$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmKG7ul1w06WksZjN9QJi3IVpFo.roa File: zmKG7ul1w06WksZjN9QJi3IVpFo.roa (raw, json) Hash identifier: 7akKfZy8+mDfEywfVCGZFrXnF7+M2dYW7oWriWHTXgY= Subject key identifier: CE:62:86:EE:E9:75:C3:4E:96:92:C6:63:37:D4:09:8B:72:15:A4:5A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3659 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmKG7ul1w06WksZjN9QJi3IVpFo.roa Signing time: Mon 10 Feb 2025 13:54:14 +0000 ROA not before: Mon 10 Feb 2025 13:54:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13913 (0x3659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CE6286EEE975C34E9692C66337D4098B7215A45A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:04:ed:76:59:7c:d0:d4:4f:0d:e8:a2:30: e9:42:ac:1d:44:2f:67:55:c3:26:9d:f6:02:b9:2a: 2e:16:1e:db:93:e9:7d:9f:d3:64:78:08:da:9e:07: d2:6e:05:7f:a6:39:77:47:85:e6:2a:e8:b6:03:b6: d5:4d:42:e6:4c:bc:a2:89:17:25:7b:1c:89:48:05: 33:62:97:3b:58:12:0d:a3:8a:ed:a3:05:59:43:99: 6c:75:98:39:e4:e2:44:0e:e7:5a:30:be:0d:8f:7f: 55:06:68:dc:d8:e6:a4:95:b3:9c:2b:3b:9a:d4:d4: 5b:f1:1a:48:29:bc:fb:4a:e6:a3:fb:f7:9d:28:bd: 35:52:d7:5e:49:a2:52:da:0b:94:2f:d7:55:18:46: 0b:b8:a1:a7:4a:0f:80:24:5f:ba:9f:a7:9f:a8:82: 50:06:f1:ad:06:04:0d:03:19:02:50:3f:64:8d:d6: 34:ee:74:d1:f1:b0:9b:fd:51:9d:db:6e:01:05:21: 23:85:11:f5:79:84:57:76:99:7f:dd:92:92:8f:38: c6:cf:3f:3b:d0:2f:e3:da:99:38:f2:d6:dc:ac:46: bd:64:48:c8:a8:dd:7d:78:23:7e:51:b8:3a:34:bb: 76:59:00:21:7b:6d:10:bb:79:db:6d:27:ad:05:a5: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:62:86:EE:E9:75:C3:4E:96:92:C6:63:37:D4:09:8B:72:15:A4:5A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmKG7ul1w06WksZjN9QJi3IVpFo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.188.0/22 Signature Algorithm: sha256WithRSAEncryption 85:a2:a0:a9:3f:05:ae:8a:0b:63:2a:27:5e:e8:00:28:78:7f: 91:ca:7e:93:3e:a4:88:e6:3b:05:db:c4:c6:a2:f3:f3:71:e4: 8e:9b:c7:5d:69:c2:1f:24:a5:89:94:a5:7d:69:c8:df:e0:d6: 41:eb:a7:aa:54:d8:02:86:b4:d3:99:c1:e2:dd:c5:e1:f3:b3: c2:a3:65:d0:49:18:82:1e:01:84:fe:f3:cd:58:96:2c:38:0b: 54:57:d8:fb:07:92:e1:be:6b:3d:b2:8d:ab:b4:89:cf:8d:6d: ea:9e:03:0e:98:96:b0:81:76:e3:eb:4f:14:0f:b5:9a:dd:c1: b5:35:66:68:1a:1b:a2:51:8b:13:6a:90:46:17:39:5a:08:eb: c2:06:bb:fe:87:47:b1:49:32:44:0d:d6:34:40:0c:c3:a6:32: e9:46:46:ad:19:b6:2b:0c:76:44:e9:9e:34:7d:27:e6:99:90: b0:3b:a3:89:d6:a5:75:db:1b:61:e0:f6:34:2a:cb:74:cb:52: b3:b5:0d:d7:1b:5a:88:29:5b:62:ee:04:0b:14:82:b1:75:9e: 60:c8:bc:02:eb:bd:86:07:6c:20:b8:ff:45:fd:3e:4a:27:9d: 41:12:dd:23:42:9a:e6:4b:e8:d5:fe:2e:5d:e3:06:8a:b2:04: e1:9b:80:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFNjI4NkVFRTk3NUMz NEU5NjkyQzY2MzM3RDQwOThCNzIxNUE0NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/TgTtdll80NRPDeiiMOlCrB1EL2dVwyad9gK5Ki4WHtuT6X2f 02R4CNqeB9JuBX+mOXdHheYq6LYDttVNQuZMvKKJFyV7HIlIBTNilztYEg2jiu2j BVlDmWx1mDnk4kQO51owvg2Pf1UGaNzY5qSVs5wrO5rU1FvxGkgpvPtK5qP7950o vTVS115JolLaC5Qv11UYRgu4oadKD4AkX7qfp5+oglAG8a0GBA0DGQJQP2SN1jTu dNHxsJv9UZ3bbgEFISOFEfV5hFd2mX/dkpKPOMbPPzvQL+PamTjy1tysRr1kSMio 3X14I35RuDo0u3ZZACF7bRC7edttJ60FpWVNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzmKG7ul1w06WksZjN9QJi3IVpFowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ptS0c3dWwxdzA2V2tzWmpO OVFKaTNJVnBGby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w7wwDQYJKoZIhvcNAQELBQADggEBAIWioKk/Ba6KC2MqJ17oACh4f5HKfpM+pIjm OwXbxMai8/Nx5I6bx11pwh8kpYmUpX1pyN/g1kHrp6pU2AKGtNOZweLdxeHzs8Kj ZdBJGIIeAYT+881Yliw4C1RX2PsHkuG+az2yjau0ic+NbeqeAw6YlrCBduPrTxQP tZrdwbU1ZmgaG6JRixNqkEYXOVoI68IGu/6HR7FJMkQN1jRADMOmMulGRq0ZtisM dkTpnjR9J+aZkLA7o4nWpXXbG2Hg9jQqy3TLUrO1DdcbWogpW2LuBAsUgrF1nmDI vALrvYYHbCC4/0X9PkonnUES3SNCmuZL6NX+Ll3jBoqyBOGbgAA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:37 2025 by rpki-client