$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eIgNDrjYBVgo47POb_x5YVWV0tc.roa File: eIgNDrjYBVgo47POb_x5YVWV0tc.roa (raw, json) Hash identifier: 4aGOOkDCi+xOTkprMwfBbRi9QJuLdyUYKGc06Kuy0OA= Subject key identifier: 78:88:0D:0E:B8:D8:05:58:28:E3:B3:CE:6F:FC:79:61:55:95:D2:D7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 368D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eIgNDrjYBVgo47POb_x5YVWV0tc.roa Signing time: Mon 10 Feb 2025 13:54:25 +0000 ROA not before: Mon 10 Feb 2025 13:54:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13965 (0x368d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=78880D0EB8D8055828E3B3CE6FFC79615595D2D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:66:64:82:04:bf:75:80:d7:ef:89:93:52: 4e:7b:cd:12:0c:67:5c:1a:ad:30:80:ee:62:cb:e3: f5:9d:e7:1d:f0:27:28:b7:72:17:81:18:c1:6f:82: c0:ee:9d:b0:88:54:6a:f8:fa:d6:86:a9:0e:5b:36: cb:fe:c5:60:c8:fb:f8:8a:70:17:7d:1f:88:bb:56: 38:4d:1d:9a:df:55:0e:af:4c:2c:21:a1:5f:15:e0: a3:f0:b3:c1:dc:c7:22:57:13:6a:ad:c7:54:1a:f6: 99:95:df:94:6f:da:aa:93:5d:8c:8a:36:2b:24:6a: 61:10:14:76:c8:22:d1:a1:01:f2:fa:f3:e3:8a:b8: f3:0c:06:88:f1:f0:6d:d8:ff:d9:6e:49:68:d7:07: df:b6:56:a4:8b:b9:be:4c:fe:ef:ae:54:a8:75:94: df:13:3f:7c:68:fd:27:43:1a:ab:dc:85:2a:46:08: 45:13:0d:c1:ac:cd:e6:28:24:bf:46:e9:74:4d:d7: f7:8c:b2:b7:66:20:da:e7:93:1d:a8:ca:98:16:42: 91:01:28:e4:ed:1b:8f:52:1a:7e:e5:8c:10:13:45: 79:cf:c0:41:f2:65:fa:79:4e:8a:ad:b9:11:17:9e: de:6a:97:6d:e8:35:97:93:e5:ea:31:66:84:f7:45: 30:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:88:0D:0E:B8:D8:05:58:28:E3:B3:CE:6F:FC:79:61:55:95:D2:D7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eIgNDrjYBVgo47POb_x5YVWV0tc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.252.0/22 Signature Algorithm: sha256WithRSAEncryption 03:f0:8b:3a:77:f0:a8:81:77:3a:e5:bd:e1:68:e1:18:e2:f5: c1:34:80:a5:b3:fd:a8:c5:35:b6:9d:e2:cf:d3:7f:2d:b0:67: a7:e4:eb:32:85:11:62:40:e3:4b:53:fb:f1:c2:6d:5b:10:84: 35:9d:31:c2:b9:c2:dd:77:f8:14:58:0b:fe:a6:4f:0a:76:39: 45:bb:f8:d5:b7:c3:b1:e7:d5:58:5e:fb:4b:26:bf:5a:be:5e: a4:3b:98:72:db:8a:a0:10:79:7f:a9:a2:07:63:6f:46:19:35: ee:c2:a1:c1:fc:dd:28:63:54:66:d8:f0:f5:5a:cf:d9:b5:2e: 69:57:67:43:14:89:61:5f:f8:7e:bd:28:dc:ad:ef:b3:3e:9c: 67:1f:aa:cd:8b:60:18:90:a3:5c:a7:96:a8:71:5d:fd:5d:13: 15:75:db:cd:34:d9:a9:96:9b:b0:a3:08:31:83:5f:50:65:2f: 04:0b:25:4d:2b:41:5b:f8:66:d9:ae:b8:a9:2d:23:5f:8c:8b: 3f:90:18:af:0b:e9:f0:0b:79:e4:32:d7:6d:70:e7:b7:40:1e: 6a:e6:7e:f3:53:af:46:e7:79:31:12:16:d2:92:7b:f5:e2:0e: c6:c2:87:97:5a:c7:1e:ab:03:76:e7:3f:2e:a6:7c:8d:09:a2: e5:03:2a:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc4ODgwRDBFQjhEODA1 NTgyOEUzQjNDRTZGRkM3OTYxNTU5NUQyRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9OmZkggS/dYDX74mTUk57zRIMZ1warTCA7mLL4/Wd5x3wJyi3 cheBGMFvgsDunbCIVGr4+taGqQ5bNsv+xWDI+/iKcBd9H4i7VjhNHZrfVQ6vTCwh oV8V4KPws8HcxyJXE2qtx1Qa9pmV35Rv2qqTXYyKNiskamEQFHbIItGhAfL68+OK uPMMBojx8G3Y/9luSWjXB9+2VqSLub5M/u+uVKh1lN8TP3xo/SdDGqvchSpGCEUT DcGszeYoJL9G6XRN1/eMsrdmINrnkx2oypgWQpEBKOTtG49SGn7ljBATRXnPwEHy Zfp5ToqtuREXnt5ql23oNZeT5eoxZoT3RTBtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeIgNDrjYBVgo47POb/x5YVWV0tcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VJZ05EcmpZQlZnbzQ3UE9i X3g1WVZXVjB0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wvwwDQYJKoZIhvcNAQELBQADggEBAAPwizp38KiBdzrlveFo4Rji9cE0gKWz/ajF Nbad4s/Tfy2wZ6fk6zKFEWJA40tT+/HCbVsQhDWdMcK5wt13+BRYC/6mTwp2OUW7 +NW3w7Hn1Vhe+0smv1q+XqQ7mHLbiqAQeX+pogdjb0YZNe7CocH83ShjVGbY8PVa z9m1LmlXZ0MUiWFf+H69KNyt77M+nGcfqs2LYBiQo1ynlqhxXf1dExV128002amW m7CjCDGDX1BlLwQLJU0rQVv4ZtmuuKktI1+Miz+QGK8L6fALeeQy121w57dAHmrm fvNTr0bneTESFtKSe/XiDsbCh5daxx6rA3bnPy6mfI0JouUDKlA= -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:18 2025 by rpki-client