$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tdv9W8IvKOeCVC9xj2Rd5Tr_yUc.roa File: Tdv9W8IvKOeCVC9xj2Rd5Tr_yUc.roa (raw, json) Hash identifier: DdXRzxOJ5nyMv/5BsA5UdZLinPs3rowMuo8Ruw2Jt4U= Subject key identifier: 4D:DB:FD:5B:C2:2F:28:E7:82:54:2F:71:8F:64:5D:E5:3A:FF:C9:47 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 338A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tdv9W8IvKOeCVC9xj2Rd5Tr_yUc.roa Signing time: Mon 10 Feb 2025 13:51:31 +0000 ROA not before: Mon 10 Feb 2025 13:51:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13194 (0x338a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4DDBFD5BC22F28E782542F718F645DE53AFFC947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:0f:59:fc:16:a6:27:0e:b5:7f:6f:6b:d2: 2d:84:75:bd:0b:4c:82:19:f1:cb:10:c4:ac:dd:41: 42:4e:ca:8d:85:a0:75:88:a3:b6:94:5c:b6:d5:94: 0f:23:d6:db:d8:13:96:dd:ba:49:ca:62:c0:a5:cf: 0c:d2:36:e4:f4:dd:02:87:c3:ca:70:f8:69:9f:e4: 67:e8:cd:a7:c3:d1:7a:1d:3f:5f:76:18:f7:d6:f7: 43:c3:81:f7:6c:2f:26:1d:78:56:02:00:50:35:e0: dc:35:7e:32:a0:7c:a1:fc:22:de:93:b3:d6:bf:83: 04:78:78:b1:36:86:87:59:c7:ff:d1:ba:5e:dc:36: 19:47:53:00:f5:9b:25:e7:05:17:8e:81:ed:18:a0: 76:7c:b9:ba:1a:27:a4:2f:20:54:79:4c:18:b9:9d: 60:0a:58:6c:dd:b9:48:35:6b:24:40:48:8b:ce:f5: 3e:b6:b2:07:fd:9e:ed:23:8b:e3:2a:2d:15:e1:71: 55:00:90:b5:35:56:08:ca:de:0a:65:c5:1e:88:50: eb:e0:75:63:f7:ac:52:de:ac:a3:fe:d2:b6:cd:b2: 15:94:88:04:26:aa:05:80:3b:aa:e2:83:d6:8d:35: 78:41:2c:08:1b:ce:43:f5:bc:9d:f2:86:2f:19:11: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DB:FD:5B:C2:2F:28:E7:82:54:2F:71:8F:64:5D:E5:3A:FF:C9:47 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tdv9W8IvKOeCVC9xj2Rd5Tr_yUc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.107.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:10:d5:ec:dc:40:26:95:1f:f5:91:df:22:3b:51:ca:bc:f9: 71:fb:1d:06:19:8e:56:4a:0a:80:44:07:b8:91:26:5a:f7:ff: 7d:10:24:a8:ef:b1:81:6d:8a:02:18:85:79:96:68:78:0a:71: c7:92:22:66:4e:d8:67:5e:a3:f5:50:4e:11:6f:d0:25:2f:4c: 4d:d5:c3:53:74:a7:ce:74:50:e9:2c:39:de:5f:6f:f1:eb:08: 3c:93:89:20:49:1a:bb:25:9a:1b:77:17:72:30:81:55:0a:13: f5:41:c5:19:f2:34:ea:45:f2:37:dd:2e:10:a4:40:c1:ea:3d: 75:4d:02:dd:59:17:f5:d4:b9:6b:dc:7d:7a:a0:a7:69:c3:2f: cd:59:e2:20:3d:5e:c2:d7:10:92:ee:3e:2f:36:55:b7:db:33: ca:72:17:66:df:40:5e:6b:53:34:bc:61:16:33:fa:24:59:63: 70:0b:6a:4c:94:c7:99:e9:7f:44:76:76:f8:f6:1c:bc:66:a5: f7:20:04:1d:e8:24:e1:2b:56:cb:1a:20:47:25:9c:f9:36:1a: 4b:c1:11:84:30:bb:a7:4c:df:b5:db:8b:87:aa:00:85:8b:77: 28:cc:9b:3a:d8:47:76:03:f0:6e:a8:99:1f:ce:b2:31:74:b0: e8:31:17:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDREREJGRDVCQzIyRjI4 RTc4MjU0MkY3MThGNjQ1REU1M0FGRkM5NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/zQ9Z/BamJw61f29r0i2Edb0LTIIZ8csQxKzdQUJOyo2FoHWI o7aUXLbVlA8j1tvYE5bduknKYsClzwzSNuT03QKHw8pw+Gmf5GfozafD0XodP192 GPfW90PDgfdsLyYdeFYCAFA14Nw1fjKgfKH8It6Ts9a/gwR4eLE2hodZx//Rul7c NhlHUwD1myXnBReOge0YoHZ8uboaJ6QvIFR5TBi5nWAKWGzduUg1ayRASIvO9T62 sgf9nu0ji+MqLRXhcVUAkLU1VgjK3gplxR6IUOvgdWP3rFLerKP+0rbNshWUiAQm qgWAO6rig9aNNXhBLAgbzkP1vJ3yhi8ZEa7DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTdv9W8IvKOeCVC9xj2Rd5Tr/yUcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RkdjlXOEl2S09lQ1ZDOXhq MlJkNVRyX3lVYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wWswDQYJKoZIhvcNAQELBQADggEBAGwQ1ezcQCaVH/WR3yI7Ucq8+XH7HQYZjlZK CoBEB7iRJlr3/30QJKjvsYFtigIYhXmWaHgKcceSImZO2Gdeo/VQThFv0CUvTE3V w1N0p850UOksOd5fb/HrCDyTiSBJGrslmht3F3IwgVUKE/VBxRnyNOpF8jfdLhCk QMHqPXVNAt1ZF/XUuWvcfXqgp2nDL81Z4iA9XsLXEJLuPi82VbfbM8pyF2bfQF5r UzS8YRYz+iRZY3ALakyUx5npf0R2dvj2HLxmpfcgBB3oJOErVssaIEclnPk2GkvB EYQwu6dM37Xbi4eqAIWLdyjMmzrYR3YD8G6omR/OsjF0sOgxFzQ= -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:08 2025 by rpki-client