 Signature Algorithm: sha256WithRSAEncryption 09:7d:47:90:0a:8e:76:50:f4:61:b1:57:96:13:83:82:e4:8c: 48:89:a6:a7:21:9b:59:a0:c0:04:3e:72:60:19:c3:ee:e0:6e: 94:4e:15:73:74:45:8f:0e:1a:f1:cf:02:88:82:8c:7b:80:9f: 91:72:0e:8a:e4:64:e7:b6:c4:a0:87:56:a3:16:e0:ed:97:b0: 89:b2:99:f2:b2:ee:6f:9a:e1:14:03:8d:fa:61:08:9b:ae:23: 78:b7:ab:7d:9f:9a:8b:bb:7d:62:6a:e7:b4:74:3b:14:04:1f: 08:12:05:35:7f:d8:e7:fa:2a:1d:eb:f3:09:1a:b5:92:25:be: 3b:01:bc:fe:e1:0c:54:b4:c2:57:95:c6:30:18:41:f6:e4:24: bc:82:f5:de:3d:9c:82:43:67:b6:2d:2a:57:3d:c9:16:63:f0: 7d:6d:26:a6:a6:99:f8:16:8e:00:06:f4:f0:27:f9:5a:0d:f8: 88:ce:62:77:2c:ee:ac:07:e7:5f:55:49:44:e9:dd:93:2f:bd: ef:a1:98:eb:22:65:96:55:44:3e:eb:64:4f:cf:1b:5d:4e:fd: 53:2b:27:31:1b:d9:06:49:70:ea:5b:cf:f4:ad:e8:c2:bd:ad: 88:29:c7:57:b7:e5:07:d3:af:fd:86:7c:ff:9a:b0:3b:47:f2: 84:af:bb:7e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCNDUxM0RFN0FBNkRE RkU5NUZFREE1NUJDMTI2RjZCM0JGQTBFRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfJ0jyaIwo/kJyHW/t1AGBVpxWhDMPAiAzV0AMwU4jwIpEA+5K THFxVbWLzhyprAVOGBZVviX/EY0Rslr76/cSY4JxXMiZieG4ry8/XLi+saY+NZ3w xryiGIFxhcbWNkK64Ob5S1ANoBiJMJI0kj7zErZbMXCK3xYE2q1OFjhfMJRF596B M0naMPox1HA4P1VlyD4Ne+FPMavGJNyss8cjLHlNCTBJTNY67u1QJM+hZAKl/5/w K5OmtlSK5UNszlGayl5Y0vwKd3UajrzJKtVoDDe7M9ZhFElsNKnBVzboGMD41ZVn QC/k771RE8ZbKOVUuRu6RDUbjM6pwkHW4v35AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUO0UT3nqm3f6V/tpVvBJvazv6DtcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL08wVVQzbnFtM2Y2Vl90cFZ2 Qkp2YXp2NkR0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wJCAMA0GCSqGSIb3DQEBCwUAA4IBAQAJfUeQCo52UPRhsVeWE4OC5IxIiaanIZtZ oMAEPnJgGcPu4G6UThVzdEWPDhrxzwKIgox7gJ+Rcg6K5GTntsSgh1ajFuDtl7CJ spnysu5vmuEUA436YQibriN4t6t9n5qLu31iaue0dDsUBB8IEgU1f9jn+iod6/MJ GrWSJb47Abz+4QxUtMJXlcYwGEH25CS8gvXePZyCQ2e2LSpXPckWY/B9bSamppn4 Fo4ABvTwJ/laDfiIzmJ3LO6sB+dfVUlE6d2TL73voZjrImWWVUQ+62RPzxtdTv1T KycxG9kGSXDqW8/0rejCva2IKcdXt+UH06/9hnz/mrA7R/KEr7t+ -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:13 2025 by rpki-client