$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PSDKqFoJX4tPMNndT89MARQAH6E.roa File: PSDKqFoJX4tPMNndT89MARQAH6E.roa (raw, json) Hash identifier: YAmaLCFmZ5gLgR2HfhZ+nvdDZ8I8LyBhuA4Bls//Ysw= Subject key identifier: 3D:20:CA:A8:5A:09:5F:8B:4F:30:D9:DD:4F:CF:4C:01:14:00:1F:A1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 343F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PSDKqFoJX4tPMNndT89MARQAH6E.roa Signing time: Mon 10 Feb 2025 13:52:12 +0000 ROA not before: Mon 10 Feb 2025 13:52:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13375 (0x343f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3D20CAA85A095F8B4F30D9DD4FCF4C0114001FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:10:03:c8:68:3d:b1:d9:4e:13:41:d0:08: 4e:c2:ce:17:c1:0f:53:82:6e:34:60:10:c2:51:d9: 03:66:22:32:48:5d:73:eb:1a:c4:68:11:42:f3:89: 4a:bf:ec:05:02:36:09:df:9e:2f:10:24:b9:7a:e7: 42:f8:df:f2:ad:57:8f:27:ab:35:67:a5:be:3f:cd: 1e:9f:18:6e:b6:93:cb:a7:fa:6b:c1:a6:33:d3:87: 45:78:fe:3d:dc:46:22:69:f9:2c:80:be:60:3f:aa: 69:e4:89:9e:d7:40:67:17:66:7a:9a:9e:7d:05:ab: 43:60:06:4c:30:65:f9:f3:d6:18:cf:a2:e7:b2:d3: 55:2a:5d:06:83:bf:8e:fb:af:c1:0f:cc:39:a1:b5: b0:00:a6:7f:1b:7b:21:5a:2a:76:51:08:7e:e8:8c: 8e:a4:3d:19:75:eb:18:cd:cf:fc:8c:56:bf:e1:da: 90:d2:80:41:84:01:8b:1b:1f:0e:df:c0:af:34:fe: 26:65:d0:33:67:a6:da:6d:d7:c2:c1:9c:e3:6a:5e: be:b8:fd:dc:c8:53:5b:db:9d:49:b7:76:a6:53:a1: 65:22:d2:ac:21:0b:60:94:3e:c4:1a:78:16:f9:9a: 9c:76:97:c4:38:a4:7f:89:00:fc:77:7a:a1:45:95: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:20:CA:A8:5A:09:5F:8B:4F:30:D9:DD:4F:CF:4C:01:14:00:1F:A1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PSDKqFoJX4tPMNndT89MARQAH6E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.188.0/22 Signature Algorithm: sha256WithRSAEncryption 85:4f:0b:32:f1:95:5d:e2:15:65:2e:28:18:2d:be:5c:31:2b: bd:54:1b:48:9f:f7:1f:cd:db:10:51:29:15:02:77:a8:aa:0e: 90:74:a8:ee:d2:d9:3c:72:1f:38:f7:99:b8:d4:80:3c:f4:73: 88:80:c5:b5:ca:fa:33:1b:a2:18:74:2c:22:a9:e3:d4:77:66: bd:47:c8:e8:dd:45:69:22:45:e3:b9:ae:5f:02:3a:b4:78:bf: ae:8d:8f:91:f4:20:cc:72:f4:a1:86:a9:8b:c5:69:50:cb:6b: b7:68:f6:dc:1e:f6:c1:b7:af:4b:79:44:e4:9a:e6:54:1b:8e: 57:36:51:8b:f5:29:ba:fc:89:f3:e0:f7:b1:64:06:4f:46:3e: 5c:a7:b5:92:3d:02:3c:7e:d5:a7:10:56:24:cc:32:28:c4:ad: ad:78:9a:ab:49:d0:7f:57:2a:63:82:f2:8e:a9:fa:bf:3b:03: 80:c7:b1:15:a4:17:7a:a2:6b:e3:7c:ea:8b:37:bd:50:72:11: 5c:35:79:a2:09:64:90:0f:6c:5c:32:61:06:bd:39:cb:6f:bc: 5c:a9:45:4c:49:ba:9b:16:d7:bf:f9:93:3a:4e:d8:b5:9a:b8: f9:b7:6e:e6:5b:eb:38:a6:18:07:54:b8:0d:cb:70:91:c0:ea: 8b:71:46:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICND8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNEMjBDQUE4NUEwOTVG OEI0RjMwRDlERDRGQ0Y0QzAxMTQwMDFGQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4pxADyGg9sdlOE0HQCE7CzhfBD1OCbjRgEMJR2QNmIjJIXXPr GsRoEULziUq/7AUCNgnfni8QJLl650L43/KtV48nqzVnpb4/zR6fGG62k8un+mvB pjPTh0V4/j3cRiJp+SyAvmA/qmnkiZ7XQGcXZnqann0Fq0NgBkwwZfnz1hjPouey 01UqXQaDv477r8EPzDmhtbAApn8beyFaKnZRCH7ojI6kPRl16xjNz/yMVr/h2pDS gEGEAYsbHw7fwK80/iZl0DNnptpt18LBnONqXr64/dzIU1vbnUm3dqZToWUi0qwh C2CUPsQaeBb5mpx2l8Q4pH+JAPx3eqFFleCTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPSDKqFoJX4tPMNndT89MARQAH6EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BTREtxRm9KWDR0UE1ObmRU ODlNQVJRQUg2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6bwwDQYJKoZIhvcNAQELBQADggEBAIVPCzLxlV3iFWUuKBgtvlwxK71UG0if9x/N 2xBRKRUCd6iqDpB0qO7S2TxyHzj3mbjUgDz0c4iAxbXK+jMbohh0LCKp49R3Zr1H yOjdRWkiReO5rl8COrR4v66Nj5H0IMxy9KGGqYvFaVDLa7do9twe9sG3r0t5ROSa 5lQbjlc2UYv1Kbr8ifPg97FkBk9GPlyntZI9Ajx+1acQViTMMijEra14mqtJ0H9X KmOC8o6p+r87A4DHsRWkF3qia+N86os3vVByEVw1eaIJZJAPbFwyYQa9OctvvFyp RUxJupsW17/5kzpO2LWauPm3buZb6zimGAdUuA3LcJHA6otxRkg= -----END CERTIFICATE-----Generated at Wed Feb 19 21:59:53 2025 by rpki-client