$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0gdFR9v7-iqAXvb5vC4ADON_8pU.roa File: 0gdFR9v7-iqAXvb5vC4ADON_8pU.roa (raw, json) Hash identifier: vQDFCELOGQflWzp7GC+anwb82M4bkE+ivV9lMc/4+fU= Subject key identifier: D2:07:45:47:DB:FB:FA:2A:80:5E:F6:F9:BC:2E:00:0C:E3:7F:F2:95 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3642 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0gdFR9v7-iqAXvb5vC4ADON_8pU.roa Signing time: Mon 10 Feb 2025 13:54:09 +0000 ROA not before: Mon 10 Feb 2025 13:54:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 21:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13890 (0x3642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D2074547DBFBFA2A805EF6F9BC2E000CE37FF295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:4a:16:1e:41:06:6b:6b:ed:f7:f1:65:18: a1:c7:fd:70:30:0a:14:3c:62:b9:99:52:e3:88:58: 00:59:88:64:77:69:54:29:50:58:0a:0f:e1:8f:5e: 12:d7:b8:b8:8f:0f:56:26:8c:c8:88:76:a9:b3:bb: 4c:8a:aa:3e:31:15:45:4a:55:56:bc:cb:2f:5a:0c: e8:87:56:05:1b:20:8a:e2:fa:77:d1:0a:27:cf:34: 05:3f:8a:cd:a5:15:45:71:16:31:8f:64:4b:a5:61: e7:84:19:c5:f6:e4:be:ab:4c:5f:f8:a5:df:dc:e7: b1:4b:85:50:01:75:6b:f2:f6:09:15:8f:6a:b1:53: 4e:56:36:37:2b:2b:f3:42:d8:f5:36:77:cb:d3:dd: 87:70:8d:97:ca:03:93:7b:f5:95:7a:dd:0f:df:0a: 95:27:76:73:b6:12:f5:5b:8a:d1:1e:e7:ed:c9:14: a9:7e:d4:e9:33:42:cd:8e:b8:88:42:83:c4:d3:f3: 65:ff:2f:c6:9b:97:88:37:d6:bc:40:a2:7e:70:80: 22:fa:c9:ad:da:d0:99:bf:c9:93:72:e7:ca:a3:60: 44:41:93:fb:0e:e2:9d:e3:f6:f4:d8:b4:b0:de:c3: d1:3b:de:46:43:79:a1:d9:d6:4d:e5:29:a5:10:5e: 51:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:07:45:47:DB:FB:FA:2A:80:5E:F6:F9:BC:2E:00:0C:E3:7F:F2:95 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0gdFR9v7-iqAXvb5vC4ADON_8pU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.160.0/22 Signature Algorithm: sha256WithRSAEncryption a9:52:6a:e6:8d:3b:ca:9c:c5:7b:ec:a4:13:2f:d2:95:fc:18: 3b:16:0c:ed:5d:3c:7a:d0:56:20:84:97:59:45:03:10:83:73: b1:d8:7d:1f:0f:f5:fd:33:ca:36:bb:4c:ee:35:75:6f:df:a2: fb:13:42:b5:18:e6:7e:c5:66:56:2f:cf:8c:b9:d5:73:0b:5a: a2:aa:34:f0:b7:2a:c5:8d:d8:28:9b:d0:f3:a1:c6:44:68:1b: af:11:b8:ef:70:8f:3f:0e:03:cb:e9:20:b0:3a:d6:8b:b6:b9: 11:5f:22:10:04:0f:9a:79:a6:11:2f:62:67:b0:65:dc:4f:72: 81:4e:f6:df:3a:c4:a6:9a:c9:8a:0f:7d:89:0f:eb:99:da:29: 3f:d5:a8:71:c0:ab:70:8a:6a:12:39:ee:18:47:f7:c8:ba:e5: 3f:29:ba:22:f5:de:ef:44:22:76:74:52:9a:ec:21:c5:e7:7d: dd:32:8c:15:bb:35:6a:a4:c3:ba:db:28:b2:e9:59:69:c6:44: 2f:2a:58:bc:c9:5f:af:d4:b6:b2:4b:72:48:10:d8:22:53:10: 86:c4:5a:27:c8:b0:a2:c9:02:52:a4:dc:34:e1:33:d4:69:52: 00:09:41:29:d0:af:da:a4:8d:c8:1d:01:b1:b6:06:00:76:ac: 1c:78:3d:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNkIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQyMDc0NTQ3REJGQkZB MkE4MDVFRjZGOUJDMkUwMDBDRTM3RkYyOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbK0oWHkEGa2vt9/FlGKHH/XAwChQ8YrmZUuOIWABZiGR3aVQp UFgKD+GPXhLXuLiPD1YmjMiIdqmzu0yKqj4xFUVKVVa8yy9aDOiHVgUbIIri+nfR CifPNAU/is2lFUVxFjGPZEulYeeEGcX25L6rTF/4pd/c57FLhVABdWvy9gkVj2qx U05WNjcrK/NC2PU2d8vT3YdwjZfKA5N79ZV63Q/fCpUndnO2EvVbitEe5+3JFKl+ 1OkzQs2OuIhCg8TT82X/L8abl4g31rxAon5wgCL6ya3a0Jm/yZNy58qjYERBk/sO 4p3j9vTYtLDew9E73kZDeaHZ1k3lKaUQXlENAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0gdFR9v7+iqAXvb5vC4ADON/8pUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBnZEZSOXY3LWlxQVh2YjV2 QzRBRE9OXzhwVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6aAwDQYJKoZIhvcNAQELBQADggEBAKlSauaNO8qcxXvspBMv0pX8GDsWDO1dPHrQ ViCEl1lFAxCDc7HYfR8P9f0zyja7TO41dW/fovsTQrUY5n7FZlYvz4y51XMLWqKq NPC3KsWN2Cib0POhxkRoG68RuO9wjz8OA8vpILA61ou2uRFfIhAED5p5phEvYmew ZdxPcoFO9t86xKaayYoPfYkP65naKT/VqHHAq3CKahI57hhH98i65T8puiL13u9E InZ0UprsIcXnfd0yjBW7NWqkw7rbKLLpWWnGRC8qWLzJX6/UtrJLckgQ2CJTEIbE WifIsKLJAlKk3DThM9RpUgAJQSnQr9qkjcgdAbG2BgB2rBx4PX4= -----END CERTIFICATE-----Generated at Sun May 4 18:03:08 2025 by rpki-client