$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gfQ28gdTB6u7ZBtlg6cVwd7lh3k.roa File: gfQ28gdTB6u7ZBtlg6cVwd7lh3k.roa (raw, json) Hash identifier: DveVVwXdj7ODpgiwZWYIguk5YFqXRoDDnt6u1Q2t6Og= Subject key identifier: 81:F4:36:F2:07:53:07:AB:BB:64:1B:65:83:A7:15:C1:DE:E5:87:79 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3402 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gfQ28gdTB6u7ZBtlg6cVwd7lh3k.roa Signing time: Mon 10 Feb 2025 13:51:59 +0000 ROA not before: Mon 10 Feb 2025 13:51:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13314 (0x3402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=81F436F2075307ABBB641B6583A715C1DEE58779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:50:44:b9:ca:e2:95:0b:39:60:89:f4:a3: 6d:ff:c3:45:ab:cc:c2:47:24:14:69:45:b7:c6:5b: ec:06:9d:e5:c0:cd:19:1e:ee:27:28:89:9f:7f:1e: dd:c5:a9:88:14:a4:7d:79:d7:33:da:54:7d:dd:7a: 9b:6e:24:48:7c:af:ed:6d:58:44:90:16:e4:94:5c: 36:66:81:70:94:59:5e:8a:c0:3f:6e:f2:fc:46:03: a8:a7:22:e3:c3:d3:ac:c6:45:84:ba:ca:d8:d5:94: c7:54:5c:34:ff:c8:cc:05:ee:31:d8:5d:52:ac:7b: 77:e8:9e:43:fd:dc:c6:d4:e9:58:98:20:42:a0:1d: e5:fb:42:2b:8d:a2:a4:c3:d1:75:80:2f:67:7e:92: 4f:9a:ad:70:d5:f7:dd:20:e7:a3:31:89:41:7c:1e: f0:a0:46:6c:e6:9a:41:e9:8f:e8:90:60:8c:4e:be: 1b:da:ee:09:68:8e:e8:9a:f0:57:ff:32:e5:f6:78: 2e:f8:13:2d:53:8d:27:29:05:c5:72:32:34:62:4c: eb:cb:d7:b6:3a:bc:38:00:7c:df:69:83:d5:31:57: 61:6a:e0:3c:3d:64:e4:9c:1c:66:d9:c6:91:49:62: 0a:9c:57:00:62:36:74:a9:57:10:b1:56:11:a6:5d: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F4:36:F2:07:53:07:AB:BB:64:1B:65:83:A7:15:C1:DE:E5:87:79 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gfQ28gdTB6u7ZBtlg6cVwd7lh3k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.102.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:76:34:b6:fe:5a:ee:1e:4e:38:c7:b8:ab:36:59:93:90:ce: b2:71:ba:61:06:32:a3:00:6d:05:c3:c9:67:50:89:48:8f:39: 68:6b:41:6f:9e:90:f8:a0:b7:1e:53:1f:d1:9e:6d:2c:27:86: 87:b3:9f:47:6a:d7:0e:7c:74:a0:a2:4a:96:d0:58:7c:86:4e: 4c:9d:c7:58:4f:e1:e0:09:85:c9:ee:86:24:f7:0f:8b:cd:d9: 60:e1:a8:92:b1:a1:ea:c1:51:98:ab:78:95:91:8b:9e:ba:80: fd:25:f8:9d:53:9a:78:03:5f:4e:d1:ee:57:a4:ba:7c:f9:4c: a3:9a:74:55:2e:56:67:bc:de:20:68:e1:30:72:27:e7:d2:e4: 58:ca:f0:61:61:c6:0c:05:36:09:39:62:00:0a:bb:7a:1e:6c: 23:5e:74:22:3c:03:eb:ef:f0:65:d4:99:6d:6d:a4:93:f9:60: 1a:45:d2:90:8e:bd:05:4b:86:0f:e4:b5:00:9d:b4:99:ee:5a: f4:de:0c:41:50:e4:bd:ae:27:c6:c5:01:5c:79:43:07:36:37: 49:f7:bb:cd:36:be:bd:89:42:0e:50:5b:81:02:4b:c5:64:32: 0d:b8:ee:76:a2:b5:9a:a0:28:44:4f:7f:8c:2d:d6:d0:7a:9e: 51:55:ef:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxRjQzNkYyMDc1MzA3 QUJCQjY0MUI2NTgzQTcxNUMxREVFNTg3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChclBEucrilQs5YIn0o23/w0WrzMJHJBRpRbfGW+wGneXAzRke 7icoiZ9/Ht3FqYgUpH151zPaVH3deptuJEh8r+1tWESQFuSUXDZmgXCUWV6KwD9u 8vxGA6inIuPD06zGRYS6ytjVlMdUXDT/yMwF7jHYXVKse3fonkP93MbU6ViYIEKg HeX7QiuNoqTD0XWAL2d+kk+arXDV990g56MxiUF8HvCgRmzmmkHpj+iQYIxOvhva 7glojuia8Ff/MuX2eC74Ey1TjScpBcVyMjRiTOvL17Y6vDgAfN9pg9UxV2Fq4Dw9 ZOScHGbZxpFJYgqcVwBiNnSpVxCxVhGmXVA/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgfQ28gdTB6u7ZBtlg6cVwd7lh3kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dmUTI4Z2RUQjZ1N1pCdGxn NmNWd2Q3bGgzay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6WYwDQYJKoZIhvcNAQELBQADggEBAIx2NLb+Wu4eTjjHuKs2WZOQzrJxumEGMqMA bQXDyWdQiUiPOWhrQW+ekPigtx5TH9GebSwnhoezn0dq1w58dKCiSpbQWHyGTkyd x1hP4eAJhcnuhiT3D4vN2WDhqJKxoerBUZireJWRi566gP0l+J1TmngDX07R7lek unz5TKOadFUuVme83iBo4TByJ+fS5FjK8GFhxgwFNgk5YgAKu3oebCNedCI8A+vv 8GXUmW1tpJP5YBpF0pCOvQVLhg/ktQCdtJnuWvTeDEFQ5L2uJ8bFAVx5Qwc2N0n3 u802vr2JQg5QW4ECS8VkMg247naitZqgKERPf4wt1tB6nlFV70Q= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:51 2025 by rpki-client