$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X-ICJyOsv1qVudgOTXbSCr0bsv0.roa File: X-ICJyOsv1qVudgOTXbSCr0bsv0.roa (raw, json) Hash identifier: ijj7vEEM6bJKdtYnbRiGEtJ0Dy5PFp2Arcc9dypDGFk= Subject key identifier: 5F:E2:02:27:23:AC:BF:5A:95:B9:D8:0E:4D:76:D2:0A:BD:1B:B2:FD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 349D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X-ICJyOsv1qVudgOTXbSCr0bsv0.roa Signing time: Mon 10 Feb 2025 13:52:33 +0000 ROA not before: Mon 10 Feb 2025 13:52:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.40.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13469 (0x349d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5FE2022723ACBF5A95B9D80E4D76D20ABD1BB2FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:f3:e8:71:39:28:ee:d8:ad:33:2d:e4:80: bf:c6:9b:96:1c:b4:12:fd:cf:af:a5:b5:f4:30:3f: 67:e3:ac:5f:26:e5:22:4f:07:c1:85:2b:bd:04:93: 21:88:47:49:2e:f0:90:c3:4d:12:6c:2f:8a:f6:82: fb:47:a3:5a:48:eb:ea:da:03:c2:ed:1d:33:0b:45: f8:e5:3b:73:18:ca:38:d5:71:74:0a:59:92:99:bc: f9:7c:b1:86:6b:4d:78:51:76:b2:c9:79:87:c4:3b: 89:b6:69:2f:b9:24:48:a5:bd:37:60:5a:8a:e8:a9: a9:a1:b4:6f:07:b6:8c:10:5b:e0:75:45:dc:4b:d7: b4:01:7f:0b:48:6e:5f:24:d7:9f:f2:2b:c3:26:f8: 4d:4f:b1:8f:96:05:71:95:36:7e:00:59:c5:90:02: 59:85:52:e8:65:b4:6d:b7:3a:59:18:f1:74:ba:b4: 41:53:1a:cc:00:e0:8e:ed:db:48:34:d0:8a:b6:0a: 74:6e:78:0b:17:39:bb:48:6e:df:28:22:e8:97:91: 44:ab:f5:b2:dd:4c:ea:b0:d3:0f:fd:57:ef:6e:3e: 76:d7:a4:1b:9f:5c:dc:3f:51:52:e7:72:35:01:a7: 99:b3:c7:a7:13:84:f7:22:a3:00:ce:86:97:74:2b: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E2:02:27:23:AC:BF:5A:95:B9:D8:0E:4D:76:D2:0A:BD:1B:B2:FD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X-ICJyOsv1qVudgOTXbSCr0bsv0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.40.0/21 Signature Algorithm: sha256WithRSAEncryption 72:b4:46:d2:3c:87:7f:fb:89:cb:58:d4:9b:e8:f2:2b:94:d5: 6b:47:00:2e:63:bd:91:8f:82:48:32:0a:38:aa:31:56:79:ea: 4b:3e:3b:10:0d:97:c8:1f:7b:2b:79:fc:77:87:f2:2f:7e:9e: 6f:51:1f:57:6f:65:19:6c:be:e1:10:7c:3e:92:75:d1:1b:df: dc:98:1d:12:9e:bc:3b:83:a6:3c:11:fc:32:4c:49:70:9f:43: 74:9d:3d:b0:94:3e:1c:96:b4:27:0c:06:2e:b2:b2:55:b4:85: 61:7b:14:19:fb:5b:f6:ef:fe:45:78:9f:62:e9:58:95:16:b5: 92:b6:5e:62:71:6c:6d:2b:7f:65:5b:ab:37:8e:5b:f2:68:89: db:eb:51:1f:c7:36:89:72:e0:f5:4f:d8:c2:5b:06:4b:b1:f9: b1:bd:1e:ab:6e:0a:8e:22:d2:f9:82:3f:ce:c8:a1:4a:04:5c: 59:c5:aa:62:64:67:6f:73:84:e1:e5:ea:94:1b:2f:d7:f8:40: 69:91:17:e3:af:fa:41:e7:e2:72:7b:3e:5e:04:21:7b:82:64: 67:46:fe:e2:e3:44:e5:85:55:1b:8e:9c:e7:0a:04:04:4b:a8: b5:20:db:53:28:b8:4b:70:b3:58:83:ff:b7:26:73:34:21:61: 8e:ce:3f:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGRTIwMjI3MjNBQ0JG NUE5NUI5RDgwRTRENzZEMjBBQkQxQkIyRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnxPPocTko7titMy3kgL/Gm5YctBL9z6+ltfQwP2fjrF8m5SJP B8GFK70EkyGIR0ku8JDDTRJsL4r2gvtHo1pI6+raA8LtHTMLRfjlO3MYyjjVcXQK WZKZvPl8sYZrTXhRdrLJeYfEO4m2aS+5JEilvTdgWoroqamhtG8HtowQW+B1RdxL 17QBfwtIbl8k15/yK8Mm+E1PsY+WBXGVNn4AWcWQAlmFUuhltG23OlkY8XS6tEFT GswA4I7t20g00Iq2CnRueAsXObtIbt8oIuiXkUSr9bLdTOqw0w/9V+9uPnbXpBuf XNw/UVLncjUBp5mzx6cThPciowDOhpd0K8SdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUX+ICJyOsv1qVudgOTXbSCr0bsv0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1gtSUNKeU9zdjFxVnVkZ09U WGJTQ3IwYnN2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6SgwDQYJKoZIhvcNAQELBQADggEBAHK0RtI8h3/7ictY1Jvo8iuU1WtHAC5jvZGP gkgyCjiqMVZ56ks+OxANl8gfeyt5/HeH8i9+nm9RH1dvZRlsvuEQfD6SddEb39yY HRKevDuDpjwR/DJMSXCfQ3SdPbCUPhyWtCcMBi6yslW0hWF7FBn7W/bv/kV4n2Lp WJUWtZK2XmJxbG0rf2VbqzeOW/JoidvrUR/HNoly4PVP2MJbBkux+bG9HqtuCo4i 0vmCP87IoUoEXFnFqmJkZ29zhOHl6pQbL9f4QGmRF+Ov+kHn4nJ7Pl4EIXuCZGdG /uLjROWFVRuOnOcKBARLqLUg21MouEtws1iD/7cmczQhYY7OP40= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:21 2025 by rpki-client