$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pudoq4tm0puIiQjxAcSEPQ8ApVM.roa File: pudoq4tm0puIiQjxAcSEPQ8ApVM.roa (raw, json) Hash identifier: tpBD62NwFKnL1PFdFvhUEn68/9rBy9UwfQLKDgg2Z5s= Subject key identifier: A6:E7:68:AB:8B:66:D2:9B:88:89:08:F1:01:C4:84:3D:0F:00:A5:53 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36C0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pudoq4tm0puIiQjxAcSEPQ8ApVM.roa Signing time: Mon 10 Feb 2025 13:54:38 +0000 ROA not before: Mon 10 Feb 2025 13:54:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14016 (0x36c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A6E768AB8B66D29B888908F101C4843D0F00A553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:ae:92:2f:a9:df:be:3b:b0:ed:f4:22:2f: 1b:ca:0d:0a:5d:28:f1:bc:64:b9:3c:47:31:ee:c3: 14:56:71:b7:86:15:f9:62:78:c8:80:ca:a3:9a:cb: 96:08:b7:3c:31:48:99:f9:06:84:18:43:7a:fa:74: 9c:7f:24:8d:7f:e0:66:de:b8:46:f8:32:26:58:1c: 1b:f2:4a:3b:b2:2e:8f:4c:40:72:37:b1:f6:03:b1: 3d:ad:6d:12:6e:28:99:b6:70:6e:29:a5:ce:1b:e4: 42:21:3c:80:6c:df:f7:42:0f:0a:6c:a4:cb:cc:33: 62:77:79:ae:b3:7a:de:b2:e1:14:78:0d:5e:44:b8: 52:0e:b7:94:13:9c:9f:32:84:02:4c:6f:22:28:15: 5a:6f:f9:55:bf:24:cf:16:fd:2d:8a:2d:bc:fe:c6: 40:ca:3f:9a:d1:6b:fa:be:03:95:2a:42:9d:93:84: a1:52:a7:3b:2a:32:d6:b0:c8:d0:81:ec:b3:02:22: ef:44:37:aa:4f:a2:5e:13:75:8d:6e:f4:e7:0d:64: 30:4f:99:57:fd:c0:45:0f:de:31:2f:96:bc:dc:43: 98:a5:bf:b3:28:b5:64:45:d4:0f:b4:79:3b:ad:53: a6:12:0d:33:e4:6c:35:7e:0e:d8:fc:bf:3c:db:74: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E7:68:AB:8B:66:D2:9B:88:89:08:F1:01:C4:84:3D:0F:00:A5:53 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pudoq4tm0puIiQjxAcSEPQ8ApVM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.100.0/22 Signature Algorithm: sha256WithRSAEncryption 64:e8:bd:11:6a:ab:cc:74:f5:06:27:e0:b8:35:34:29:79:f1: 93:f7:29:a1:fb:80:5f:e9:29:89:87:95:13:47:41:ca:9d:b8: 51:9f:dd:41:e0:d1:cd:3e:12:77:9f:ac:53:13:95:db:5f:01: ee:45:e4:79:5e:bd:fb:de:5d:55:23:94:fc:fb:f1:49:0e:29: 9d:20:7d:8b:dc:87:ea:97:56:34:9c:73:96:40:6c:6d:16:4d: b7:41:66:e4:c9:59:14:63:b7:05:3c:ce:b9:41:48:ad:c0:90: f7:23:ae:38:22:67:5c:47:b7:2b:b4:99:37:ef:49:fa:74:36: 96:25:fe:2f:15:48:44:a1:8b:ff:bc:81:da:18:79:7b:c4:c8: 4f:d4:25:d7:2b:68:eb:82:d7:7f:43:14:7a:ab:b0:85:fa:98: d8:89:58:f6:f7:94:e4:5e:f9:f7:da:a2:97:6f:b4:d6:09:99: f7:7f:5d:01:0e:34:d3:87:a2:db:50:3c:cb:1b:25:06:f4:6a: ff:b0:e9:b0:d4:7d:45:0a:8b:e9:fb:24:dd:cc:7c:ac:14:0c: fb:5b:59:d4:ac:f7:5a:05:1b:4a:a0:89:1f:c4:d1:2f:31:d7: cd:b5:a2:fb:75:93:0c:fa:67:50:bc:50:e8:8f:78:c4:c7:88: 48:fa:38:c6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE2RTc2OEFCOEI2NkQy OUI4ODg5MDhGMTAxQzQ4NDNEMEYwMEE1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdHq6SL6nfvjuw7fQiLxvKDQpdKPG8ZLk8RzHuwxRWcbeGFfli eMiAyqOay5YItzwxSJn5BoQYQ3r6dJx/JI1/4GbeuEb4MiZYHBvySjuyLo9MQHI3 sfYDsT2tbRJuKJm2cG4ppc4b5EIhPIBs3/dCDwpspMvMM2J3ea6zet6y4RR4DV5E uFIOt5QTnJ8yhAJMbyIoFVpv+VW/JM8W/S2KLbz+xkDKP5rRa/q+A5UqQp2ThKFS pzsqMtawyNCB7LMCIu9EN6pPol4TdY1u9OcNZDBPmVf9wEUP3jEvlrzcQ5ilv7Mo tWRF1A+0eTutU6YSDTPkbDV+Dtj8vzzbdB8PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpudoq4tm0puIiQjxAcSEPQ8ApVMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3B1ZG9xNHRtMHB1SWlRanhB Y1NFUFE4QXBWTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6GQwDQYJKoZIhvcNAQELBQADggEBAGTovRFqq8x09QYn4Lg1NCl58ZP3KaH7gF/p KYmHlRNHQcqduFGf3UHg0c0+EnefrFMTldtfAe5F5HlevfveXVUjlPz78UkOKZ0g fYvch+qXVjScc5ZAbG0WTbdBZuTJWRRjtwU8zrlBSK3AkPcjrjgiZ1xHtyu0mTfv Sfp0NpYl/i8VSEShi/+8gdoYeXvEyE/UJdcraOuC139DFHqrsIX6mNiJWPb3lORe +ffaopdvtNYJmfd/XQEONNOHottQPMsbJQb0av+w6bDUfUUKi+n7JN3MfKwUDPtb WdSs91oFG0qgiR/E0S8x1821ovt1kwz6Z1C8UOiPeMTHiEj6OMY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:09 2025 by rpki-client