$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YI8TOnWWwUySP5j0p2EIJGJv600.roa File: YI8TOnWWwUySP5j0p2EIJGJv600.roa (raw, json) Hash identifier: Q5rOy3zUCn4ZuLPMk73AFPsCm37T9uBGmQ1AsdtwK4c= Subject key identifier: 60:8F:13:3A:75:96:C1:4C:92:3F:98:F4:A7:61:08:24:62:6F:EB:4D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35BD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YI8TOnWWwUySP5j0p2EIJGJv600.roa Signing time: Mon 10 Feb 2025 13:53:39 +0000 ROA not before: Mon 10 Feb 2025 13:53:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13757 (0x35bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=608F133A7596C14C923F98F4A7610824626FEB4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:b8:01:d0:c7:06:de:ce:7b:d6:ac:94:62: c0:08:58:d7:dc:19:88:5e:0b:0f:b9:9f:e8:b8:29: aa:94:6b:17:44:7c:da:d5:81:2e:af:83:fb:d3:0c: 01:32:0b:49:e0:25:7d:e8:3f:fa:be:5a:15:28:ed: 70:41:b6:a9:32:3f:53:23:a9:f7:6f:f0:36:5d:26: 08:17:68:68:0c:b6:b6:7d:f1:14:af:04:99:2f:02: 14:72:c1:78:5c:9d:6d:a1:12:57:76:af:ee:45:8e: 5b:6d:7e:e1:8b:8d:11:6d:43:a1:e5:a2:dd:e4:0a: 87:dd:33:43:9a:b7:3c:75:30:8c:95:5c:8e:54:fb: ec:53:cc:d2:73:ad:ea:af:b8:94:6c:20:7c:40:f6: c4:d8:1a:04:2b:f3:52:ac:d9:81:02:44:96:b1:c4: 99:11:a8:de:2b:07:f7:8f:dc:ff:72:2a:26:a3:cd: 1b:d5:c2:d7:86:b4:10:c7:7a:d7:52:98:bf:6e:12: a3:4b:18:5f:ff:12:16:58:5c:a8:ce:76:37:88:2e: 53:9a:45:00:7c:ab:fd:7b:2e:88:d5:c9:77:7a:26: b5:1c:86:37:75:0e:f0:d9:86:07:12:7b:b7:6b:ee: 39:34:99:d1:f7:09:9e:04:e1:2f:5e:59:8b:8c:f2: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8F:13:3A:75:96:C1:4C:92:3F:98:F4:A7:61:08:24:62:6F:EB:4D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YI8TOnWWwUySP5j0p2EIJGJv600.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.24.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:68:a2:88:f7:c1:8b:7a:f2:9c:85:66:7a:aa:db:78:3a:9e: b5:17:63:cf:b8:2e:c5:31:bc:b6:a7:55:f6:06:12:2b:4e:00: 17:be:0c:1b:f9:2c:48:f2:b4:a8:6c:33:de:61:15:c7:1d:1b: e7:f1:71:53:b6:7e:90:12:55:c2:7c:b5:78:2f:89:c0:e7:75: d6:fe:8b:39:23:1c:89:a2:b6:d4:5c:60:d6:ba:0f:9e:2e:95: 80:28:98:44:2a:ae:ea:0c:80:e9:bd:aa:77:fb:3f:6c:c1:b4: d6:57:dd:0a:9f:11:94:09:71:11:cf:10:1e:33:a0:a5:2b:8b: 75:5c:59:ef:65:7f:bd:b4:f7:29:50:85:9c:3b:d8:e0:d6:ed: 34:c5:06:52:76:0d:23:1a:a3:ae:57:2c:19:d9:31:f4:5c:a5: fc:52:a0:45:50:f2:be:e1:fe:c9:d2:f9:fb:ba:24:7b:33:6d: e3:c2:dd:ee:4d:d9:08:fc:a0:6b:22:c8:47:fd:9f:36:5b:19: ff:a3:16:ec:d8:da:c4:48:90:42:68:7f:56:58:96:58:b8:07: 07:91:d1:0d:bb:03:31:6e:56:a0:89:dc:89:6d:94:89:07:78: b8:46:b6:cc:c7:51:da:4b:1a:27:88:8a:a9:55:65:f7:67:05: 41:1a:bc:9a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwOEYxMzNBNzU5NkMx NEM5MjNGOThGNEE3NjEwODI0NjI2RkVCNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkW7gB0McG3s571qyUYsAIWNfcGYheCw+5n+i4KaqUaxdEfNrV gS6vg/vTDAEyC0ngJX3oP/q+WhUo7XBBtqkyP1Mjqfdv8DZdJggXaGgMtrZ98RSv BJkvAhRywXhcnW2hEld2r+5FjlttfuGLjRFtQ6Hlot3kCofdM0Oatzx1MIyVXI5U ++xTzNJzreqvuJRsIHxA9sTYGgQr81Ks2YECRJaxxJkRqN4rB/eP3P9yKiajzRvV wteGtBDHetdSmL9uEqNLGF//EhZYXKjOdjeILlOaRQB8q/17LojVyXd6JrUchjd1 DvDZhgcSe7dr7jk0mdH3CZ4E4S9eWYuM8tH9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYI8TOnWWwUySP5j0p2EIJGJv600wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lJOFRPbldXd1V5U1A1ajBw MkVJSkdKdjYwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6BgwDQYJKoZIhvcNAQELBQADggEBAA1oooj3wYt68pyFZnqq23g6nrUXY8+4LsUx vLanVfYGEitOABe+DBv5LEjytKhsM95hFccdG+fxcVO2fpASVcJ8tXgvicDnddb+ izkjHImittRcYNa6D54ulYAomEQqruoMgOm9qnf7P2zBtNZX3QqfEZQJcRHPEB4z oKUri3VcWe9lf7209ylQhZw72ODW7TTFBlJ2DSMao65XLBnZMfRcpfxSoEVQ8r7h /snS+fu6JHszbePC3e5N2Qj8oGsiyEf9nzZbGf+jFuzY2sRIkEJof1ZYlli4BweR 0Q27AzFuVqCJ3IltlIkHeLhGtszHUdpLGieIiqlVZfdnBUEavJo= -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:27 2025 by rpki-client