$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yjHvZCNlaMIhuDF13uCTo27oCCg.roa File: yjHvZCNlaMIhuDF13uCTo27oCCg.roa (raw, json) Hash identifier: ScxUicedeGvv1MQts8xX9QSV67CMM2iOyo0F+mv0Rq0= Subject key identifier: CA:31:EF:64:23:65:68:C2:21:B8:31:75:DE:E0:93:A3:6E:E8:08:28 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3483 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yjHvZCNlaMIhuDF13uCTo27oCCg.roa Signing time: Mon 10 Feb 2025 13:52:27 +0000 ROA not before: Mon 10 Feb 2025 13:52:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 2407:4d00:ff01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13443 (0x3483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CA31EF64236568C221B83175DEE093A36EE80828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:84:61:bd:c0:01:af:13:eb:f3:0e:4c:72: f8:20:6f:a9:07:c1:d1:77:5d:21:5b:3a:34:be:bd: b1:7d:d1:27:78:ee:b8:6d:a9:8b:9a:08:36:1b:76: 26:95:fe:50:77:8d:b5:58:0b:c2:47:66:4d:78:dd: 88:a8:f5:63:1e:5e:b8:bf:94:0b:a8:40:e9:7d:e1: e7:4a:83:f7:ba:98:ad:77:ae:c7:5a:cc:fc:92:a0: d3:ba:be:be:91:40:b6:5b:49:6e:29:ce:fb:28:3d: 84:da:e1:4c:fa:b0:17:9a:74:e2:62:39:b7:f5:cd: ff:af:01:6a:bd:80:c9:02:63:41:56:cd:c5:3a:98: 38:f2:5d:15:10:f5:e8:cb:e6:20:68:90:a8:4f:f5: 04:9f:04:65:b8:28:e9:5f:cf:2c:33:c5:f5:a2:c9: 4a:65:50:84:8f:bc:fd:69:78:ba:1e:78:26:76:cd: b3:c6:3b:0d:49:9d:aa:28:8f:b3:46:9d:ec:11:19: 9c:f1:09:9d:de:39:55:2c:99:63:36:b1:e4:ff:4f: 9d:9f:95:0d:38:64:9b:7f:56:bb:90:7a:17:25:44: 6a:16:b7:41:c6:82:38:81:97:6e:c5:92:ef:e3:36: 78:a0:d7:2b:f7:5a:7d:72:cc:2d:02:21:97:e2:c1: 20:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:31:EF:64:23:65:68:C2:21:B8:31:75:DE:E0:93:A3:6E:E8:08:28 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yjHvZCNlaMIhuDF13uCTo27oCCg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff01::/48 Signature Algorithm: sha256WithRSAEncryption 7b:16:01:37:88:b2:3b:bd:b8:37:61:57:22:fc:e6:ad:82:4f: ac:b5:b5:ad:70:4e:37:ec:12:4d:3b:fc:61:bb:0e:23:c3:c1: 1d:9a:90:c8:7d:84:98:c0:55:09:b7:dd:49:ed:5f:45:c7:35: b8:60:52:6e:99:df:e7:4b:ba:3c:a3:07:da:6e:cb:10:ca:46: ff:3a:b1:dd:6f:15:6f:fc:c8:e4:71:05:e3:76:b9:b6:f0:74: 16:ef:64:b3:a8:de:f9:3d:db:18:b8:bd:af:55:79:db:34:d8: 74:70:6b:ea:52:b2:97:fa:c1:30:11:6e:18:61:ea:eb:f1:0c: e8:4c:7e:f8:08:d3:97:94:d5:c3:30:ce:03:ae:3b:87:e5:d9: a5:ea:ac:a9:8e:7d:7b:cc:fe:9c:32:28:c2:53:ea:2f:b7:98: 4e:d1:a6:f0:cf:bb:db:05:2b:d3:b2:a6:75:53:ac:d9:88:bf: c9:5e:1d:16:ff:54:78:80:62:22:a1:6f:ce:8f:b4:4c:db:fd: 71:b3:e8:cc:9b:34:e3:60:5c:2a:36:6c:d4:e5:f2:0b:4c:8d: a0:ec:d2:88:75:4c:44:11:35:a6:f8:50:c7:a8:40:95:fa:12: a5:43:07:0b:9f:33:15:59:0a:6c:d5:76:13:a4:52:8b:5c:09: c8:c4:18:1b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICNIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENBMzFFRjY0MjM2NTY4 QzIyMUI4MzE3NURFRTA5M0EzNkVFODA4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgw4RhvcABrxPr8w5Mcvggb6kHwdF3XSFbOjS+vbF90Sd47rht qYuaCDYbdiaV/lB3jbVYC8JHZk143Yio9WMeXri/lAuoQOl94edKg/e6mK13rsda zPySoNO6vr6RQLZbSW4pzvsoPYTa4Uz6sBeadOJiObf1zf+vAWq9gMkCY0FWzcU6 mDjyXRUQ9ejL5iBokKhP9QSfBGW4KOlfzywzxfWiyUplUISPvP1peLoeeCZ2zbPG Ow1Jnaooj7NGnewRGZzxCZ3eOVUsmWM2seT/T52flQ04ZJt/VruQehclRGoWt0HG gjiBl27Fku/jNnig1yv3Wn1yzC0CIZfiwSCNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUyjHvZCNlaMIhuDF13uCTo27oCCgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lqSHZaQ05sYU1JaHVERjEz dUNUbzI3b0NDZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wEwDQYJKoZIhvcNAQELBQADggEBAHsWATeIsju9uDdhVyL85q2CT6y1ta1w TjfsEk07/GG7DiPDwR2akMh9hJjAVQm33UntX0XHNbhgUm6Z3+dLujyjB9puyxDK Rv86sd1vFW/8yORxBeN2ubbwdBbvZLOo3vk92xi4va9Veds02HRwa+pSspf6wTAR bhhh6uvxDOhMfvgI05eU1cMwzgOuO4fl2aXqrKmOfXvM/pwyKMJT6i+3mE7RpvDP u9sFK9OypnVTrNmIv8leHRb/VHiAYiKhb86PtEzb/XGz6MybNONgXCo2bNTl8gtM jaDs0oh1TEQRNab4UMeoQJX6EqVDBwufMxVZCmzVdhOkUotcCcjEGBs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:55 2025 by rpki-client