$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wJw0XO6dzh2W7BKjoWSQ3C3iay8.roa File: wJw0XO6dzh2W7BKjoWSQ3C3iay8.roa (raw, json) Hash identifier: rzF+K9XVFrjnB8PjQv0BaFykROZQJXUhzoDTrhRDVKU= Subject key identifier: C0:9C:34:5C:EE:9D:CE:1D:96:EC:12:A3:A1:64:90:DC:2D:E2:6B:2F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3587 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wJw0XO6dzh2W7BKjoWSQ3C3iay8.roa Signing time: Mon 10 Feb 2025 13:53:26 +0000 ROA not before: Mon 10 Feb 2025 13:53:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 118.232.196.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13703 (0x3587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C09C345CEE9DCE1D96EC12A3A16490DC2DE26B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:d9:51:82:34:1b:e3:9c:00:32:68:a6:93: 70:b0:ed:d5:c3:c2:34:8f:b7:4e:76:f2:d8:63:01: 72:d9:94:98:83:90:f0:dc:ce:d0:75:db:9e:c2:e5: 81:f9:02:4c:7a:df:8a:6d:a0:af:7f:79:a6:e4:84: be:dc:10:aa:52:0f:f7:f7:9e:b9:90:f8:98:e8:f8: 61:3e:7e:55:d6:7c:3f:db:31:4b:5a:c1:07:03:5b: c4:8c:de:81:db:d3:3f:f1:b5:b6:ee:38:a0:18:40: 17:09:39:21:7e:16:7d:eb:46:41:55:18:cb:b8:db: 16:01:7e:18:76:81:7c:52:82:b8:6e:dc:95:bf:82: 66:74:fd:43:71:2f:be:57:d4:50:35:25:0b:82:f4: 8d:ae:5f:cf:10:8f:7c:ff:f5:18:c5:2e:37:8b:b0: f3:77:ff:70:67:2f:d7:42:d5:4c:03:ab:6c:49:a5: a5:7c:ae:26:8e:9b:94:21:51:7b:03:4a:5c:6f:66: 4b:77:d8:c2:5b:00:af:14:ec:c8:59:88:1e:41:6c: 24:8d:27:dd:c7:c1:74:d5:e0:06:71:4f:d0:b5:b8: 23:3b:25:ae:66:be:db:ba:40:62:1d:72:2b:b3:9c: 76:52:13:8d:40:19:b0:24:ea:90:91:6e:1c:e7:db: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:34:5C:EE:9D:CE:1D:96:EC:12:A3:A1:64:90:DC:2D:E2:6B:2F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wJw0XO6dzh2W7BKjoWSQ3C3iay8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.196.64/26 Signature Algorithm: sha256WithRSAEncryption a4:b0:9d:2a:f5:e9:d3:c5:a5:c0:de:91:2e:a0:35:db:0c:19: 54:43:d0:f9:68:87:9d:64:69:26:08:35:87:0a:dc:65:32:c8: 93:df:79:74:73:61:8f:78:14:2f:bf:b6:6f:fe:b2:1c:45:a4: 26:fc:e8:92:3f:ca:68:c1:f1:ef:2f:6b:7b:8e:8f:76:ed:34: 4d:11:51:01:fd:81:ca:c1:55:98:ba:fe:c1:c6:06:c3:ff:04: 9e:bf:80:48:ae:a4:ef:1c:cd:c6:83:bd:38:19:72:76:52:8a: e3:e9:ee:2c:a5:43:85:86:26:c8:e1:30:b0:9e:bb:92:6e:32: 9e:39:4e:82:18:3a:90:05:60:94:1a:3a:97:00:3e:9d:38:04: 10:b2:d6:8d:aa:3f:46:fe:08:76:f7:c2:db:c9:d7:35:5e:89: 68:96:ab:35:e2:fb:f6:bb:c0:41:b6:d4:49:a0:be:d0:c7:96: fe:7a:bf:1b:ca:61:2e:f1:35:67:0a:ae:31:2e:11:ab:51:41: a9:e9:52:79:f2:41:2b:8c:73:88:ea:b1:cf:91:71:d9:68:c4: 3f:43:f1:41:6e:69:1d:ef:9b:e6:57:58:d8:13:47:b8:6a:57: 16:97:5e:19:65:30:ee:39:3a:49:bd:d1:63:b5:e7:74:34:b3: c2:bb:0e:a0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMwOUMzNDVDRUU5RENF MUQ5NkVDMTJBM0ExNjQ5MERDMkRFMjZCMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWv9lRgjQb45wAMmimk3Cw7dXDwjSPt0528thjAXLZlJiDkPDc ztB1257C5YH5Akx634ptoK9/eabkhL7cEKpSD/f3nrmQ+Jjo+GE+flXWfD/bMUta wQcDW8SM3oHb0z/xtbbuOKAYQBcJOSF+Fn3rRkFVGMu42xYBfhh2gXxSgrhu3JW/ gmZ0/UNxL75X1FA1JQuC9I2uX88Qj3z/9RjFLjeLsPN3/3BnL9dC1UwDq2xJpaV8 riaOm5QhUXsDSlxvZkt32MJbAK8U7MhZiB5BbCSNJ93HwXTV4AZxT9C1uCM7Ja5m vtu6QGIdciuznHZSE41AGbAk6pCRbhzn2yCnAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUwJw0XO6dzh2W7BKjoWSQ3C3iay8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dKdzBYTzZkemgyVzdCS2pv V1NRM0MzaWF5OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ2 6MRAMA0GCSqGSIb3DQEBCwUAA4IBAQCksJ0q9enTxaXA3pEuoDXbDBlUQ9D5aIed ZGkmCDWHCtxlMsiT33l0c2GPeBQvv7Zv/rIcRaQm/OiSP8powfHvL2t7jo927TRN EVEB/YHKwVWYuv7BxgbD/wSev4BIrqTvHM3Gg704GXJ2Uorj6e4spUOFhibI4TCw nruSbjKeOU6CGDqQBWCUGjqXAD6dOAQQstaNqj9G/gh298Lbydc1Xololqs14vv2 u8BBttRJoL7Qx5b+er8bymEu8TVnCq4xLhGrUUGp6VJ58kErjHOI6rHPkXHZaMQ/ Q/FBbmkd75vmV1jYE0e4alcWl14ZZTDuOTpJvdFjted0NLPCuw6g -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:42 2025 by rpki-client