$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wnZJLtBClYfYm3UoHHJpVUFoJ2s.roa File: wnZJLtBClYfYm3UoHHJpVUFoJ2s.roa (raw, json) Hash identifier: 2CaYtgGorfwJzloSB6CwpiGS1n1J9TCq6ZwxNRwAd3E= Subject key identifier: C2:76:49:2E:D0:42:95:87:D8:9B:75:28:1C:72:69:55:41:68:27:6B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36C8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wnZJLtBClYfYm3UoHHJpVUFoJ2s.roa Signing time: Mon 10 Feb 2025 13:54:40 +0000 ROA not before: Mon 10 Feb 2025 13:54:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.120.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14024 (0x36c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C276492ED0429587D89B75281C7269554168276B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:69:8d:2f:87:d4:91:22:6b:de:16:10:bf: 49:d6:7f:a4:50:ca:25:0b:74:04:43:91:30:73:5d: cb:50:5c:c2:5d:a0:da:03:a3:d2:f0:8c:4e:0d:cb: a6:ec:58:6e:aa:0e:81:45:43:c4:9f:e7:78:7a:e3: 68:c8:d5:96:49:46:7b:7a:7a:01:c0:99:c9:7a:db: 1b:2b:c8:81:93:f5:62:2d:e6:48:b9:af:f7:66:01: a1:65:c6:59:64:79:ee:52:34:29:ba:d9:96:c2:78: fa:1e:e2:fd:a7:2e:ea:70:d6:0f:8f:b2:33:c3:86: ae:84:44:73:ec:30:d7:80:ea:7e:ee:6d:61:a6:f9: a0:99:ca:95:d4:c4:aa:d1:2b:2c:03:9b:9f:6f:19: c0:d9:e5:3d:35:fe:79:d5:de:79:1c:3e:d0:c9:42: 29:3f:fe:dd:f5:86:d8:53:6f:34:51:fe:4e:31:35: 64:c2:64:86:dd:bc:7d:b2:aa:93:0f:46:c4:1f:ba: ed:06:ac:6e:d1:60:77:52:ea:28:81:73:a5:ae:d4: a1:40:72:2a:ae:18:a4:01:70:7b:8a:c1:ea:27:23: 1b:cd:64:ef:c1:0b:83:50:2b:9a:a7:e5:00:60:76: 90:60:cf:a0:a5:8f:e9:17:86:c1:69:c1:34:40:7d: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:76:49:2E:D0:42:95:87:D8:9B:75:28:1C:72:69:55:41:68:27:6B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wnZJLtBClYfYm3UoHHJpVUFoJ2s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.120.0/25 Signature Algorithm: sha256WithRSAEncryption 9f:c3:97:44:2a:2e:8c:98:f3:68:aa:9f:ce:7b:33:2d:c8:ba: 52:8b:3f:19:3c:fb:d6:80:fe:bf:32:e0:83:fd:19:ef:d6:2d: a8:d1:14:eb:e7:0c:5a:2f:92:54:2d:9e:bc:eb:28:78:b7:8b: 96:8f:cb:c2:e3:49:46:35:76:70:78:72:11:89:d7:89:3a:79: f2:01:6a:70:88:9f:5a:a5:a8:70:4f:9f:5d:99:75:56:cb:c7: aa:2f:f7:a5:01:60:76:95:21:7b:20:81:70:78:74:ab:a2:04: b1:79:c3:93:4c:6b:46:99:6a:a8:21:14:ec:9d:0e:a0:9d:f3: 64:ee:d6:5a:d6:55:41:f5:f8:5d:c7:5b:9a:b5:b5:0a:97:fc: 25:c3:52:e0:9a:ad:c3:01:f8:ea:59:2b:82:a3:e7:11:c4:47: a4:7a:48:67:93:d5:d8:5b:6b:b8:03:38:d8:d6:83:7c:19:a2: d3:1d:e6:91:66:66:9f:80:d8:be:59:93:c4:5d:8a:5a:e7:03: 1d:14:c5:a4:f2:74:73:89:c9:b7:8e:e0:8a:33:b0:96:72:14: 2d:dc:57:01:00:25:53:a5:50:8f:7c:8d:15:30:a9:38:1b:87: 74:35:0c:37:0a:93:07:10:7d:90:6d:34:58:19:c9:4c:d5:03: 53:50:4b:c3 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyNzY0OTJFRDA0Mjk1 ODdEODlCNzUyODFDNzI2OTU1NDE2ODI3NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEzGmNL4fUkSJr3hYQv0nWf6RQyiULdARDkTBzXctQXMJdoNoD o9LwjE4Ny6bsWG6qDoFFQ8Sf53h642jI1ZZJRnt6egHAmcl62xsryIGT9WIt5ki5 r/dmAaFlxllkee5SNCm62ZbCePoe4v2nLupw1g+PsjPDhq6ERHPsMNeA6n7ubWGm +aCZypXUxKrRKywDm59vGcDZ5T01/nnV3nkcPtDJQik//t31hthTbzRR/k4xNWTC ZIbdvH2yqpMPRsQfuu0GrG7RYHdS6iiBc6Wu1KFAciquGKQBcHuKweonIxvNZO/B C4NQK5qn5QBgdpBgz6Clj+kXhsFpwTRAffD9AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUwnZJLtBClYfYm3UoHHJpVUFoJ2swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3duWkpMdEJDbFlmWW0zVW9I SEpwVlVGb0oycy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THgAMA0GCSqGSIb3DQEBCwUAA4IBAQCfw5dEKi6MmPNoqp/OezMtyLpSiz8ZPPvW gP6/MuCD/Rnv1i2o0RTr5wxaL5JULZ686yh4t4uWj8vC40lGNXZweHIRideJOnny AWpwiJ9apahwT59dmXVWy8eqL/elAWB2lSF7IIFweHSrogSxecOTTGtGmWqoIRTs nQ6gnfNk7tZa1lVB9fhdx1uatbUKl/wlw1Lgmq3DAfjqWSuCo+cRxEekekhnk9XY W2u4AzjY1oN8GaLTHeaRZmafgNi+WZPEXYpa5wMdFMWk8nRzicm3juCKM7CWchQt 3FcBACVTpVCPfI0VMKk4G4d0NQw3CpMHEH2QbTRYGclM1QNTUEvD -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:11 2025 by rpki-client