$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hVDEx0InpSIbN9xju6VB8TLNajg.roa File: hVDEx0InpSIbN9xju6VB8TLNajg.roa (raw, json) Hash identifier: yESfCdPuVi8Ieq/HrhxHzvyDR5QQLfl7W3qC6PY9ILQ= Subject key identifier: 85:50:C4:C7:42:27:A5:22:1B:37:DC:63:BB:A5:41:F1:32:CD:6A:38 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3617 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hVDEx0InpSIbN9xju6VB8TLNajg.roa Signing time: Mon 10 Feb 2025 13:53:58 +0000 ROA not before: Mon 10 Feb 2025 13:53:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 2407:4d00:ff04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13847 (0x3617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8550C4C74227A5221B37DC63BBA541F132CD6A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d0:d7:72:b4:ee:7f:29:02:7d:75:3b:26:ee: 78:bb:dc:78:2d:12:2a:d6:35:b6:3e:08:d1:9a:ec: 85:a8:62:e4:3d:7c:69:74:61:d3:16:41:0c:98:71: be:5f:b3:ad:29:71:86:ff:d8:75:38:d2:47:1c:fd: 3d:72:3e:ee:d4:9b:01:16:f9:4f:f1:49:38:57:35: ae:21:00:7e:00:5e:d0:97:c5:dc:7f:7e:4d:fb:5d: ff:d0:f8:78:9b:3a:28:4a:91:20:0f:4d:96:79:aa: 3b:bb:98:b5:48:f9:df:2f:36:f7:f3:54:69:46:2f: 28:d3:04:ed:05:f3:81:29:a4:da:a7:ec:73:55:97: bd:fb:38:f0:87:98:cc:4c:c0:53:ba:7f:cd:a0:72: 4c:73:c8:73:1a:bf:f2:e6:31:4d:c9:33:9d:fe:12: 7f:0a:c0:4f:c8:54:20:41:26:a8:e1:d4:4c:d5:9a: e3:b0:c4:fb:c0:4a:e2:3e:73:57:23:71:d8:6c:cb: c6:e8:63:39:cd:88:ee:f1:e9:80:81:c3:74:89:35: 38:a6:77:7d:46:11:49:4c:8b:a5:22:71:6e:5b:e1: a1:0d:27:98:59:39:47:d0:0f:02:cf:94:95:39:0d: 26:97:0a:fc:9a:72:79:2e:92:14:3d:da:94:2e:2e: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:50:C4:C7:42:27:A5:22:1B:37:DC:63:BB:A5:41:F1:32:CD:6A:38 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hVDEx0InpSIbN9xju6VB8TLNajg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff04::/48 Signature Algorithm: sha256WithRSAEncryption 20:b6:2f:1a:b3:77:73:9d:05:86:26:f7:bb:27:6d:31:02:45: c3:b1:7c:e0:1b:d3:54:66:ef:f0:5e:3c:b6:f5:9a:9b:5a:85: 3d:87:d8:30:27:41:2c:53:e7:6a:cf:6c:78:d8:a3:48:72:ee: 53:54:64:8b:a6:a0:bd:ac:f9:77:b2:d6:e6:5e:d8:00:b5:50: 77:3e:95:2e:2c:f3:51:fe:34:e1:e2:30:75:51:cc:da:17:7e: 02:59:92:60:bc:a2:db:18:74:4d:b0:b1:f9:9d:0d:21:2d:b9: fa:cb:bd:45:84:bd:ce:69:07:3a:0c:53:7c:e1:75:4c:11:90: 52:71:36:d9:a2:85:71:ca:7b:08:da:1e:29:07:48:c9:a3:fe: b7:69:80:7c:48:55:dd:5a:24:9c:c6:88:2a:c3:58:6f:3b:f3: 75:af:00:73:a8:08:c2:3d:2c:ae:b3:96:5d:dc:e4:7c:8b:d0: 54:b7:c1:0f:7d:c6:19:a1:99:6f:57:13:b3:e5:6c:c0:d4:ee: f0:2c:b0:f4:a7:c1:ff:22:ab:fb:6a:8e:1e:70:7f:bd:7c:e2: 87:13:7a:46:9f:d4:01:26:46:61:99:7d:4f:2a:06:47:48:35: 8b:d1:ab:e4:cf:c2:cb:9d:5d:24:04:2c:32:25:7f:ff:ed:2d: 4a:df:82:a2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICNhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg1NTBDNEM3NDIyN0E1 MjIxQjM3REM2M0JCQTU0MUYxMzJDRDZBMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDm0NdytO5/KQJ9dTsm7ni73HgtEirWNbY+CNGa7IWoYuQ9fGl0 YdMWQQyYcb5fs60pcYb/2HU40kcc/T1yPu7UmwEW+U/xSThXNa4hAH4AXtCXxdx/ fk37Xf/Q+HibOihKkSAPTZZ5qju7mLVI+d8vNvfzVGlGLyjTBO0F84EppNqn7HNV l737OPCHmMxMwFO6f82gckxzyHMav/LmMU3JM53+En8KwE/IVCBBJqjh1EzVmuOw xPvASuI+c1cjcdhsy8boYznNiO7x6YCBw3SJNTimd31GEUlMi6UicW5b4aENJ5hZ OUfQDwLPlJU5DSaXCvyacnkukhQ92pQuLqqFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhVDEx0InpSIbN9xju6VB8TLNajgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hWREV4MElucFNJYk45eGp1 NlZCOFRMTmFqZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wQwDQYJKoZIhvcNAQELBQADggEBACC2Lxqzd3OdBYYm97snbTECRcOxfOAb 01Rm7/BePLb1mptahT2H2DAnQSxT52rPbHjYo0hy7lNUZIumoL2s+Xey1uZe2AC1 UHc+lS4s81H+NOHiMHVRzNoXfgJZkmC8otsYdE2wsfmdDSEtufrLvUWEvc5pBzoM U3zhdUwRkFJxNtmihXHKewjaHikHSMmj/rdpgHxIVd1aJJzGiCrDWG8783WvAHOo CMI9LK6zll3c5HyL0FS3wQ99xhmhmW9XE7PlbMDU7vAssPSnwf8iq/tqjh5wf718 4ocTekaf1AEmRmGZfU8qBkdINYvRq+TPwsudXSQELDIlf//tLUrfgqI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:08 2025 by rpki-client