$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Veo1y2CyGcYhbC8V7PDYIpbqGVk.roa File: Veo1y2CyGcYhbC8V7PDYIpbqGVk.roa (raw, json) Hash identifier: xtp5YR6w+NkiPz8T+Ra+Dmppx69HXe0TEN8M+y2zmnk= Subject key identifier: 55:EA:35:CB:60:B2:19:C6:21:6C:2F:15:EC:F0:D8:22:96:EA:19:59 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3600 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Veo1y2CyGcYhbC8V7PDYIpbqGVk.roa Signing time: Mon 10 Feb 2025 13:53:54 +0000 ROA not before: Mon 10 Feb 2025 13:53:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 09:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13824 (0x3600) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=55EA35CB60B219C6216C2F15ECF0D82296EA1959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:d0:a0:0a:ef:c4:ca:da:a2:e4:58:6c:59: 3f:16:bd:06:11:39:fe:5d:0f:4b:2b:4e:d6:a4:84: b8:30:79:dd:1c:89:19:0b:12:f3:ea:72:df:01:ee: 8f:72:dd:e9:1a:01:f1:78:01:0e:74:d2:a8:81:a3: f6:50:81:2c:02:df:ef:c4:f7:5e:5f:b2:90:40:e9: 3f:06:cb:d3:d6:a8:37:14:03:81:16:42:a7:75:cb: c8:7a:bf:d5:ee:8e:5e:c3:a3:2a:93:e5:53:38:e7: 6f:fb:07:08:b2:a3:0f:d0:2b:93:e8:ca:c1:ff:28: 41:98:0d:fc:49:32:be:e0:5c:6a:e6:e2:22:00:2b: 42:b3:52:24:67:1c:84:0b:a2:0c:d9:45:61:74:d6: de:5a:a7:66:4a:c4:5f:c1:f9:59:2e:92:8f:22:d0: 36:77:b3:fb:1b:2f:1d:8e:92:87:e9:49:ca:83:32: a5:61:47:42:5c:6d:97:46:fc:b6:c8:5b:d5:9e:ab: bf:73:a4:c5:84:ee:90:f6:55:74:7b:d1:c7:07:3e: 0e:04:a0:f1:82:f3:01:c1:61:53:6a:01:c0:26:80: 67:88:bc:4c:0a:e8:6f:5e:35:69:85:a3:ba:6b:a4: 7e:5f:c1:0b:ed:9f:e4:a6:01:b2:32:47:37:62:0d: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EA:35:CB:60:B2:19:C6:21:6C:2F:15:EC:F0:D8:22:96:EA:19:59 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Veo1y2CyGcYhbC8V7PDYIpbqGVk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.246.0/23 Signature Algorithm: sha256WithRSAEncryption 19:67:38:54:a3:ce:81:67:6c:d2:ac:8e:54:d5:6c:12:66:30: 96:b7:40:67:c1:a1:0f:af:d2:cb:cf:b6:2d:bc:3e:49:f1:42: 6b:af:3f:6b:0a:1c:78:ec:29:ed:c5:d1:a7:90:bc:ec:49:5b: 56:45:3d:f1:db:de:c0:82:66:18:2e:a4:fd:d2:d1:b3:83:fd: ba:8d:e1:ac:f9:66:69:f9:80:e2:23:8d:b9:d2:bf:df:75:f6: db:3c:b9:e0:25:6d:b8:31:dc:fc:26:b4:0d:1f:ad:a2:ec:bf: 9b:93:62:c7:f3:1a:de:3e:44:83:a0:c2:98:2e:12:e7:df:f7: 2d:23:fa:50:63:99:4b:f4:34:11:14:ed:a8:79:32:d9:06:ef: 3e:92:70:8b:4c:1e:f5:b0:d6:27:8d:63:1b:3a:90:4f:4b:f0: 1d:4b:48:ef:35:4d:50:e1:80:6d:2a:88:a4:b1:4b:26:9f:66: ad:ec:cf:4f:8a:aa:bb:17:a8:e0:9b:b1:e8:93:0f:bc:09:65: d5:be:97:cb:70:9b:d2:7f:ea:2d:72:1d:99:47:2f:8c:6a:3d: fe:22:b8:5d:94:e0:f3:0a:ef:ff:ea:0f:9d:98:f7:b0:42:7b: 74:ed:2d:3f:51:62:8f:e6:f2:0b:63:15:9f:19:d2:1c:ee:e6: 50:44:31:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1RUEzNUNCNjBCMjE5 QzYyMTZDMkYxNUVDRjBEODIyOTZFQTE5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUndCgCu/Eytqi5FhsWT8WvQYROf5dD0srTtakhLgwed0ciRkL EvPqct8B7o9y3ekaAfF4AQ500qiBo/ZQgSwC3+/E915fspBA6T8Gy9PWqDcUA4EW Qqd1y8h6v9Xujl7DoyqT5VM452/7Bwiyow/QK5PoysH/KEGYDfxJMr7gXGrm4iIA K0KzUiRnHIQLogzZRWF01t5ap2ZKxF/B+Vkuko8i0DZ3s/sbLx2OkofpScqDMqVh R0JcbZdG/LbIW9Weq79zpMWE7pD2VXR70ccHPg4EoPGC8wHBYVNqAcAmgGeIvEwK 6G9eNWmFo7prpH5fwQvtn+SmAbIyRzdiDeyxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVeo1y2CyGcYhbC8V7PDYIpbqGVkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZlbzF5MkN5R2NZaGJDOFY3 UERZSXBicUdWay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6fYwDQYJKoZIhvcNAQELBQADggEBABlnOFSjzoFnbNKsjlTVbBJmMJa3QGfBoQ+v 0svPti28PknxQmuvP2sKHHjsKe3F0aeQvOxJW1ZFPfHb3sCCZhgupP3S0bOD/bqN 4az5Zmn5gOIjjbnSv9919ts8ueAlbbgx3PwmtA0fraLsv5uTYsfzGt4+RIOgwpgu Euff9y0j+lBjmUv0NBEU7ah5MtkG7z6ScItMHvWw1ieNYxs6kE9L8B1LSO81TVDh gG0qiKSxSyafZq3sz0+KqrsXqOCbseiTD7wJZdW+l8twm9J/6i1yHZlHL4xqPf4i uF2U4PMK7//qD52Y97BCe3TtLT9RYo/m8gtjFZ8Z0hzu5lBEMZk= -----END CERTIFICATE-----Generated at Wed May 7 09:10:30 2025 by rpki-client