$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S3NyURb2hgBLOyA0r7BgKGMx8x8.roa File: S3NyURb2hgBLOyA0r7BgKGMx8x8.roa (raw, json) Hash identifier: HYYd935OZjyJne/MJIgYlnRt55RQTKNQL2Ybgdw4/rU= Subject key identifier: 4B:73:72:51:16:F6:86:00:4B:3B:20:34:AF:B0:60:28:63:31:F3:1F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3514 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S3NyURb2hgBLOyA0r7BgKGMx8x8.roa Signing time: Mon 10 Feb 2025 13:52:59 +0000 ROA not before: Mon 10 Feb 2025 13:52:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13588 (0x3514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4B73725116F686004B3B2034AFB060286331F31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:25:c5:6f:69:af:33:6f:22:98:7f:ea:62: b1:07:cd:d5:76:c1:c3:ea:87:25:0b:69:e5:42:60: ae:77:3e:bf:6a:62:e7:c9:08:8b:ae:7f:de:5c:42: cf:71:0b:b2:9c:c9:b6:2d:17:57:13:22:d7:d5:28: 53:2b:07:8d:5c:35:04:03:ff:09:a4:4e:9c:80:a6: 37:0b:11:e5:83:74:04:17:b0:5b:b5:a4:e5:03:1f: a4:ac:9e:34:56:a6:dd:16:f0:f8:10:75:a2:39:97: 6c:9d:a1:66:20:75:dd:d4:1f:7c:26:b5:f4:10:20: 85:34:68:a1:58:7a:5e:53:c3:03:1e:2b:77:a1:4d: 3a:30:86:dc:9c:32:6d:8d:c1:59:c3:fc:05:83:73: 8d:41:55:9d:b6:52:e0:31:2f:c9:b3:92:da:9a:c9: c3:3d:6c:26:98:3a:c4:d7:e8:db:9c:a4:9e:fa:08: fa:34:cb:98:f8:7b:7f:f3:c3:ff:77:3f:57:a5:cd: 9c:47:23:42:27:70:1c:a0:2b:55:16:b2:05:5b:13: 56:0b:f6:03:e9:72:de:1e:72:78:cb:d9:32:e6:fd: f7:0d:ce:e3:45:ff:e0:d5:41:e9:17:26:dd:9a:81: d6:c0:50:88:a3:3a:85:e1:6b:d1:02:fd:57:49:5e: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:73:72:51:16:F6:86:00:4B:3B:20:34:AF:B0:60:28:63:31:F3:1F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S3NyURb2hgBLOyA0r7BgKGMx8x8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.84.0/22 Signature Algorithm: sha256WithRSAEncryption b6:00:92:ed:42:c1:be:81:14:20:3c:ba:86:b3:57:5a:ca:6e: 19:18:a9:5e:d7:7c:e3:5f:b3:f3:e5:46:59:64:dc:16:2d:4a: fc:85:c2:95:ff:69:c0:28:f2:26:f3:ce:d0:12:c5:eb:25:56: a4:bc:9c:13:f9:af:06:a9:53:1b:05:05:db:86:3a:aa:48:f2: a6:9f:54:8d:04:f8:b6:1d:ef:a6:6b:e3:54:70:85:7a:9d:8c: c8:27:35:85:92:f7:e1:3c:5a:23:a1:2b:83:25:b4:e4:8e:2d: 8d:4b:f8:fc:4a:f1:3c:5a:70:bd:a1:e8:74:4c:3b:c4:6b:4c: b1:b9:82:71:91:1f:88:d6:a2:83:b7:1b:6e:e2:bd:67:05:9f: 75:c4:d8:0b:67:19:3a:11:b4:22:33:76:ed:3a:b1:f1:85:96: 53:cd:a5:d3:c4:a9:36:ca:ad:40:00:6e:db:3e:ca:f0:fe:94: e9:b8:4b:99:e8:48:6a:0c:22:d6:d4:3d:f6:5a:76:9e:9a:a2: 43:95:7a:86:4b:f7:c9:17:8d:08:99:c1:53:c2:34:64:7c:a5: 2f:16:f4:d2:f3:e7:32:e3:2f:89:c7:d5:da:9d:ad:fe:7c:1b: 5d:24:9f:45:28:24:07:97:ab:a5:22:2b:6e:26:f6:71:ad:f1: 6e:2e:ad:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCNzM3MjUxMTZGNjg2 MDA0QjNCMjAzNEFGQjA2MDI4NjMzMUYzMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCldyXFb2mvM28imH/qYrEHzdV2wcPqhyULaeVCYK53Pr9qYufJ CIuuf95cQs9xC7KcybYtF1cTItfVKFMrB41cNQQD/wmkTpyApjcLEeWDdAQXsFu1 pOUDH6SsnjRWpt0W8PgQdaI5l2ydoWYgdd3UH3wmtfQQIIU0aKFYel5TwwMeK3eh TTowhtycMm2NwVnD/AWDc41BVZ22UuAxL8mzktqaycM9bCaYOsTX6NucpJ76CPo0 y5j4e3/zw/93P1elzZxHI0IncBygK1UWsgVbE1YL9gPpct4ecnjL2TLm/fcNzuNF /+DVQekXJt2agdbAUIijOoXha9EC/VdJXgJ3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUS3NyURb2hgBLOyA0r7BgKGMx8x8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1MzTnlVUmIyaGdCTE95QTBy N0JnS0dNeDh4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6FQwDQYJKoZIhvcNAQELBQADggEBALYAku1Cwb6BFCA8uoazV1rKbhkYqV7XfONf s/PlRllk3BYtSvyFwpX/acAo8ibzztASxeslVqS8nBP5rwapUxsFBduGOqpI8qaf VI0E+LYd76Zr41RwhXqdjMgnNYWS9+E8WiOhK4MltOSOLY1L+PxK8TxacL2h6HRM O8RrTLG5gnGRH4jWooO3G27ivWcFn3XE2AtnGToRtCIzdu06sfGFllPNpdPEqTbK rUAAbts+yvD+lOm4S5noSGoMItbUPfZadp6aokOVeoZL98kXjQiZwVPCNGR8pS8W 9NLz5zLjL4nH1dqdrf58G10kn0UoJAeXq6UiK24m9nGt8W4urWQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:37 2025 by rpki-client