$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XdWzBDT6R_YO0qBlqDTUta8HktE.roa File: XdWzBDT6R_YO0qBlqDTUta8HktE.roa (raw, json) Hash identifier: tb+z3nEpco2Ns51mnuEuwuZwLrr69Rke8x9Uyx9+45Y= Subject key identifier: 5D:D5:B3:04:34:FA:47:F6:0E:D2:A0:65:A8:34:D4:B5:AF:07:92:D1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 357B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XdWzBDT6R_YO0qBlqDTUta8HktE.roa Signing time: Mon 10 Feb 2025 13:53:23 +0000 ROA not before: Mon 10 Feb 2025 13:53:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 103.224.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13691 (0x357b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5DD5B30434FA47F60ED2A065A834D4B5AF0792D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:8e:09:f3:e6:fc:e4:e8:58:7d:60:8d:34: 29:2c:1d:25:ac:89:e3:a9:6a:d8:26:a6:82:cd:c9: 5e:9a:31:fc:97:4d:fc:2d:23:e9:ac:1c:c4:93:f7: 55:1a:12:8e:d6:09:a8:ef:d3:f4:85:25:d2:0c:b1: 6a:32:40:06:8a:c4:c8:2c:94:83:5b:0d:a4:59:79: 6f:ba:df:96:b3:64:0b:7d:63:f7:5d:56:fa:57:53: c2:6c:b6:af:6f:40:35:d8:3f:3f:c5:af:ef:57:c2: 5f:81:89:24:ff:68:f1:f3:8e:8c:26:dd:e8:f9:47: b5:25:fa:35:41:f5:2d:20:6c:85:fe:2e:96:55:ec: a0:7e:4a:ca:02:2a:ed:9d:4f:65:4a:b7:67:53:ea: 21:0a:56:54:88:b7:95:01:b2:74:26:d4:3f:b6:2c: 82:c2:ed:6c:3c:e8:1f:24:e4:83:13:f7:16:59:2c: 94:99:ce:59:eb:ec:3b:88:be:3e:16:0b:fa:8f:8f: 72:1a:a5:11:c7:e7:3d:3f:5e:04:94:ca:f3:45:a0: 3c:13:49:e4:aa:b5:6b:fd:d5:2a:21:5b:95:67:ff: d9:ba:17:bf:42:2b:06:6a:b8:9a:35:54:a5:43:51: db:0b:3b:b8:4f:67:a7:f9:55:78:46:db:55:37:65: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D5:B3:04:34:FA:47:F6:0E:D2:A0:65:A8:34:D4:B5:AF:07:92:D1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XdWzBDT6R_YO0qBlqDTUta8HktE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.194.0/24 Signature Algorithm: sha256WithRSAEncryption 10:02:f4:75:fc:ec:40:84:50:b8:09:08:2b:c8:94:cf:d7:05: 3e:cf:83:88:26:87:7d:e1:08:24:70:7a:fe:b3:6f:d0:37:cb: 8a:78:e1:9d:2f:6a:59:42:2c:89:57:31:70:77:8c:d8:29:15: 6f:4e:13:17:74:75:ab:c0:c0:ad:14:df:de:aa:ff:dd:ae:d6: b6:8e:a7:c0:65:d0:99:c8:ec:f5:93:ba:b0:00:c6:57:eb:a7: c6:ae:31:8f:5c:d9:7d:c1:fa:59:11:6f:cb:a1:2d:af:19:97: 8b:3f:4d:52:e7:6f:4b:62:b7:18:81:10:bc:18:2f:a1:3c:25: 04:e5:91:4f:9e:c5:fe:b0:87:30:c3:89:69:42:e5:6f:2a:1f: cb:e9:bd:ac:74:42:b9:d5:71:d6:a5:68:95:44:e2:83:e4:34: 9b:cb:d6:84:01:f8:79:ff:78:21:fa:bd:f4:65:f3:8b:12:31: 57:38:b5:f8:13:ad:bc:a1:f5:23:f5:f0:5a:6e:12:a5:b5:a5: 66:66:09:25:e9:44:95:ed:7c:4e:73:58:aa:83:dc:3e:a0:7f: a1:cc:b1:ee:e2:bb:bb:ef:d8:a6:3d:4c:7c:69:1a:d2:24:90: e2:c3:3c:91:c8:0a:c2:c9:68:57:39:99:00:86:e4:9d:98:3d: 4a:ec:ab:40 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVERDVCMzA0MzRGQTQ3 RjYwRUQyQTA2NUE4MzRENEI1QUYwNzkyRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCc44J8+b85OhYfWCNNCksHSWsieOpatgmpoLNyV6aMfyXTfwt I+msHMST91UaEo7WCajv0/SFJdIMsWoyQAaKxMgslINbDaRZeW+635azZAt9Y/dd VvpXU8Jstq9vQDXYPz/Fr+9Xwl+BiST/aPHzjowm3ej5R7Ul+jVB9S0gbIX+LpZV 7KB+SsoCKu2dT2VKt2dT6iEKVlSIt5UBsnQm1D+2LILC7Ww86B8k5IMT9xZZLJSZ zlnr7DuIvj4WC/qPj3IapRHH5z0/XgSUyvNFoDwTSeSqtWv91SohW5Vn/9m6F79C KwZquJo1VKVDUdsLO7hPZ6f5VXhG21U3ZfqdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXdWzBDT6R/YO0qBlqDTUta8HktEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hkV3pCRFQ2Ul9ZTzBxQmxx RFRVdGE4SGt0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn 4MIwDQYJKoZIhvcNAQELBQADggEBABAC9HX87ECEULgJCCvIlM/XBT7Pg4gmh33h CCRwev6zb9A3y4p44Z0vallCLIlXMXB3jNgpFW9OExd0davAwK0U396q/92u1raO p8Bl0JnI7PWTurAAxlfrp8auMY9c2X3B+lkRb8uhLa8Zl4s/TVLnb0titxiBELwY L6E8JQTlkU+exf6whzDDiWlC5W8qH8vpvax0QrnVcdalaJVE4oPkNJvL1oQB+Hn/ eCH6vfRl84sSMVc4tfgTrbyh9SP18FpuEqW1pWZmCSXpRJXtfE5zWKqD3D6gf6HM se7iu7vv2KY9THxpGtIkkOLDPJHICsLJaFc5mQCG5J2YPUrsq0A= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:27 2025 by rpki-client