$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pc8cEa9ig4ZvVPZVNIjkQzD62zk.roa File: pc8cEa9ig4ZvVPZVNIjkQzD62zk.roa (raw, json) Hash identifier: lf2ukOHfFARum4eveBwagEbVAldzWGQfLnDS5ja8FAk= Subject key identifier: A5:CF:1C:11:AF:62:83:86:6F:54:F6:55:34:88:E4:43:30:FA:DB:39 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3568 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pc8cEa9ig4ZvVPZVNIjkQzD62zk.roa Signing time: Mon 10 Feb 2025 13:53:19 +0000 ROA not before: Mon 10 Feb 2025 13:53:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.120.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13672 (0x3568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A5CF1C11AF6283866F54F6553488E44330FADB39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6f:7a:43:71:05:d8:c2:9d:38:41:22:77:bb: 94:c6:a1:6a:57:a7:49:11:ff:b0:20:8d:b9:b7:d9: 9f:ad:77:58:9a:e8:b4:ac:dc:3f:6f:27:d6:90:80: aa:51:c7:43:af:96:0c:f1:89:f0:e8:50:27:e3:34: b6:cb:9e:e9:e7:73:a2:f5:ab:2a:fc:ae:61:fd:d8: 28:08:8a:7b:44:ba:af:ed:ea:81:2d:c6:8f:ad:83: 76:1a:48:ec:33:6e:ba:64:7c:8b:f8:77:bd:b6:33: 0e:bb:cc:65:3a:ee:00:51:4b:e8:27:69:23:3f:41: d7:58:a8:47:92:c6:24:b0:a5:ed:6b:6e:3b:b0:21: ef:c1:66:ff:85:2e:6c:cf:52:41:f6:0b:86:bf:f6: c2:2c:f4:27:c1:76:15:e9:e2:f5:ff:9f:12:ce:b5: 45:2f:64:57:54:c5:58:97:b8:9e:49:07:8f:0d:bb: fd:a8:05:89:27:c6:d4:28:1d:83:b3:ae:7f:47:d7: 5d:c0:8c:99:5d:ab:a3:c4:8c:9e:44:a2:0b:31:58: 4a:1f:c3:a9:f6:d3:73:30:1e:12:7d:4e:66:2f:1b: 5b:af:8d:2b:38:dc:dc:81:87:1f:3f:d5:27:71:2c: 39:78:0a:8c:cb:cd:3c:5b:0f:96:bb:59:6c:ff:99: 31:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CF:1C:11:AF:62:83:86:6F:54:F6:55:34:88:E4:43:30:FA:DB:39 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pc8cEa9ig4ZvVPZVNIjkQzD62zk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.120.128/25 Signature Algorithm: sha256WithRSAEncryption 7f:5d:d3:a0:20:74:2a:ff:99:a3:2c:b4:3a:e1:1c:34:9c:32: be:57:e6:04:76:71:eb:c9:d3:ad:cf:e3:e8:44:fd:76:0c:d7: 2b:1c:95:10:ed:30:06:67:8d:eb:d9:66:b9:8a:bb:e6:2c:4d: 07:c5:9c:6c:84:56:ca:ea:2d:c2:9a:30:5c:06:01:cb:c1:93: 3d:cb:e0:52:4b:6a:af:47:73:d8:2f:c9:3f:d5:05:54:d6:52: 00:ee:89:65:3b:f5:b8:51:8a:63:61:19:1b:d4:bf:5f:0f:6d: 34:f9:0f:e8:fc:f1:c7:2e:9f:dd:9c:e0:73:c0:4a:35:d0:a7: 64:29:09:5a:ab:0b:b7:53:62:0c:0d:ae:e8:71:d1:eb:94:49: f1:fd:00:2c:f0:38:eb:97:36:4c:c0:82:d7:1b:0b:c4:68:a2: 19:73:9f:c5:5c:98:40:1a:a9:58:f3:f8:f7:f9:0e:22:c6:75: 6f:e2:91:b1:02:6d:77:1c:7c:f0:30:fc:37:56:9d:49:80:c2: fe:35:f4:d2:11:45:65:99:cd:c6:f7:09:56:2e:04:4d:53:29: d0:84:6c:c4:32:fd:5c:b6:ed:5d:03:16:f7:04:62:f3:44:34: 7c:e9:b8:41:26:2e:c7:99:0d:25:cc:4b:da:f1:2e:11:e3:d6: 6c:3f:d0:ac -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1Q0YxQzExQUY2Mjgz ODY2RjU0RjY1NTM0ODhFNDQzMzBGQURCMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVb3pDcQXYwp04QSJ3u5TGoWpXp0kR/7Agjbm32Z+td1ia6LSs 3D9vJ9aQgKpRx0OvlgzxifDoUCfjNLbLnunnc6L1qyr8rmH92CgIintEuq/t6oEt xo+tg3YaSOwzbrpkfIv4d722Mw67zGU67gBRS+gnaSM/QddYqEeSxiSwpe1rbjuw Ie/BZv+FLmzPUkH2C4a/9sIs9CfBdhXp4vX/nxLOtUUvZFdUxViXuJ5JB48Nu/2o BYknxtQoHYOzrn9H113AjJldq6PEjJ5EogsxWEofw6n203MwHhJ9TmYvG1uvjSs4 3NyBhx8/1SdxLDl4CozLzTxbD5a7WWz/mTG3AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUpc8cEa9ig4ZvVPZVNIjkQzD62zkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BjOGNFYTlpZzRadlZQWlZO SWprUXpENjJ6ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THiAMA0GCSqGSIb3DQEBCwUAA4IBAQB/XdOgIHQq/5mjLLQ64Rw0nDK+V+YEdnHr ydOtz+PoRP12DNcrHJUQ7TAGZ43r2Wa5irvmLE0HxZxshFbK6i3CmjBcBgHLwZM9 y+BSS2qvR3PYL8k/1QVU1lIA7ollO/W4UYpjYRkb1L9fD200+Q/o/PHHLp/dnOBz wEo10KdkKQlaqwu3U2IMDa7ocdHrlEnx/QAs8DjrlzZMwILXGwvEaKIZc5/FXJhA GqlY8/j3+Q4ixnVv4pGxAm13HHzwMPw3Vp1JgML+NfTSEUVlmc3G9wlWLgRNUynQ hGzEMv1ctu1dAxb3BGLzRDR86bhBJi7HmQ0lzEva8S4R49ZsP9Cs -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:32 2025 by rpki-client