$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WxtpkMrI2eVXzCF0JYyvhQabQhA.roa File: WxtpkMrI2eVXzCF0JYyvhQabQhA.roa (raw, json) Hash identifier: Lfl5zi02YXCadZrz4H0KNPobp+1axfWdaVBw0awLLOw= Subject key identifier: 5B:1B:69:90:CA:C8:D9:E5:57:CC:21:74:25:8C:AF:85:06:9B:42:10 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3427 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WxtpkMrI2eVXzCF0JYyvhQabQhA.roa Signing time: Mon 10 Feb 2025 13:52:07 +0000 ROA not before: Mon 10 Feb 2025 13:52:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13351 (0x3427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5B1B6990CAC8D9E557CC2174258CAF85069B4210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:21:ec:d1:80:d8:59:c5:21:5b:07:83:5e: 29:bd:dc:d7:c0:71:25:40:56:4e:1b:82:35:33:c4: dc:65:8d:39:3b:0d:00:e9:5b:00:19:10:fe:f9:7a: 5e:f4:fe:b7:c4:20:b3:37:8f:ba:ba:04:ad:74:70: 1c:5b:5e:28:a2:64:f3:91:aa:26:a2:95:8e:b8:5e: a8:8e:18:4c:1c:fb:d0:e7:d4:5a:59:b9:32:aa:55: 58:17:e5:6b:70:fb:52:89:d2:8a:d8:4e:3e:19:95: 33:67:f7:6a:0e:6d:ca:0c:fd:5f:15:57:e7:18:35: e5:56:30:f1:c8:71:51:a1:17:2f:54:bb:07:98:83: d0:3b:a5:4f:b8:94:c8:94:76:c8:7b:05:43:bf:d9: 78:d3:dc:a9:85:b0:6a:f6:c5:42:21:c5:70:b2:01: 7d:23:d8:d0:a9:b0:d3:0e:c1:50:dc:9b:55:27:39: 64:e1:90:e5:5a:57:26:3c:00:15:3b:f9:b5:cb:20: bb:e6:06:08:c1:6d:63:4d:a4:e8:19:d0:3a:d3:84: b3:94:70:f9:f6:fd:79:c6:01:86:3f:3a:7b:55:06: 9b:8f:38:c4:f4:33:d1:37:89:53:a1:71:1a:f1:a5: a0:68:46:8a:cd:56:c2:fb:73:82:fa:57:29:44:16: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1B:69:90:CA:C8:D9:E5:57:CC:21:74:25:8C:AF:85:06:9B:42:10 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WxtpkMrI2eVXzCF0JYyvhQabQhA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.16.0/21 Signature Algorithm: sha256WithRSAEncryption 78:67:c6:bf:91:ee:d2:fb:52:3a:1d:d6:e7:9c:8c:9c:a7:93: e0:ff:02:b3:88:d9:51:1c:dc:78:c8:3b:85:3d:9e:aa:e3:9a: 39:a4:e3:4c:f0:a2:df:92:aa:22:99:ce:64:03:65:b9:57:00: a6:d4:34:fc:07:83:27:e0:5b:5f:18:d1:71:21:79:0f:6d:ab: 7f:2e:d8:e8:0b:44:17:27:6d:6d:b7:85:b4:c7:92:42:1e:96: 1c:1b:15:6b:03:b5:f8:0b:77:b9:73:39:84:a4:19:14:2b:84: e0:17:d1:a1:68:73:0b:3f:cf:7e:4f:47:93:1b:5c:7d:9b:2f: fe:ed:ec:d3:4e:15:ce:fd:e8:1e:d5:09:28:54:8b:c8:6a:ec: 37:e2:34:31:e5:96:76:0a:a5:39:8c:ba:cf:e2:f1:74:74:7e: 56:1c:0e:9a:bc:7f:84:c8:22:fb:d2:d5:c1:13:16:25:a8:1c: 9f:2d:3f:9b:1e:19:4b:b0:ec:cc:8a:b4:12:c8:5b:14:7d:9d: 21:32:31:ec:c2:6d:2e:81:9f:13:93:d7:66:67:1f:b9:88:fc: 0e:09:8a:b4:fb:66:86:7f:b7:71:1a:0a:e8:2f:ba:e0:20:ab: 1b:95:f9:3c:83:44:72:8d:9a:03:36:06:b2:ae:7c:60:d1:51: da:7c:1d:08 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNCcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVCMUI2OTkwQ0FDOEQ5 RTU1N0NDMjE3NDI1OENBRjg1MDY5QjQyMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgFSHs0YDYWcUhWweDXim93NfAcSVAVk4bgjUzxNxljTk7DQDp WwAZEP75el70/rfEILM3j7q6BK10cBxbXiiiZPORqiailY64XqiOGEwc+9Dn1FpZ uTKqVVgX5Wtw+1KJ0orYTj4ZlTNn92oObcoM/V8VV+cYNeVWMPHIcVGhFy9UuweY g9A7pU+4lMiUdsh7BUO/2XjT3KmFsGr2xUIhxXCyAX0j2NCpsNMOwVDcm1UnOWTh kOVaVyY8ABU7+bXLILvmBgjBbWNNpOgZ0DrThLOUcPn2/XnGAYY/OntVBpuPOMT0 M9E3iVOhcRrxpaBoRorNVsL7c4L6VylEFim1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWxtpkMrI2eVXzCF0JYyvhQabQhAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1d4dHBrTXJJMmVWWHpDRjBK WXl2aFFhYlFoQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wRAwDQYJKoZIhvcNAQELBQADggEBAHhnxr+R7tL7Ujod1uecjJynk+D/ArOI2VEc 3HjIO4U9nqrjmjmk40zwot+SqiKZzmQDZblXAKbUNPwHgyfgW18Y0XEheQ9tq38u 2OgLRBcnbW23hbTHkkIelhwbFWsDtfgLd7lzOYSkGRQrhOAX0aFocws/z35PR5Mb XH2bL/7t7NNOFc796B7VCShUi8hq7DfiNDHllnYKpTmMus/i8XR0flYcDpq8f4TI IvvS1cETFiWoHJ8tP5seGUuw7MyKtBLIWxR9nSEyMezCbS6BnxOT12ZnH7mI/A4J irT7ZoZ/t3EaCugvuuAgqxuV+TyDRHKNmgM2BrKufGDRUdp8HQg= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:30 2025 by rpki-client