$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4f-ijWMmvyBCRXf0iK1XWo4TY4o.roa File: 4f-ijWMmvyBCRXf0iK1XWo4TY4o.roa (raw, json) Hash identifier: Wzjrhqcx2deZly8W+P1Q5385CSIMTzmV23qKZf7bB+M= Subject key identifier: E1:FF:A2:8D:63:26:BF:20:42:45:77:F4:88:AD:57:5A:8E:13:63:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34B7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4f-ijWMmvyBCRXf0iK1XWo4TY4o.roa Signing time: Mon 10 Feb 2025 13:52:38 +0000 ROA not before: Mon 10 Feb 2025 13:52:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13495 (0x34b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E1FFA28D6326BF20424577F488AD575A8E13638A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:9e:0e:0a:9d:6b:2e:59:8c:3f:6f:9f:e8: 36:28:8b:8c:2f:93:1b:63:eb:3f:ad:62:5b:3d:a0: c7:f2:cf:60:82:71:0b:c2:4d:f4:6b:44:1d:d1:c9: 08:9b:98:2f:90:9d:78:11:f4:f6:83:df:7b:ec:ff: 34:f5:b8:15:1a:b8:0f:70:09:aa:d8:21:76:fd:0f: 81:ea:e9:54:98:69:62:4f:bc:9f:b0:97:b4:1e:a5: d1:e5:62:2b:b5:dd:80:9d:90:03:bf:af:bc:af:1d: 19:67:a5:76:c4:ab:05:96:be:89:88:56:2a:1f:28: 4f:67:4e:33:ea:ec:98:d5:92:47:69:f7:88:cd:d5: 03:9a:c1:3a:f9:e1:9f:9a:54:8a:49:48:8e:93:b1: 61:ab:cb:c9:ab:06:51:d8:1b:18:c4:74:a0:40:26: f6:69:40:96:7a:d5:3c:a2:5d:e8:fe:99:af:4d:4e: b2:97:3d:4e:3f:11:67:77:2f:7c:b8:00:4d:23:bb: 57:54:65:f3:fe:d1:6b:dc:9f:eb:5c:c5:c0:b6:32: 19:f7:1a:34:e0:3f:7b:9e:35:22:55:45:df:49:e7: 45:81:f5:c0:f5:c8:e0:2f:c9:5c:3b:49:41:78:34: 47:99:7f:b5:77:ee:56:94:55:61:8e:2c:18:09:34: a8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FF:A2:8D:63:26:BF:20:42:45:77:F4:88:AD:57:5A:8E:13:63:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4f-ijWMmvyBCRXf0iK1XWo4TY4o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.180.0/22 Signature Algorithm: sha256WithRSAEncryption b2:e0:42:30:56:a5:b9:96:83:53:5d:b2:a8:7e:20:a2:2e:29: 7a:e4:c7:c9:28:41:c3:f2:8d:ed:33:3f:bd:12:94:13:3f:7f: 56:4e:43:36:09:8d:28:2d:d6:91:ef:a3:d8:2f:2d:ee:55:1b: e8:62:76:60:89:2f:6c:7d:46:44:4a:c1:e5:bd:8c:72:6f:82: 82:51:7d:53:73:61:09:5c:49:77:07:f6:26:36:34:bf:30:d6: eb:c8:26:e3:82:5a:bb:df:af:db:38:45:02:97:a6:0a:42:ba: a9:a7:cb:b2:47:b2:8b:12:f1:92:75:0b:fd:5a:1c:4e:1f:62: 4f:9d:d9:1a:92:dd:e5:36:4d:7f:cf:9f:50:0b:e5:58:7e:e1: b7:db:9a:ab:ef:f2:9e:b7:5c:b4:bb:51:98:2e:ba:38:19:01: 29:6f:f8:45:54:18:72:c8:85:29:05:46:62:7b:2f:a8:bb:ef: 54:ce:5d:c1:cc:95:6e:39:b0:52:e1:21:03:94:f0:18:16:41: 95:2f:16:10:2a:43:9d:13:e1:09:33:64:f8:80:f9:a7:6e:6e: f9:1d:29:de:36:e4:d6:29:a0:21:9f:48:a2:5c:d2:b4:e5:d0: 58:98:85:cd:e4:9b:49:f2:97:91:21:4d:2b:3a:ef:92:fd:52: 16:15:2f:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUxRkZBMjhENjMyNkJG MjA0MjQ1NzdGNDg4QUQ1NzVBOEUxMzYzOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYGp4OCp1rLlmMP2+f6DYoi4wvkxtj6z+tYls9oMfyz2CCcQvC TfRrRB3RyQibmC+QnXgR9PaD33vs/zT1uBUauA9wCarYIXb9D4Hq6VSYaWJPvJ+w l7QepdHlYiu13YCdkAO/r7yvHRlnpXbEqwWWvomIViofKE9nTjPq7JjVkkdp94jN 1QOawTr54Z+aVIpJSI6TsWGry8mrBlHYGxjEdKBAJvZpQJZ61TyiXej+ma9NTrKX PU4/EWd3L3y4AE0ju1dUZfP+0Wvcn+tcxcC2Mhn3GjTgP3ueNSJVRd9J50WB9cD1 yOAvyVw7SUF4NEeZf7V37laUVWGOLBgJNKi3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4f+ijWMmvyBCRXf0iK1XWo4TY4owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRmLWlqV01tdnlCQ1JYZjBp SzFYV280VFk0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6bQwDQYJKoZIhvcNAQELBQADggEBALLgQjBWpbmWg1Ndsqh+IKIuKXrkx8koQcPy je0zP70SlBM/f1ZOQzYJjSgt1pHvo9gvLe5VG+hidmCJL2x9RkRKweW9jHJvgoJR fVNzYQlcSXcH9iY2NL8w1uvIJuOCWrvfr9s4RQKXpgpCuqmny7JHsosS8ZJ1C/1a HE4fYk+d2RqS3eU2TX/Pn1AL5Vh+4bfbmqvv8p63XLS7UZguujgZASlv+EVUGHLI hSkFRmJ7L6i771TOXcHMlW45sFLhIQOU8BgWQZUvFhAqQ50T4QkzZPiA+adubvkd Kd425NYpoCGfSKJc0rTl0FiYhc3km0nyl5EhTSs675L9UhYVLxQ= -----END CERTIFICATE-----Generated at Mon May 5 16:33:43 2025 by rpki-client