$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l-dstmvSkOaNSQ12GlTvPaYfW4Q.roa File: l-dstmvSkOaNSQ12GlTvPaYfW4Q.roa (raw, json) Hash identifier: MjUbJCpIBnsEsMaCeVi2i1jXfw4A3IxLwF7tcoDkFfM= Subject key identifier: 97:E7:6C:B6:6B:D2:90:E6:8D:49:0D:76:1A:54:EF:3D:A6:1F:5B:84 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3439 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l-dstmvSkOaNSQ12GlTvPaYfW4Q.roa Signing time: Mon 10 Feb 2025 13:52:11 +0000 ROA not before: Mon 10 Feb 2025 13:52:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 2407:4d00:ff0a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13369 (0x3439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=97E76CB66BD290E68D490D761A54EF3DA61F5B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:2f:89:2b:16:43:df:72:87:41:1f:49:cd: bd:3f:9a:55:60:55:0f:c6:27:e8:7e:2f:9c:af:5e: b2:5a:e2:2a:df:76:f0:3f:7c:6f:31:c0:c6:67:b1: 9f:7c:e0:28:a3:ff:18:7a:db:ab:d9:c9:e7:5f:84: 51:a2:ae:53:c2:99:f4:38:01:57:ef:96:46:ad:d9: f6:88:ce:d1:6a:c0:e3:8a:15:0d:86:a6:20:16:04: 7e:a3:e2:3c:4f:1a:11:7f:29:c3:4d:39:1d:6b:d8: 32:9c:6d:18:94:97:f3:ad:3b:6d:d3:bd:86:b6:89: 5b:77:dc:a2:02:d6:07:49:fa:ad:b9:b4:44:05:9d: 87:64:cc:22:1f:17:80:de:76:2a:b1:80:83:c7:b8: 8d:08:c2:ca:bf:c2:02:08:c4:be:40:89:67:26:59: e9:25:1c:54:ce:dc:52:c2:b0:8b:97:b9:86:83:09: 6c:a5:ef:2e:de:d9:94:d7:ec:b1:4a:a3:1e:3c:92: 12:bd:e2:23:80:70:2a:02:3a:86:a4:2e:6a:24:04: 24:0e:27:4f:0a:51:c0:e8:71:d1:2a:af:69:af:95: 86:f5:96:8d:2c:5c:ea:ec:92:e2:10:b5:21:a8:e7: 51:ce:5c:f2:72:b2:09:76:75:a5:5e:dc:10:fe:be: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E7:6C:B6:6B:D2:90:E6:8D:49:0D:76:1A:54:EF:3D:A6:1F:5B:84 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l-dstmvSkOaNSQ12GlTvPaYfW4Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff0a::/48 Signature Algorithm: sha256WithRSAEncryption 8a:60:53:0e:f5:8d:08:28:c6:75:14:a1:63:77:47:7d:97:ce: b6:ce:c9:2a:95:fe:ce:87:a0:17:e9:37:88:a8:d1:d5:2b:bf: 73:f0:50:6d:42:9d:f4:51:96:bb:0b:b6:e0:fa:39:68:e8:88: 2c:9d:db:6f:f2:11:22:71:e9:d3:70:63:b0:de:06:52:a1:b0: 26:f4:88:87:60:aa:c4:7a:01:6a:94:08:6a:c0:e4:c0:9e:6f: ec:de:54:12:50:2e:50:54:7a:88:9a:25:1e:eb:f7:0c:5b:8c: 01:9a:81:ba:a7:44:6c:b5:26:44:62:6a:48:ac:80:53:65:12: d4:9a:96:64:60:e3:61:f8:b1:ea:8e:52:a5:af:77:01:7e:1f: f2:fd:54:9c:84:d9:e4:ba:fb:85:28:a4:1f:bb:43:74:d1:19: 65:e4:b5:c1:9e:96:e5:6a:ba:78:e7:9e:4d:86:a7:de:ee:29: 86:f5:ad:27:54:a4:1a:a7:93:d3:e7:05:ea:d0:e1:07:fd:87: ac:86:35:77:ce:9d:9f:39:01:d9:3b:44:9d:25:69:78:62:45: 8c:44:fb:d8:cc:19:0c:df:3e:b8:ec:52:00:0a:75:64:d0:d7: 29:b2:93:b3:a5:c6:b7:4d:8a:68:19:89:47:cf:d4:0a:02:03: bc:02:98:ca -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICNDkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3RTc2Q0I2NkJEMjkw RTY4RDQ5MEQ3NjFBNTRFRjNEQTYxRjVCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsyy+JKxZD33KHQR9Jzb0/mlVgVQ/GJ+h+L5yvXrJa4irfdvA/ fG8xwMZnsZ984Cij/xh626vZyedfhFGirlPCmfQ4AVfvlkat2faIztFqwOOKFQ2G piAWBH6j4jxPGhF/KcNNOR1r2DKcbRiUl/OtO23TvYa2iVt33KIC1gdJ+q25tEQF nYdkzCIfF4DediqxgIPHuI0Iwsq/wgIIxL5AiWcmWeklHFTO3FLCsIuXuYaDCWyl 7y7e2ZTX7LFKox48khK94iOAcCoCOoakLmokBCQOJ08KUcDocdEqr2mvlYb1lo0s XOrskuIQtSGo51HOXPJysgl2daVe3BD+vmjLAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUl+dstmvSkOaNSQ12GlTvPaYfW4QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2wtZHN0bXZTa09hTlNRMTJH bFR2UGFZZlc0US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wowDQYJKoZIhvcNAQELBQADggEBAIpgUw71jQgoxnUUoWN3R32XzrbOySqV /s6HoBfpN4io0dUrv3PwUG1CnfRRlrsLtuD6OWjoiCyd22/yESJx6dNwY7DeBlKh sCb0iIdgqsR6AWqUCGrA5MCeb+zeVBJQLlBUeoiaJR7r9wxbjAGagbqnRGy1JkRi akisgFNlEtSalmRg42H4seqOUqWvdwF+H/L9VJyE2eS6+4UopB+7Q3TRGWXktcGe luVqunjnnk2Gp97uKYb1rSdUpBqnk9PnBerQ4Qf9h6yGNXfOnZ85Adk7RJ0laXhi RYxE+9jMGQzfPrjsUgAKdWTQ1ymyk7OlxrdNimgZiUfP1AoCA7wCmMo= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:34 2025 by rpki-client