$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/stn8lmxzMEwP-ETKUbLGycbtTvw.roa File: stn8lmxzMEwP-ETKUbLGycbtTvw.roa (raw, json) Hash identifier: jHIew6fd73+o7HaMGiQBMi6EMnujGa5XShUuwt9P/xc= Subject key identifier: B2:D9:FC:96:6C:73:30:4C:0F:F8:44:CA:51:B2:C6:C9:C6:ED:4E:FC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33DF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/stn8lmxzMEwP-ETKUbLGycbtTvw.roa Signing time: Mon 10 Feb 2025 13:51:51 +0000 ROA not before: Mon 10 Feb 2025 13:51:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13279 (0x33df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B2D9FC966C73304C0FF844CA51B2C6C9C6ED4EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:20:c2:0d:a7:c0:80:4f:dc:6a:50:5e:8e: 73:ad:b8:1a:50:b5:ab:a4:6a:e8:cb:83:87:11:d8: 95:80:9e:fc:aa:a6:56:73:1e:39:6e:bb:02:a0:b9: da:88:d7:f2:19:09:03:2f:8a:a5:17:d6:95:50:7a: 7b:cb:89:f7:3f:ee:c4:5e:2c:01:68:94:4b:3a:8b: e7:da:b5:10:b8:c6:82:72:d3:fa:e6:2d:7d:aa:a3: 80:38:88:58:84:e9:e9:5c:d3:84:23:17:2a:18:3b: 76:01:6d:72:cc:6e:23:d5:18:20:06:f2:7a:7b:78: c4:cf:8a:a1:20:c9:86:a7:65:8f:40:9f:15:00:eb: 2e:91:9e:71:a2:cc:68:e2:d5:08:6d:0b:b0:94:07: 3c:41:ea:e7:bd:26:12:7b:fd:fc:b6:5e:42:34:d6: 24:ea:b9:db:41:51:10:ae:4b:ff:dc:11:ee:c9:61: ed:02:b2:e5:d9:d2:8c:3e:8a:61:7c:1b:77:de:96: 53:6d:b1:5a:b8:b6:dd:e2:4a:a2:31:d5:85:3a:92: 97:62:cc:84:bb:15:19:51:b7:51:3b:80:3f:04:eb: a6:6f:04:a5:bb:a1:2d:3b:14:53:86:f2:0b:81:bf: f4:d1:4e:8b:0b:aa:42:7f:d0:87:a9:d0:00:e8:c5: 67:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D9:FC:96:6C:73:30:4C:0F:F8:44:CA:51:B2:C6:C9:C6:ED:4E:FC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/stn8lmxzMEwP-ETKUbLGycbtTvw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.64.0/21 Signature Algorithm: sha256WithRSAEncryption 33:25:58:b4:d1:f1:40:82:68:a2:02:95:72:06:3d:f5:42:7b: 5e:aa:61:cd:c0:ce:da:c5:6e:e8:2a:ad:f9:33:9f:77:59:68: 99:cf:18:25:ed:e9:14:1f:89:38:a5:12:b8:0a:18:9f:c8:21: cf:eb:d7:8d:cd:c4:2b:06:d5:af:89:cd:94:4b:fa:d3:c2:46: ae:4b:fc:8e:2e:f6:41:f0:72:62:a7:5f:f2:cb:27:53:5c:f9: cc:27:66:26:4f:21:72:61:ee:35:b7:98:4b:71:a7:9f:1f:5d: 36:af:08:88:0c:20:25:c9:0f:1e:3d:21:cc:4f:86:b3:2e:a3: cb:e2:61:95:95:cf:d0:7f:0b:06:ff:2b:2d:84:28:bd:b8:4a: 90:94:1a:e5:99:9f:1e:f4:d4:6d:fb:8d:12:8b:d6:95:47:db: 69:ae:c5:8b:c8:59:d2:8c:c7:7d:05:92:57:e3:46:90:c9:da: 1b:0e:db:dc:32:20:16:89:2b:bf:44:de:1f:76:89:f7:4a:76: 93:5c:03:d3:77:88:be:55:0d:cb:9a:fc:42:57:a4:bc:cd:36: f1:f3:44:4c:c2:17:2b:81:e4:09:79:23:6b:0f:0f:f5:5b:32: 6c:52:20:6e:bd:e8:bc:dd:08:36:cc:e0:e5:e1:d2:32:2e:7d: b0:29:90:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyRDlGQzk2NkM3MzMw NEMwRkY4NDRDQTUxQjJDNkM5QzZFRDRFRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjNCDCDafAgE/calBejnOtuBpQtaukaujLg4cR2JWAnvyqplZz HjluuwKgudqI1/IZCQMviqUX1pVQenvLifc/7sReLAFolEs6i+fatRC4xoJy0/rm LX2qo4A4iFiE6elc04QjFyoYO3YBbXLMbiPVGCAG8np7eMTPiqEgyYanZY9AnxUA 6y6RnnGizGji1QhtC7CUBzxB6ue9JhJ7/fy2XkI01iTqudtBURCuS//cEe7JYe0C suXZ0ow+imF8G3fellNtsVq4tt3iSqIx1YU6kpdizIS7FRlRt1E7gD8E66ZvBKW7 oS07FFOG8guBv/TRTosLqkJ/0Iep0ADoxWeXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUstn8lmxzMEwP+ETKUbLGycbtTvwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3N0bjhsbXh6TUV3UC1FVEtV YkxHeWNidFR2dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w0AwDQYJKoZIhvcNAQELBQADggEBADMlWLTR8UCCaKIClXIGPfVCe16qYc3AztrF bugqrfkzn3dZaJnPGCXt6RQfiTilErgKGJ/IIc/r143NxCsG1a+JzZRL+tPCRq5L /I4u9kHwcmKnX/LLJ1Nc+cwnZiZPIXJh7jW3mEtxp58fXTavCIgMICXJDx49IcxP hrMuo8viYZWVz9B/Cwb/Ky2EKL24SpCUGuWZnx701G37jRKL1pVH22muxYvIWdKM x30FklfjRpDJ2hsO29wyIBaJK79E3h92ifdKdpNcA9N3iL5VDcua/EJXpLzNNvHz REzCFyuB5Al5I2sPD/VbMmxSIG696LzdCDbM4OXh0jIufbApkJI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:41 2025 by rpki-client