$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t0SIam9d94bUV5MPMCHM-Yb0qio.roa File: t0SIam9d94bUV5MPMCHM-Yb0qio.roa (raw, json) Hash identifier: lO4TGUwts9iz0jwVqSXPztfIQCbiPcEZNH91Oyvv9QE= Subject key identifier: B7:44:88:6A:6F:5D:F7:86:D4:57:93:0F:30:21:CC:F9:86:F4:AA:2A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33ED Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t0SIam9d94bUV5MPMCHM-Yb0qio.roa Signing time: Mon 10 Feb 2025 13:51:54 +0000 ROA not before: Mon 10 Feb 2025 13:51:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13293 (0x33ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B744886A6F5DF786D457930F3021CCF986F4AA2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:35:f9:86:ac:c5:ce:4d:e1:44:b0:3c:ca: ab:51:a6:cb:96:bc:ef:f7:57:3e:63:4e:7b:65:ab: 34:e1:83:5f:ab:f6:a6:96:fb:bd:14:d8:87:ff:65: 60:7d:b4:c6:ac:42:85:9b:0d:3f:7d:2d:5f:6a:c4: d1:93:9a:6a:e5:b7:57:69:0c:b6:9d:b4:d3:25:a7: a9:ee:f8:e0:e5:2e:53:dd:2f:39:7e:ce:6d:9d:ef: 17:0e:32:aa:a9:78:48:97:ea:8f:11:79:ec:47:1b: 82:b7:07:a8:2b:24:42:b5:4e:2d:9a:ca:ec:87:c5: 12:b4:20:5c:ce:82:8d:3b:dd:87:7e:e2:e2:26:19: 61:f3:be:5e:a3:32:b9:74:98:51:e0:60:da:ad:e2: 79:bb:51:7b:42:f1:f6:6b:cf:07:05:0b:34:44:2a: 18:d4:f7:42:45:d0:f7:85:39:f0:42:3b:be:a6:e6: 57:96:3b:3b:86:c1:a5:58:28:81:93:d5:d6:8e:fb: a4:d5:46:35:c9:99:ef:59:72:59:cd:84:07:6b:89: fe:8d:58:07:69:da:46:76:10:10:3f:de:ea:52:f2: 4e:c5:bf:c7:e2:72:e9:4d:39:af:cb:23:31:21:32: 9b:55:13:15:ec:53:a4:35:1d:99:f0:e1:45:7b:10: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:44:88:6A:6F:5D:F7:86:D4:57:93:0F:30:21:CC:F9:86:F4:AA:2A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t0SIam9d94bUV5MPMCHM-Yb0qio.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.36.0/22 Signature Algorithm: sha256WithRSAEncryption 17:2a:18:fb:eb:e8:0b:5d:51:31:75:10:49:47:bb:ed:03:f1: 0e:bd:6e:f2:b9:4d:4c:98:bf:83:b8:47:23:0c:a7:00:96:b2: 37:da:51:d1:33:f9:dd:62:40:be:e3:9a:19:fb:fb:ec:47:d7: 6f:42:21:f9:34:49:7b:ec:5b:81:c4:49:b8:88:66:18:28:f6: 97:3a:28:68:1a:4c:d6:48:49:7e:b9:39:d6:c2:56:de:90:f0: 04:66:ad:61:00:75:0b:30:64:4b:57:62:3f:1d:bf:55:f0:c2: 6c:0b:58:54:5a:f2:3b:b3:f9:e8:99:86:0f:75:04:eb:db:2e: af:7f:11:03:5d:a1:44:2f:a4:88:72:5a:2a:1b:0f:6b:73:ec: 75:6f:d3:03:89:49:cc:68:83:ea:68:22:bb:24:dc:ca:c0:7d: fc:78:36:55:da:a1:27:1e:72:c7:4f:d4:a6:7b:35:4e:32:05: e1:fe:bc:b3:a5:2e:51:ee:3c:4a:dd:a7:b1:d6:91:db:65:68: 4a:86:62:83:73:63:6c:06:f7:64:d6:42:3f:fe:46:7b:71:a4: 8a:48:e2:ae:92:17:b0:11:bb:11:30:d5:1f:52:c3:e0:69:16: 61:48:fa:10:bc:1e:b1:52:be:08:f5:ba:8e:cd:ed:30:a3:56: 07:09:de:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3NDQ4ODZBNkY1REY3 ODZENDU3OTMwRjMwMjFDQ0Y5ODZGNEFBMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeszX5hqzFzk3hRLA8yqtRpsuWvO/3Vz5jTntlqzThg1+r9qaW +70U2If/ZWB9tMasQoWbDT99LV9qxNGTmmrlt1dpDLadtNMlp6nu+ODlLlPdLzl+ zm2d7xcOMqqpeEiX6o8ReexHG4K3B6grJEK1Ti2ayuyHxRK0IFzOgo073Yd+4uIm GWHzvl6jMrl0mFHgYNqt4nm7UXtC8fZrzwcFCzREKhjU90JF0PeFOfBCO76m5leW OzuGwaVYKIGT1daO+6TVRjXJme9ZclnNhAdrif6NWAdp2kZ2EBA/3upS8k7Fv8fi culNOa/LIzEhMptVExXsU6Q1HZnw4UV7EAypAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUt0SIam9d94bUV5MPMCHM+Yb0qiowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3QwU0lhbTlkOTRiVVY1TVBN Q0hNLVliMHFpby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6CQwDQYJKoZIhvcNAQELBQADggEBABcqGPvr6AtdUTF1EElHu+0D8Q69bvK5TUyY v4O4RyMMpwCWsjfaUdEz+d1iQL7jmhn7++xH129CIfk0SXvsW4HESbiIZhgo9pc6 KGgaTNZISX65OdbCVt6Q8ARmrWEAdQswZEtXYj8dv1XwwmwLWFRa8juz+eiZhg91 BOvbLq9/EQNdoUQvpIhyWiobD2tz7HVv0wOJScxog+poIrsk3MrAffx4NlXaoSce csdP1KZ7NU4yBeH+vLOlLlHuPErdp7HWkdtlaEqGYoNzY2wG92TWQj/+RntxpIpI 4q6SF7ARuxEw1R9Sw+BpFmFI+hC8HrFSvgj1uo7N7TCjVgcJ3jA= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:03 2025 by rpki-client