$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jUdHJaBphoKwOsZ0hhtPmeqMbko.roa File: jUdHJaBphoKwOsZ0hhtPmeqMbko.roa (raw, json) Hash identifier: YIw4RFCFp5JGUR9ZHd30ixCiiZK5EUZGtcwQ2WNr12A= Subject key identifier: 8D:47:47:25:A0:69:86:82:B0:3A:C6:74:86:1B:4F:99:EA:8C:6E:4A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3488 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jUdHJaBphoKwOsZ0hhtPmeqMbko.roa Signing time: Mon 10 Feb 2025 13:52:28 +0000 ROA not before: Mon 10 Feb 2025 13:52:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.8.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13448 (0x3488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8D474725A0698682B03AC674861B4F99EA8C6E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bb:73:47:e8:bf:a2:87:88:41:8e:44:c9:81: 21:74:b1:a8:88:b0:f9:3e:4f:23:dc:27:ba:d5:18: db:fd:31:c1:10:3f:2f:71:47:05:b7:4a:76:5a:4b: 83:f6:7d:fc:5c:b9:d2:4a:95:65:ee:f6:07:fc:5a: 41:2e:c0:c8:80:77:66:25:48:82:c1:b2:fa:f1:48: 81:25:e7:1c:2c:47:e4:9e:dc:d0:ef:ea:6a:fb:74: f9:14:3a:0c:41:46:ab:23:0d:0f:33:cb:a4:5b:5d: 43:10:8b:2f:61:e2:e5:80:26:0b:24:47:5f:bf:5c: 37:b5:6f:17:ac:83:70:ce:49:0e:7d:76:54:1b:60: f6:bb:8c:c3:80:56:f3:06:84:62:f2:24:00:07:00: 4b:b2:1a:70:8b:d5:f2:30:45:6c:bd:3b:f4:ed:dd: 61:56:68:a5:2b:38:31:f6:1a:2a:b5:4f:6a:7d:70: 94:26:a3:dc:47:d3:bb:22:99:c0:3b:fa:9d:63:b6: 90:98:89:65:7a:07:ba:e7:b5:fa:ec:f1:49:e5:a6: da:8f:32:1a:c5:42:33:59:5e:0d:f1:69:f4:3d:28: 16:ad:04:38:26:92:cd:e5:17:c2:0b:50:2c:46:d7: d5:71:4c:2d:65:00:04:e8:8d:fb:4c:32:0d:85:8d: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:47:47:25:A0:69:86:82:B0:3A:C6:74:86:1B:4F:99:EA:8C:6E:4A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jUdHJaBphoKwOsZ0hhtPmeqMbko.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.8.0/26 Signature Algorithm: sha256WithRSAEncryption 78:00:6a:4a:36:19:39:2b:71:a8:93:ce:dd:b6:39:9a:ab:84: 0a:24:3d:46:37:b0:dd:65:14:c9:a7:f2:e2:34:a8:ad:f2:84: d2:84:ef:47:92:39:e5:52:ff:f8:dd:09:4b:3e:3f:8e:49:44: 35:53:8c:21:fa:f9:f8:87:44:81:25:9c:72:d1:29:2a:43:dc: 73:04:50:5e:0d:37:b2:65:a7:b7:8f:90:b9:e2:a4:11:01:25: e0:81:cd:a7:7c:7c:20:77:a0:c3:8f:fd:46:18:39:3b:f0:87: 93:dc:08:8a:b7:24:ef:ea:ae:a6:bc:31:b2:84:bc:59:66:29: 5a:cd:40:46:cd:b4:c9:10:43:c3:3c:15:db:15:d9:1e:0e:ff: 84:d0:c6:39:cb:1f:c1:d1:27:b7:ca:74:b6:7e:3e:d2:44:c3: ef:c7:c3:b9:c0:28:28:78:5f:c7:2b:75:70:ee:6f:6c:93:df: 80:0a:fc:e8:b2:8a:4f:1b:e0:80:31:06:b4:48:79:43:82:dd: a4:de:59:fc:a3:89:fa:26:a6:aa:fd:47:47:a1:db:83:35:7f: ae:6d:c9:8e:64:fb:0e:d3:b5:51:c6:47:9b:26:76:e5:22:d0: 85:ec:6c:7c:01:0e:0c:19:d6:e0:94:06:81:93:d4:a4:98:fd: 14:3d:06:84 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhENDc0NzI1QTA2OTg2 ODJCMDNBQzY3NDg2MUI0Rjk5RUE4QzZFNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiu3NH6L+ih4hBjkTJgSF0saiIsPk+TyPcJ7rVGNv9McEQPy9x RwW3SnZaS4P2ffxcudJKlWXu9gf8WkEuwMiAd2YlSILBsvrxSIEl5xwsR+Se3NDv 6mr7dPkUOgxBRqsjDQ8zy6RbXUMQiy9h4uWAJgskR1+/XDe1bxesg3DOSQ59dlQb YPa7jMOAVvMGhGLyJAAHAEuyGnCL1fIwRWy9O/Tt3WFWaKUrODH2Giq1T2p9cJQm o9xH07simcA7+p1jtpCYiWV6B7rntfrs8UnlptqPMhrFQjNZXg3xafQ9KBatBDgm ks3lF8ILUCxG19VxTC1lAATojftMMg2FjQVhAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUjUdHJaBphoKwOsZ0hhtPmeqMbkowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pVZEhKYUJwaG9Ld09zWjBo aHRQbWVxTWJrby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wwgAMA0GCSqGSIb3DQEBCwUAA4IBAQB4AGpKNhk5K3Gok87dtjmaq4QKJD1GN7Dd ZRTJp/LiNKit8oTShO9HkjnlUv/43QlLPj+OSUQ1U4wh+vn4h0SBJZxy0SkqQ9xz BFBeDTeyZae3j5C54qQRASXggc2nfHwgd6DDj/1GGDk78IeT3AiKtyTv6q6mvDGy hLxZZilazUBGzbTJEEPDPBXbFdkeDv+E0MY5yx/B0Se3ynS2fj7SRMPvx8O5wCgo eF/HK3Vw7m9sk9+ACvzosopPG+CAMQa0SHlDgt2k3ln8o4n6Jqaq/UdHoduDNX+u bcmOZPsO07VRxkebJnblItCF7Gx8AQ4MGdbglAaBk9SkmP0UPQaE -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:02 2025 by rpki-client