$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p1enV108RavWzIvNc9J_1vNbw0Y.roa File: p1enV108RavWzIvNc9J_1vNbw0Y.roa (raw, json) Hash identifier: J6ha31XZAVi3WS8i6x33RIf/90k1ZGDBjF/nia/Llok= Subject key identifier: A7:57:A7:57:5D:3C:45:AB:D6:CC:8B:CD:73:D2:7F:D6:F3:5B:C3:46 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34B3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p1enV108RavWzIvNc9J_1vNbw0Y.roa Signing time: Mon 10 Feb 2025 13:52:37 +0000 ROA not before: Mon 10 Feb 2025 13:52:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A757A7575D3C45ABD6CC8BCD73D27FD6F35BC346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:5c:ac:f1:34:52:c1:45:89:c6:74:4f:0e: ce:30:7d:3d:02:e4:2c:17:fd:8b:62:b8:05:1e:2f: fb:45:c3:4b:bf:17:0e:d8:b7:8a:b4:dd:07:17:3b: d1:9d:62:04:17:7e:3a:05:27:06:a5:4e:97:9f:d6: fe:52:41:d0:30:69:90:97:d0:30:a7:2d:71:7d:0b: d1:42:b2:a9:f3:c5:ed:a8:02:95:60:e3:22:fe:65: 05:84:7a:08:63:ae:b3:02:bf:f9:9d:66:c4:51:9d: 4f:dd:6a:c9:e3:9a:1e:50:8e:8d:ea:30:d0:39:78: 0e:67:0f:74:19:59:2b:bc:1a:41:73:9e:b8:e4:4a: 51:f1:8c:de:46:39:f5:16:52:d1:5b:22:30:b6:34: 1b:20:ca:33:b2:24:2a:b7:a2:88:a1:ae:6b:68:0b: 7e:c4:74:ea:15:b2:7a:77:22:e8:7f:be:fe:54:e2: c7:44:27:7f:46:fd:3c:9d:c8:d0:bd:da:1b:83:2c: 46:12:1d:9c:92:3e:38:17:13:92:63:d9:86:42:5c: c0:bc:02:a1:b7:fe:91:a2:2b:9f:5f:70:44:35:f9: 3d:ad:08:e6:d1:12:59:bc:81:33:49:50:70:9e:c2: 51:aa:e1:c0:be:fd:5d:55:ff:68:ac:00:75:8c:c8: 35:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:57:A7:57:5D:3C:45:AB:D6:CC:8B:CD:73:D2:7F:D6:F3:5B:C3:46 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p1enV108RavWzIvNc9J_1vNbw0Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.72.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:a1:7f:8a:f3:3a:34:44:20:d9:b9:22:d6:74:2f:9a:16:70: bd:22:0a:44:03:43:65:67:ba:d7:6d:42:81:46:54:7a:cf:b4: 58:c4:72:e2:fb:34:b7:68:7b:7b:81:98:22:e2:6c:b1:69:6f: 50:eb:f3:74:40:b7:af:13:7e:37:db:f2:98:43:20:91:ff:dd: ba:34:d0:eb:47:60:41:4d:eb:d7:35:34:bd:e3:c1:5b:5b:19: 89:91:30:2a:78:22:d9:68:a8:2f:5a:78:04:3c:a3:93:27:36: 69:7b:91:55:55:b9:b5:9e:64:4e:19:cf:84:bc:d1:b0:4c:4c: 16:37:5a:e8:83:f2:c9:c3:fe:56:2a:73:7a:37:90:4f:a3:fa: 47:d5:f4:ef:55:c5:da:e3:cf:58:42:d3:87:60:72:d8:ac:2d: 1a:74:2d:6a:e8:5c:64:43:17:38:87:2c:fd:6b:61:22:67:53: 10:17:7a:cf:c2:d9:f7:9e:b8:08:3c:23:e9:1e:4d:1a:76:10: 94:1f:97:1d:fe:ba:06:e3:a4:3b:3c:51:5b:c5:3b:3d:9b:e7: ed:dd:d7:fb:a8:35:a9:14:61:c4:56:b6:9d:f3:41:8b:0c:a6: c7:0f:7f:2e:22:33:2d:54:ad:cd:83:1c:62:6e:be:66:33:24: d2:7e:be:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE3NTdBNzU3NUQzQzQ1 QUJENkNDOEJDRDczRDI3RkQ2RjM1QkMzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7mlys8TRSwUWJxnRPDs4wfT0C5CwX/YtiuAUeL/tFw0u/Fw7Y t4q03QcXO9GdYgQXfjoFJwalTpef1v5SQdAwaZCX0DCnLXF9C9FCsqnzxe2oApVg 4yL+ZQWEeghjrrMCv/mdZsRRnU/dasnjmh5Qjo3qMNA5eA5nD3QZWSu8GkFznrjk SlHxjN5GOfUWUtFbIjC2NBsgyjOyJCq3ooihrmtoC37EdOoVsnp3Iuh/vv5U4sdE J39G/TydyNC92huDLEYSHZySPjgXE5Jj2YZCXMC8AqG3/pGiK59fcEQ1+T2tCObR Elm8gTNJUHCewlGq4cC+/V1V/2isAHWMyDWfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUp1enV108RavWzIvNc9J/1vNbw0YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3AxZW5WMTA4UmF2V3pJdk5j OUpfMXZOYncwWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6UgwDQYJKoZIhvcNAQELBQADggEBAB6hf4rzOjREINm5ItZ0L5oWcL0iCkQDQ2Vn utdtQoFGVHrPtFjEcuL7NLdoe3uBmCLibLFpb1Dr83RAt68Tfjfb8phDIJH/3bo0 0OtHYEFN69c1NL3jwVtbGYmRMCp4ItloqC9aeAQ8o5MnNml7kVVVubWeZE4Zz4S8 0bBMTBY3WuiD8snD/lYqc3o3kE+j+kfV9O9Vxdrjz1hC04dgctisLRp0LWroXGRD FziHLP1rYSJnUxAXes/C2feeuAg8I+keTRp2EJQflx3+ugbjpDs8UVvFOz2b5+3d 1/uoNakUYcRWtp3zQYsMpscPfy4iMy1Urc2DHGJuvmYzJNJ+vpk= -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:01 2025 by rpki-client