$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iFhRMtb3OZ0dv6AMI1zSTD2jYwk.roa File: iFhRMtb3OZ0dv6AMI1zSTD2jYwk.roa (raw, json) Hash identifier: zuQOCaQIUmG0azPs0THHXKWE5XM5HjyphYLQrsr6th4= Subject key identifier: 88:58:51:32:D6:F7:39:9D:1D:BF:A0:0C:23:5C:D2:4C:3D:A3:63:09 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34B8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iFhRMtb3OZ0dv6AMI1zSTD2jYwk.roa Signing time: Mon 10 Feb 2025 13:52:38 +0000 ROA not before: Mon 10 Feb 2025 13:52:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.48.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13496 (0x34b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=88585132D6F7399D1DBFA00C235CD24C3DA36309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:12:cc:6c:6c:28:b2:b4:f0:0d:fe:8a:f4: 00:05:3c:83:9b:5f:40:13:ee:92:0b:dd:0e:da:ff: 66:74:6c:de:6f:43:5f:48:76:78:6c:a3:01:80:a1: 95:d1:44:d7:6c:bf:8b:0b:67:54:f0:7a:77:5e:6f: e8:94:ca:87:f2:7c:a9:03:b0:c1:d9:79:b3:02:5f: e5:b8:3d:12:dd:68:67:aa:9d:61:30:f7:16:db:f4: 96:98:e4:fd:03:50:66:38:b5:4f:de:cc:25:e5:e1: 1b:18:e5:bf:2a:bd:b0:e8:98:e3:a8:6c:36:05:b0: af:83:78:10:5a:45:ea:81:75:50:64:bb:9b:bf:ac: 32:77:be:a8:82:db:ae:a6:c9:18:52:45:5a:ae:c4: a3:85:2b:fb:f6:01:7d:ad:47:ff:11:94:e0:c9:a5: b7:ed:06:e9:69:fc:94:86:c1:ec:23:4b:0a:0a:bc: 4b:b6:12:76:8a:bd:8e:2f:97:04:d9:37:67:ed:82: a0:42:0b:a9:d3:e1:93:71:2e:cf:5d:dd:fe:a3:40: 08:4e:ca:25:eb:ea:1a:57:91:88:34:2d:06:15:49: 71:ec:ef:a0:ed:7e:45:41:72:e5:bc:a0:b8:c7:dd: 82:36:c7:2d:81:f2:79:00:76:f6:83:35:5f:f9:ab: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:58:51:32:D6:F7:39:9D:1D:BF:A0:0C:23:5C:D2:4C:3D:A3:63:09 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iFhRMtb3OZ0dv6AMI1zSTD2jYwk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.48.0/21 Signature Algorithm: sha256WithRSAEncryption 46:3e:9c:d4:11:2c:2e:8c:7c:08:60:02:6b:92:6f:35:8c:e6: fd:a1:df:33:5f:eb:e6:72:b3:3e:75:72:e1:43:4d:97:cd:30: e8:a1:6d:e9:8b:bf:77:a5:9f:23:17:54:44:c4:5a:a7:d6:b0: 83:1b:49:b3:b9:37:0f:46:84:1a:9a:20:8c:95:f9:34:fb:53: 2b:18:bf:40:55:a2:a1:9f:5c:09:00:a5:b8:db:10:92:71:fe: e6:57:9c:df:ba:c9:fb:eb:53:95:34:f6:53:ca:42:41:b5:28: 1f:82:a5:6c:1a:cc:17:7c:8e:d6:51:a1:15:b8:da:ab:ba:ed: a2:62:c1:e6:a5:0a:33:c1:50:68:f0:78:0d:86:0f:2b:31:ba: 20:ce:ca:e6:0a:1e:dd:11:89:cd:19:59:0f:d6:15:70:25:74: b2:55:c2:d8:54:c0:86:e2:d9:c2:32:78:ca:32:f4:71:e5:de: e9:c5:72:64:76:89:ef:f8:01:6a:54:8a:2e:77:de:7f:42:28: d9:ce:24:61:c9:e4:7b:6d:9f:f8:86:9c:48:c9:52:fa:94:ff: 4f:7a:44:7b:1a:b5:b4:63:36:9e:10:64:1a:ed:a3:fa:f7:6c: 36:6e:8f:5c:03:43:b2:e8:17:b3:8c:60:28:ad:6c:82:c2:1f: 50:45:58:97 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4NTg1MTMyRDZGNzM5 OUQxREJGQTAwQzIzNUNEMjRDM0RBMzYzMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYthLMbGwosrTwDf6K9AAFPIObX0AT7pIL3Q7a/2Z0bN5vQ19I dnhsowGAoZXRRNdsv4sLZ1Twendeb+iUyofyfKkDsMHZebMCX+W4PRLdaGeqnWEw 9xbb9JaY5P0DUGY4tU/ezCXl4RsY5b8qvbDomOOobDYFsK+DeBBaReqBdVBku5u/ rDJ3vqiC266myRhSRVquxKOFK/v2AX2tR/8RlODJpbftBulp/JSGwewjSwoKvEu2 EnaKvY4vlwTZN2ftgqBCC6nT4ZNxLs9d3f6jQAhOyiXr6hpXkYg0LQYVSXHs76Dt fkVBcuW8oLjH3YI2xy2B8nkAdvaDNV/5q20/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiFhRMtb3OZ0dv6AMI1zSTD2jYwkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lGaFJNdGIzT1owZHY2QU1J MXpTVEQyall3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wzAwDQYJKoZIhvcNAQELBQADggEBAEY+nNQRLC6MfAhgAmuSbzWM5v2h3zNf6+Zy sz51cuFDTZfNMOihbemLv3elnyMXVETEWqfWsIMbSbO5Nw9GhBqaIIyV+TT7UysY v0BVoqGfXAkApbjbEJJx/uZXnN+6yfvrU5U09lPKQkG1KB+CpWwazBd8jtZRoRW4 2qu67aJiwealCjPBUGjweA2GDysxuiDOyuYKHt0Ric0ZWQ/WFXAldLJVwthUwIbi 2cIyeMoy9HHl3unFcmR2ie/4AWpUii533n9CKNnOJGHJ5Httn/iGnEjJUvqU/096 RHsatbRjNp4QZBrto/r3bDZuj1wDQ7LoF7OMYCitbILCH1BFWJc= -----END CERTIFICATE-----Generated at Wed Feb 19 21:59:19 2025 by rpki-client