$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QI12fECoNyKNrT5x5523Pct_yOI.roa File: QI12fECoNyKNrT5x5523Pct_yOI.roa (raw, json) Hash identifier: KB3XazsttUrQv4InIJVmkd6Vx926Ox3krhJ0if7G7ms= Subject key identifier: 40:8D:76:7C:40:A8:37:22:8D:AD:3E:71:E7:9D:B7:3D:CB:7F:C8:E2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3403 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QI12fECoNyKNrT5x5523Pct_yOI.roa Signing time: Mon 10 Feb 2025 13:51:59 +0000 ROA not before: Mon 10 Feb 2025 13:51:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 2407:4d00:ff03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13315 (0x3403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=408D767C40A837228DAD3E71E79DB73DCB7FC8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:54:f1:e3:f4:b6:7f:36:a3:1a:d3:05:dd: e6:72:2d:eb:b2:14:d1:64:f8:cd:2e:19:0a:61:1b: da:5f:db:68:c7:6c:21:09:43:9a:72:5e:86:bb:42: b8:63:21:3a:8e:f8:49:a7:d5:5b:89:e8:67:5c:5c: c2:48:0e:1f:05:f1:41:3c:d4:7a:3b:8c:58:32:d1: d4:3f:a5:ee:24:23:d3:32:49:94:1e:89:09:1a:3d: 98:90:89:45:3b:dc:10:6e:54:24:82:e2:33:5f:b9: c0:0c:9f:af:9e:ca:36:f4:df:23:36:59:72:9a:4e: 34:b7:60:46:5e:27:70:64:ce:20:3c:5d:24:9c:da: 7a:3b:ab:33:da:a9:b2:36:07:bf:6a:bd:63:36:73: d4:6d:54:a1:f5:40:46:cc:2e:a0:6e:9d:4e:10:e3: 0b:f0:bf:f0:d9:0a:46:c5:8c:74:4e:bb:d2:35:a8: 99:ba:cc:78:a1:95:13:5f:68:5b:6e:19:ec:35:8e: 26:10:80:69:21:a1:d7:19:ad:7c:ba:4d:ec:f3:76: b4:27:ab:61:63:86:af:39:42:c5:d6:70:24:9a:0b: da:b7:99:30:a8:dc:dc:c5:90:4a:e9:3c:0d:05:66: 45:09:e6:f7:a3:5a:e1:82:d2:42:df:9c:59:62:b6: 07:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8D:76:7C:40:A8:37:22:8D:AD:3E:71:E7:9D:B7:3D:CB:7F:C8:E2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QI12fECoNyKNrT5x5523Pct_yOI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff03::/48 Signature Algorithm: sha256WithRSAEncryption a8:e1:c0:74:13:43:ad:18:33:f0:5e:dd:b8:63:22:fa:55:8b: 05:2c:27:df:a3:f8:d3:b9:68:38:f4:10:95:7e:92:29:cf:da: bb:21:e0:75:5d:b6:ff:8c:32:c3:20:3a:b3:de:b3:8d:28:b0: b5:16:bd:0a:74:9d:92:f6:f8:55:47:35:3d:01:fb:55:f1:5a: b6:41:5d:fb:cf:c7:ee:f5:93:2b:87:e8:28:d2:ad:4e:b0:c1: 23:45:c0:b6:aa:f6:21:c1:9b:34:cb:7f:fd:ce:5d:a5:ec:dc: f9:c1:c3:aa:e3:ee:e6:d2:e4:c6:23:27:7e:01:36:d6:c0:9c: 1d:16:65:48:f9:e9:46:46:91:96:44:0e:3a:58:53:0c:6f:37: 07:20:2f:87:dc:bd:4e:15:ed:38:5d:f2:39:aa:73:6a:35:a9: 04:b6:01:84:4a:10:f9:fe:6a:0f:db:89:4f:6e:83:45:4c:61: 13:c4:9b:4c:58:58:fb:0e:c4:bb:d4:cc:ff:15:10:08:ea:3a: 35:3a:17:12:aa:63:f3:2a:bd:89:18:cb:dc:e9:8d:a7:e8:65: ad:78:bb:ec:eb:ba:ab:5b:8c:8b:e9:f2:62:69:31:7d:a7:fb: 85:7f:cb:8f:5f:ff:00:5b:9f:fa:12:77:0a:47:c4:89:d4:8f: be:a3:64:72 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICNAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwOEQ3NjdDNDBBODM3 MjI4REFEM0U3MUU3OURCNzNEQ0I3RkM4RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGZ1Tx4/S2fzajGtMF3eZyLeuyFNFk+M0uGQphG9pf22jHbCEJ Q5pyXoa7QrhjITqO+Emn1VuJ6GdcXMJIDh8F8UE81Ho7jFgy0dQ/pe4kI9MySZQe iQkaPZiQiUU73BBuVCSC4jNfucAMn6+eyjb03yM2WXKaTjS3YEZeJ3BkziA8XSSc 2no7qzPaqbI2B79qvWM2c9RtVKH1QEbMLqBunU4Q4wvwv/DZCkbFjHROu9I1qJm6 zHihlRNfaFtuGew1jiYQgGkhodcZrXy6TezzdrQnq2Fjhq85QsXWcCSaC9q3mTCo 3NzFkErpPA0FZkUJ5vejWuGC0kLfnFlitgfvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUQI12fECoNyKNrT5x5523Pct/yOIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FJMTJmRUNvTnlLTnJUNXg1 NTIzUGN0X3lPSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wMwDQYJKoZIhvcNAQELBQADggEBAKjhwHQTQ60YM/Be3bhjIvpViwUsJ9+j +NO5aDj0EJV+kinP2rsh4HVdtv+MMsMgOrPes40osLUWvQp0nZL2+FVHNT0B+1Xx WrZBXfvPx+71kyuH6CjSrU6wwSNFwLaq9iHBmzTLf/3OXaXs3PnBw6rj7ubS5MYj J34BNtbAnB0WZUj56UZGkZZEDjpYUwxvNwcgL4fcvU4V7Thd8jmqc2o1qQS2AYRK EPn+ag/biU9ug0VMYRPEm0xYWPsOxLvUzP8VEAjqOjU6FxKqY/MqvYkYy9zpjafo Za14u+zruqtbjIvp8mJpMX2n+4V/y49f/wBbn/oSdwpHxInUj76jZHI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:02 2025 by rpki-client