$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lGOPMeegxJoeQfud70k8nlEPEIY.roa File: lGOPMeegxJoeQfud70k8nlEPEIY.roa (raw, json) Hash identifier: 9kGXIOPKUB0kGAkC0BojmgvnptZG20pzuRLWSk3KHvo= Subject key identifier: 94:63:8F:31:E7:A0:C4:9A:1E:41:FB:9D:EF:49:3C:9E:51:0F:10:86 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 363E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lGOPMeegxJoeQfud70k8nlEPEIY.roa Signing time: Mon 10 Feb 2025 13:54:08 +0000 ROA not before: Mon 10 Feb 2025 13:54:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 09:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13886 (0x363e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=94638F31E7A0C49A1E41FB9DEF493C9E510F1086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:d8:be:36:24:b4:a5:5e:9e:fd:bc:6a:b6: 1d:4c:7f:f0:05:21:44:76:ad:c2:66:8a:56:8b:8c: 0d:89:0a:fe:67:1d:bb:8f:2b:ae:fc:4b:8f:10:e1: 67:f1:56:37:0b:14:c7:c9:87:92:61:2e:60:84:d2: bb:42:2c:f3:19:d9:41:3b:45:17:ed:f9:64:f0:e4: fc:84:c1:7c:1d:03:7c:ea:f3:59:66:39:82:62:04: 11:78:80:34:30:4c:77:35:c4:24:14:80:33:91:3a: 15:e7:00:b4:a5:2f:84:84:e5:46:c2:f3:b2:cc:3b: 91:82:41:1b:f2:b5:03:fe:72:07:9b:11:f8:46:6b: 7c:1e:83:a7:7c:17:95:94:9f:f0:da:83:41:0a:15: ce:b9:52:0c:09:24:e3:e5:2c:8e:7f:d0:8e:74:0b: 54:c0:31:37:41:ad:05:c4:74:aa:7f:b4:2c:f7:58: 38:de:9d:60:ff:11:38:ca:ba:83:29:ac:69:90:d5: 90:a4:a7:e2:61:c5:0b:50:a7:83:26:e2:d4:f2:33: fd:f2:b7:07:5c:21:77:25:8b:cb:b8:1e:4f:57:38: bd:b4:3b:54:d3:ba:b6:d7:57:45:96:8c:e9:9d:08: 69:c8:d4:b5:6c:c5:9a:11:7b:f5:ea:28:a7:a6:5b: 51:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:63:8F:31:E7:A0:C4:9A:1E:41:FB:9D:EF:49:3C:9E:51:0F:10:86 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lGOPMeegxJoeQfud70k8nlEPEIY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.48.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:25:3e:d4:19:54:5c:45:e4:21:fc:31:72:99:10:6b:5f:ed: 56:a6:7d:52:62:3c:22:d8:29:cc:f5:36:22:fa:9d:70:3e:77: ad:32:e2:12:82:f2:3d:b9:1e:1c:54:f7:5d:f5:97:32:6b:dc: ec:6c:38:f9:6f:eb:90:94:26:39:f5:b9:b7:b2:b4:79:ac:e7: 54:1f:be:e0:60:50:51:8a:77:24:d1:5a:fc:52:f8:3d:f1:cd: d2:bf:b0:08:34:80:6b:40:37:ae:87:fe:a9:10:e6:4b:a4:61: 67:85:7c:b4:d3:9b:b0:9c:de:9d:00:70:70:46:66:7c:81:f3: e8:d8:d5:cd:04:fe:8d:3d:ff:ab:7e:2b:4a:89:4e:39:cf:39: 44:dd:8e:55:5b:99:80:35:84:d5:99:98:69:9c:12:8a:97:4e: 97:6d:15:be:6e:8b:3d:9a:85:6e:47:96:33:84:82:2f:82:b3: 7f:08:ef:cf:1d:18:28:16:3b:13:61:11:76:f0:b2:7a:23:e2: 39:64:5c:30:16:e6:b2:c2:79:11:67:aa:03:8d:a4:a1:66:7d: 67:f0:7c:3e:22:d3:77:a2:ee:f9:47:7d:bf:56:26:e6:0d:c4: 13:51:90:fc:e5:eb:e7:92:9f:a9:f5:bb:55:9c:ed:c4:a0:2d: 85:02:dc:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNj4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0NjM4RjMxRTdBMEM0 OUExRTQxRkI5REVGNDkzQzlFNTEwRjEwODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRANi+NiS0pV6e/bxqth1Mf/AFIUR2rcJmilaLjA2JCv5nHbuP K678S48Q4WfxVjcLFMfJh5JhLmCE0rtCLPMZ2UE7RRft+WTw5PyEwXwdA3zq81lm OYJiBBF4gDQwTHc1xCQUgDOROhXnALSlL4SE5UbC87LMO5GCQRvytQP+cgebEfhG a3weg6d8F5WUn/Dag0EKFc65UgwJJOPlLI5/0I50C1TAMTdBrQXEdKp/tCz3WDje nWD/ETjKuoMprGmQ1ZCkp+JhxQtQp4Mm4tTyM/3ytwdcIXcli8u4Hk9XOL20O1TT urbXV0WWjOmdCGnI1LVsxZoRe/XqKKemW1EbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlGOPMeegxJoeQfud70k8nlEPEIYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xHT1BNZWVneEpvZVFmdWQ3 MGs4bmxFUEVJWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6DAwDQYJKoZIhvcNAQELBQADggEBAGslPtQZVFxF5CH8MXKZEGtf7VamfVJiPCLY Kcz1NiL6nXA+d60y4hKC8j25HhxU9131lzJr3OxsOPlv65CUJjn1ubeytHms51Qf vuBgUFGKdyTRWvxS+D3xzdK/sAg0gGtAN66H/qkQ5kukYWeFfLTTm7Cc3p0AcHBG ZnyB8+jY1c0E/o09/6t+K0qJTjnPOUTdjlVbmYA1hNWZmGmcEoqXTpdtFb5uiz2a hW5HljOEgi+Cs38I788dGCgWOxNhEXbwsnoj4jlkXDAW5rLCeRFnqgONpKFmfWfw fD4i03ei7vlHfb9WJuYNxBNRkPzl6+eSn6n1u1Wc7cSgLYUC3Mg= -----END CERTIFICATE-----Generated at Wed Jun 11 06:17:17 2025 by rpki-client