$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFPr5f4hhzajRsxpKmSy5jGitwo.roa File: OFPr5f4hhzajRsxpKmSy5jGitwo.roa (raw, json) Hash identifier: vpVZ+uEVAgbVjxmgvzklDON6zCEQ0G9TuGfhoY1IPT0= Subject key identifier: 38:53:EB:E5:FE:21:87:36:A3:46:CC:69:2A:64:B2:E6:31:A2:B7:0A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3451 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFPr5f4hhzajRsxpKmSy5jGitwo.roa Signing time: Mon 10 Feb 2025 13:52:16 +0000 ROA not before: Mon 10 Feb 2025 13:52:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13393 (0x3451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3853EBE5FE218736A346CC692A64B2E631A2B70A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:19:5a:8e:cf:b7:b0:d8:fd:48:2f:c8:1e: 69:0d:87:cc:54:99:9f:9b:3d:99:b5:8a:0e:ea:5f: 2e:39:33:f1:74:18:eb:9b:2a:cf:3b:70:16:cb:57: 40:ec:17:77:eb:24:c2:5f:e6:e0:65:a3:14:af:08: bf:c9:bc:ff:e6:c5:4d:d9:71:5e:d6:c8:f4:b8:f7: 63:7e:4a:85:c9:11:3f:c6:98:a1:08:93:af:bf:fc: b8:85:1b:4f:06:ad:39:a0:e0:d9:1d:c6:a1:6a:af: a3:e1:82:fd:87:5d:83:f4:8b:15:d3:fc:50:b9:c6: 2d:f5:6f:29:97:07:d2:fc:11:bc:35:c8:cb:80:a8: 6a:7c:0b:5b:21:d6:4f:4b:f0:2d:10:8c:cc:e5:16: cd:07:25:16:16:cd:e0:5d:76:47:31:79:da:7e:52: eb:7d:fe:e5:2f:79:c9:e9:ec:14:d3:ee:ed:ed:db: bf:39:fc:76:14:d5:af:57:22:f2:e7:f6:a8:32:3e: 30:70:b3:42:cc:98:a6:e3:59:c5:e3:bd:47:94:a2: 53:58:df:0f:7c:7f:70:e7:f2:84:87:05:27:89:f4: f5:2a:9a:e4:77:63:63:5f:9f:2e:89:1d:10:14:a1: 1c:89:1e:de:55:b6:81:fc:01:bb:35:cc:0b:98:38: 5f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:53:EB:E5:FE:21:87:36:A3:46:CC:69:2A:64:B2:E6:31:A2:B7:0A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFPr5f4hhzajRsxpKmSy5jGitwo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.248.0/22 Signature Algorithm: sha256WithRSAEncryption 05:25:a1:78:83:46:78:a0:b5:34:75:b2:e5:ba:e0:c1:1e:4c: 6e:cb:85:1d:dc:9c:0d:d2:96:4e:03:e5:6d:6c:c2:74:a4:90: 9d:c2:f4:1f:04:be:08:e7:00:06:83:26:07:16:27:57:ff:b8: ce:1a:d5:00:a1:4d:3f:e0:64:f5:de:8b:7a:6e:b6:cf:ce:3d: 8c:51:8c:a1:60:52:d6:7d:ef:18:9b:b4:37:16:a7:a0:01:1a: bd:a9:66:56:00:03:d2:3a:68:d1:78:6f:02:eb:57:d4:f8:78: e5:c5:ab:79:eb:56:80:92:51:ae:16:b7:ba:4d:78:ff:63:3d: 16:6d:6b:78:0b:d8:aa:bb:0e:c2:85:64:ee:d3:79:7a:4e:36: 2c:28:45:42:80:0d:5d:a7:4a:c0:f9:a1:98:00:5c:4a:ed:dc: fb:02:27:fe:9f:fa:aa:af:1d:d3:3a:c9:5a:6e:dd:59:0b:e6: b6:4b:d1:07:2b:35:02:11:08:b2:8d:eb:e0:ac:ea:2c:e7:92: a6:50:1b:10:db:93:3b:41:a8:32:9b:4d:0c:7e:71:0a:27:05: ca:d9:55:4b:c2:b3:c8:b7:33:7e:57:89:1e:9d:82:2f:31:17: 2e:19:b1:57:a4:cb:25:b5:eb:c1:e2:b4:5e:25:7d:b3:6c:b8: b9:eb:9f:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM4NTNFQkU1RkUyMTg3 MzZBMzQ2Q0M2OTJBNjRCMkU2MzFBMkI3MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVihlajs+3sNj9SC/IHmkNh8xUmZ+bPZm1ig7qXy45M/F0GOub Ks87cBbLV0DsF3frJMJf5uBloxSvCL/JvP/mxU3ZcV7WyPS492N+SoXJET/GmKEI k6+//LiFG08GrTmg4NkdxqFqr6Phgv2HXYP0ixXT/FC5xi31bymXB9L8Ebw1yMuA qGp8C1sh1k9L8C0QjMzlFs0HJRYWzeBddkcxedp+Uut9/uUvecnp7BTT7u3t2785 /HYU1a9XIvLn9qgyPjBws0LMmKbjWcXjvUeUolNY3w98f3Dn8oSHBSeJ9PUqmuR3 Y2Nfny6JHRAUoRyJHt5VtoH8Abs1zAuYOF8NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOFPr5f4hhzajRsxpKmSy5jGitwowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09GUHI1ZjRoaHphalJzeHBL bVN5NWpHaXR3by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6PgwDQYJKoZIhvcNAQELBQADggEBAAUloXiDRnigtTR1suW64MEeTG7LhR3cnA3S lk4D5W1swnSkkJ3C9B8EvgjnAAaDJgcWJ1f/uM4a1QChTT/gZPXei3puts/OPYxR jKFgUtZ97xibtDcWp6ABGr2pZlYAA9I6aNF4bwLrV9T4eOXFq3nrVoCSUa4Wt7pN eP9jPRZta3gL2Kq7DsKFZO7TeXpONiwoRUKADV2nSsD5oZgAXErt3PsCJ/6f+qqv HdM6yVpu3VkL5rZL0QcrNQIRCLKN6+Cs6iznkqZQGxDbkztBqDKbTQx+cQonBcrZ VUvCs8i3M35XiR6dgi8xFy4ZsVekyyW168HitF4lfbNsuLnrn7A= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:43 2025 by rpki-client