$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZkUZVgBfND6uO1MWyXibpK4649A.roa File: ZkUZVgBfND6uO1MWyXibpK4649A.roa (raw, json) Hash identifier: KO2nSyyvStqL82XgKQfTJyEgORhrIoBeZnN3R6Pr8JY= Subject key identifier: 66:45:19:56:00:5F:34:3E:AE:3B:53:16:C9:78:9B:A4:AE:3A:E3:D0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3407 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZkUZVgBfND6uO1MWyXibpK4649A.roa Signing time: Mon 10 Feb 2025 13:52:01 +0000 ROA not before: Mon 10 Feb 2025 13:52:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13319 (0x3407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=66451956005F343EAE3B5316C9789BA4AE3AE3D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:98:d2:d9:b9:14:8e:8a:a2:0c:bf:e7:18: d5:48:83:7e:1b:1f:11:d2:90:6b:f8:fd:13:e0:b9: ef:c1:27:6a:3e:8b:e0:6c:a7:d7:21:76:b6:54:98: f6:a6:9e:f9:9f:47:e7:1b:4a:b8:fd:62:05:a3:2e: ae:b8:76:c4:ea:a4:3a:65:87:69:91:2d:b1:d5:34: e2:a7:e6:f5:bb:ad:13:df:2d:68:e6:25:86:1a:3a: 40:e3:ed:f4:45:84:ec:46:e8:f2:ba:e3:81:64:55: fd:69:f2:c6:80:8f:a6:e8:e3:ee:78:0d:04:ec:3c: 13:53:a0:9b:6d:f7:b0:bd:8a:18:f8:0c:b2:31:d7: 3e:b4:27:3c:06:20:79:35:39:63:ad:2c:c6:14:e5: f6:ab:c6:22:1d:08:36:33:96:30:41:9a:84:ac:89: bb:d3:21:82:90:20:14:22:4f:ee:45:fe:23:53:07: 07:b8:a6:82:84:9b:23:02:7c:b4:f1:a0:ce:d4:ad: cc:04:46:bd:4e:32:f4:72:d0:ab:06:8c:d2:48:da: 10:71:23:09:12:ab:18:2c:ec:5d:5b:f5:5d:c9:70: dc:99:ff:04:4d:c9:02:05:ff:a2:25:eb:be:4f:b4: 2a:18:af:5b:f9:5a:f6:91:87:ea:ba:80:74:18:6b: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:45:19:56:00:5F:34:3E:AE:3B:53:16:C9:78:9B:A4:AE:3A:E3:D0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZkUZVgBfND6uO1MWyXibpK4649A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.56.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:31:fc:17:52:08:b1:b4:79:ca:1f:ee:80:21:f5:5f:9b:ad: 08:89:b5:97:60:5b:3c:3a:a5:3d:cd:5a:4d:ae:6e:ee:6c:ec: 4b:fe:f0:42:37:09:3c:20:ed:0f:e8:83:18:d8:08:cf:bd:7d: d5:7f:a8:40:1c:7f:76:5b:ec:ac:7f:3b:61:57:a8:46:15:6b: 7d:03:ff:61:23:22:9f:d0:ba:1b:54:e7:06:9f:de:3a:cb:43: 5b:1f:f4:4a:6d:02:09:67:a8:0f:2a:96:4a:42:12:d8:2d:a0: 7d:33:1e:59:d6:c7:4f:b7:41:db:ad:a4:b2:bf:82:bf:5b:17: 07:51:d9:74:a9:80:f3:3f:ae:e9:11:bc:52:76:04:da:30:37: ce:27:e9:a9:51:df:71:dd:3e:ea:68:63:7a:bc:f2:05:a2:21: 3f:e8:12:2a:98:b2:dc:2a:c3:44:e2:a7:f0:f0:9e:ac:77:bc: 1b:af:76:49:27:72:41:01:30:cf:18:77:0f:ae:50:73:a3:91: eb:06:76:af:83:10:b0:68:0c:fc:3f:08:50:a2:f8:3a:70:30: a1:e8:09:d0:79:8f:a2:cd:fa:2d:36:5a:6f:78:2e:02:68:05: 14:c8:aa:4b:71:6d:8b:8a:8e:55:82:b2:fb:0b:cb:ae:b2:6a: e0:f2:7f:a2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2NDUxOTU2MDA1RjM0 M0VBRTNCNTMxNkM5Nzg5QkE0QUUzQUUzRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxwJjS2bkUjoqiDL/nGNVIg34bHxHSkGv4/RPgue/BJ2o+i+Bs p9chdrZUmPamnvmfR+cbSrj9YgWjLq64dsTqpDplh2mRLbHVNOKn5vW7rRPfLWjm JYYaOkDj7fRFhOxG6PK644FkVf1p8saAj6bo4+54DQTsPBNToJtt97C9ihj4DLIx 1z60JzwGIHk1OWOtLMYU5farxiIdCDYzljBBmoSsibvTIYKQIBQiT+5F/iNTBwe4 poKEmyMCfLTxoM7UrcwERr1OMvRy0KsGjNJI2hBxIwkSqxgs7F1b9V3JcNyZ/wRN yQIF/6Il675PtCoYr1v5WvaRh+q6gHQYa9LtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZkUZVgBfND6uO1MWyXibpK4649AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1prVVpWZ0JmTkQ2dU8xTVd5 WGlicEs0NjQ5QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6TgwDQYJKoZIhvcNAQELBQADggEBAH4x/BdSCLG0ecof7oAh9V+brQiJtZdgWzw6 pT3NWk2ubu5s7Ev+8EI3CTwg7Q/ogxjYCM+9fdV/qEAcf3Zb7Kx/O2FXqEYVa30D /2EjIp/QuhtU5waf3jrLQ1sf9EptAglnqA8qlkpCEtgtoH0zHlnWx0+3QdutpLK/ gr9bFwdR2XSpgPM/rukRvFJ2BNowN84n6alR33HdPupoY3q88gWiIT/oEiqYstwq w0Tip/Dwnqx3vBuvdkknckEBMM8Ydw+uUHOjkesGdq+DELBoDPw/CFCi+DpwMKHo CdB5j6LN+i02Wm94LgJoBRTIqktxbYuKjlWCsvsLy66yauDyf6I= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:18 2025 by rpki-client