$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k9GPrGKWplE0lE78SQ1R9S5wBrE.roa File: k9GPrGKWplE0lE78SQ1R9S5wBrE.roa (raw, json) Hash identifier: Ye/FASVd2S5iQyBoUe9viSFPvvp3pYa2+QkYQbUjI5k= Subject key identifier: 93:D1:8F:AC:62:96:A6:51:34:94:4E:FC:49:0D:51:F5:2E:70:06:B1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 364E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k9GPrGKWplE0lE78SQ1R9S5wBrE.roa Signing time: Mon 10 Feb 2025 13:54:12 +0000 ROA not before: Mon 10 Feb 2025 13:54:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13902 (0x364e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=93D18FAC6296A65134944EFC490D51F52E7006B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:9f:c9:f5:bd:66:b6:5c:20:73:bd:8b:b9: e5:43:53:76:09:7c:af:65:25:12:b5:21:74:b8:55: 38:4d:76:14:f4:4c:81:8d:c7:80:ba:38:c6:0f:b4: 2e:e9:8d:c1:1f:4d:42:c5:ab:3a:86:e0:49:4b:98: 65:1e:09:d1:21:c8:8b:27:cb:56:8b:55:c6:f0:eb: 53:d1:4a:71:43:62:75:f8:9f:92:3c:02:77:5e:85: 23:1d:69:04:ec:c4:4d:84:ec:1d:f2:b3:95:8b:d9: e7:1a:d7:36:ad:a0:9b:6a:b1:ad:7d:a1:e6:e8:b7: 07:bd:09:27:da:ee:b3:69:c3:b5:a0:2e:c5:53:3c: 29:45:cb:c3:dc:27:77:35:43:ea:8b:17:ca:ab:7b: 87:96:4d:6d:bf:cb:1d:a6:fd:92:45:ac:ba:47:2e: d7:07:23:82:72:aa:c6:5e:c2:a2:2c:83:cf:ea:ef: 98:24:58:c8:d6:14:08:d3:ef:3c:bc:5e:ef:06:e7: 35:0d:98:51:6c:51:e6:e2:bf:16:59:86:3b:47:3f: 19:4d:5f:62:fe:2e:ee:0b:70:85:d3:b8:1d:4e:1c: 1f:45:1a:60:d8:90:2d:7d:4c:95:95:20:f3:e4:60: a0:97:c2:c6:d1:6c:b2:7c:6e:b4:de:8b:9a:09:23: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D1:8F:AC:62:96:A6:51:34:94:4E:FC:49:0D:51:F5:2E:70:06:B1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k9GPrGKWplE0lE78SQ1R9S5wBrE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.242.0/23 Signature Algorithm: sha256WithRSAEncryption 61:2a:c0:5a:3a:8b:fa:5a:59:37:9b:67:4b:27:79:17:bb:7e: f5:8e:01:69:a2:69:be:8c:1e:7f:cc:4c:27:11:c8:6e:3e:e5: 36:fc:59:cf:d7:7f:1b:bb:57:05:1b:eb:19:0d:a5:95:c0:0e: 68:b8:28:e0:79:96:b2:84:df:16:c7:71:e9:f5:17:5d:e1:5d: fc:67:49:ff:88:1c:75:f3:04:09:c2:d2:a3:56:54:be:de:6f: 1f:13:7b:0f:87:cc:69:7a:5c:a9:82:70:b7:a0:09:63:65:3c: d5:bc:0e:8d:65:31:ce:67:60:22:c1:97:e3:19:bf:48:17:f4: 82:9f:2b:e6:99:13:ce:43:16:5d:d8:cf:31:07:61:29:62:f9: 2d:4c:56:39:df:d3:00:64:37:67:2b:a8:a3:08:fa:7a:41:73: 55:be:65:f3:cc:c6:41:24:4f:2c:5d:01:2d:70:11:38:f9:1a: fc:08:65:2a:61:e2:fa:64:12:19:88:6e:31:e4:55:f2:2e:89: e5:db:87:ff:d6:e8:51:b4:b8:7e:ee:eb:e4:6b:a4:f4:17:c3: db:35:a7:d8:46:07:41:54:de:1a:33:f4:48:4f:39:80:2a:d3: 7c:2b:ca:4f:bf:fd:79:c7:b2:6d:a7:fa:c3:4b:62:dd:59:80: 08:2e:5e:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkzRDE4RkFDNjI5NkE2 NTEzNDk0NEVGQzQ5MEQ1MUY1MkU3MDA2QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEpZ/J9b1mtlwgc72LueVDU3YJfK9lJRK1IXS4VThNdhT0TIGN x4C6OMYPtC7pjcEfTULFqzqG4ElLmGUeCdEhyIsny1aLVcbw61PRSnFDYnX4n5I8 AndehSMdaQTsxE2E7B3ys5WL2eca1zatoJtqsa19oebotwe9CSfa7rNpw7WgLsVT PClFy8PcJ3c1Q+qLF8qre4eWTW2/yx2m/ZJFrLpHLtcHI4JyqsZewqIsg8/q75gk WMjWFAjT7zy8Xu8G5zUNmFFsUebivxZZhjtHPxlNX2L+Lu4LcIXTuB1OHB9FGmDY kC19TJWVIPPkYKCXwsbRbLJ8brTei5oJI7/jAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUk9GPrGKWplE0lE78SQ1R9S5wBrEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2s5R1ByR0tXcGxFMGxFNzhT UTFSOVM1d0JyRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6fIwDQYJKoZIhvcNAQELBQADggEBAGEqwFo6i/paWTebZ0sneRe7fvWOAWmiab6M Hn/MTCcRyG4+5Tb8Wc/Xfxu7VwUb6xkNpZXADmi4KOB5lrKE3xbHcen1F13hXfxn Sf+IHHXzBAnC0qNWVL7ebx8Tew+HzGl6XKmCcLegCWNlPNW8Do1lMc5nYCLBl+MZ v0gX9IKfK+aZE85DFl3YzzEHYSli+S1MVjnf0wBkN2crqKMI+npBc1W+ZfPMxkEk TyxdAS1wETj5GvwIZSph4vpkEhmIbjHkVfIuieXbh//W6FG0uH7u6+RrpPQXw9s1 p9hGB0FU3hoz9EhPOYAq03wryk+//XnHsm2n+sNLYt1ZgAguXsk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:57 2025 by rpki-client