$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oDqX2sDB4SNgFVuy_IepX_jMZTM.roa File: oDqX2sDB4SNgFVuy_IepX_jMZTM.roa (raw, json) Hash identifier: ji3PlaoHTbnIY0uIgolYUQvyondXTVp4//iPg/JzzOs= Subject key identifier: A0:3A:97:DA:C0:C1:E1:23:60:15:5B:B2:FC:87:A9:5F:F8:CC:65:33 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3650 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oDqX2sDB4SNgFVuy_IepX_jMZTM.roa Signing time: Mon 10 Feb 2025 13:54:13 +0000 ROA not before: Mon 10 Feb 2025 13:54:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13904 (0x3650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A03A97DAC0C1E12360155BB2FC87A95FF8CC6533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:30:a8:3d:ca:8f:5b:88:56:10:a3:47:4b: 08:2c:0a:46:9c:2c:14:da:47:d5:92:e7:23:45:d1: 93:b2:16:6a:67:3b:8e:3b:db:84:bd:4f:75:0f:84: 96:3a:e1:bd:91:e4:2d:49:9f:75:f3:8e:b5:34:08: f0:b3:ed:6e:26:b0:e6:7e:93:b6:51:4e:49:fc:f0: 01:8a:9d:86:73:36:cf:fd:95:a7:65:9a:ac:80:23: c4:60:a5:a2:3d:a9:e7:94:a4:0f:bc:35:61:53:76: e0:55:b7:30:e8:8e:9f:c1:16:40:32:8c:16:ff:f6: c8:95:99:e9:e6:28:c0:4c:f2:65:b0:e3:e1:ac:48: e0:46:47:03:e8:a9:59:fe:b4:c2:0c:c1:a0:3f:d4: a0:fe:6b:53:22:73:46:71:bb:8d:ad:ba:23:f8:dc: ea:60:c5:07:2d:cd:09:9d:9b:ac:f1:4d:3a:29:38: 48:1f:16:63:b7:a7:2d:75:81:59:42:a0:b9:65:02: 0d:3f:51:6e:e4:24:5e:68:85:62:55:52:38:cf:bb: 6d:c0:3a:07:67:fa:ff:10:86:95:c4:69:9f:49:1b: d2:6c:03:a8:04:fc:0d:67:89:9a:e3:94:ae:a9:92: ad:35:1b:c9:76:3a:b3:81:5d:ff:07:db:3b:31:8d: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3A:97:DA:C0:C1:E1:23:60:15:5B:B2:FC:87:A9:5F:F8:CC:65:33 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oDqX2sDB4SNgFVuy_IepX_jMZTM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.200.0/21 Signature Algorithm: sha256WithRSAEncryption 13:e2:49:65:02:9a:47:48:fb:fd:42:73:a6:71:76:65:93:4e: a6:9a:ba:34:d5:a0:ae:cc:3b:e8:6d:e4:9c:d2:e5:a2:48:93: 65:30:33:f8:30:12:c1:c7:75:06:97:9a:cd:6b:f5:73:6e:83: 1c:15:25:4d:c9:d1:cd:74:d0:1c:67:b3:d6:85:28:d1:fa:1f: e7:1d:80:ff:31:80:78:05:9b:38:fe:2a:e0:2f:bb:be:e9:99: 88:e6:41:d9:b3:25:4f:7c:c5:09:9f:aa:54:26:74:1c:69:ad: 44:cb:42:f2:9d:2d:bf:6a:41:db:99:59:99:ec:1f:75:f7:20: 46:b9:4c:40:b5:fe:9f:6d:4a:16:80:c5:a2:64:5c:21:1d:ae: 49:50:18:ba:61:40:4d:93:e4:60:a7:52:a9:ae:0e:e2:1f:eb: 04:47:66:55:27:88:70:52:5e:9f:d9:98:18:f9:65:31:d9:66: d4:16:d5:a7:4f:71:01:1c:cf:81:4f:33:57:41:08:fb:64:f1: 2f:c3:4b:1f:01:c0:75:07:56:c4:5f:6b:27:1b:ff:56:47:69: cf:c6:9e:eb:88:07:5c:20:7d:de:b4:7b:ec:6a:b1:7d:41:61: 72:78:fb:d9:d1:5c:46:84:12:3b:16:99:2e:d1:0f:52:37:97: 3e:06:fe:85 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwM0E5N0RBQzBDMUUx MjM2MDE1NUJCMkZDODdBOTVGRjhDQzY1MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxozCoPcqPW4hWEKNHSwgsCkacLBTaR9WS5yNF0ZOyFmpnO447 24S9T3UPhJY64b2R5C1Jn3XzjrU0CPCz7W4msOZ+k7ZRTkn88AGKnYZzNs/9ladl mqyAI8RgpaI9qeeUpA+8NWFTduBVtzDojp/BFkAyjBb/9siVmenmKMBM8mWw4+Gs SOBGRwPoqVn+tMIMwaA/1KD+a1Mic0Zxu42tuiP43OpgxQctzQmdm6zxTTopOEgf FmO3py11gVlCoLllAg0/UW7kJF5ohWJVUjjPu23AOgdn+v8QhpXEaZ9JG9JsA6gE /A1niZrjlK6pkq01G8l2OrOBXf8H2zsxjSnHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoDqX2sDB4SNgFVuy/IepX/jMZTMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29EcVgyc0RCNFNOZ0ZWdXlf SWVwWF9qTVpUTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6MgwDQYJKoZIhvcNAQELBQADggEBABPiSWUCmkdI+/1Cc6ZxdmWTTqaaujTVoK7M O+ht5JzS5aJIk2UwM/gwEsHHdQaXms1r9XNugxwVJU3J0c100Bxns9aFKNH6H+cd gP8xgHgFmzj+KuAvu77pmYjmQdmzJU98xQmfqlQmdBxprUTLQvKdLb9qQduZWZns H3X3IEa5TEC1/p9tShaAxaJkXCEdrklQGLphQE2T5GCnUqmuDuIf6wRHZlUniHBS Xp/ZmBj5ZTHZZtQW1adPcQEcz4FPM1dBCPtk8S/DSx8BwHUHVsRfaycb/1ZHac/G nuuIB1wgfd60e+xqsX1BYXJ4+9nRXEaEEjsWmS7RD1I3lz4G/oU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:44 2025 by rpki-client