$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h8h9GCiPsewgHSPGwGVLtO20CIo.roa File: h8h9GCiPsewgHSPGwGVLtO20CIo.roa (raw, json) Hash identifier: q79THApQgc9V2nqCDAmOkfFzlBbWAIK+HCDOMR8r2nM= Subject key identifier: 87:C8:7D:18:28:8F:B1:EC:20:1D:23:C6:C0:65:4B:B4:ED:B4:08:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36C9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h8h9GCiPsewgHSPGwGVLtO20CIo.roa Signing time: Mon 10 Feb 2025 13:54:41 +0000 ROA not before: Mon 10 Feb 2025 13:54:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.124.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 02:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14025 (0x36c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=87C87D18288FB1EC201D23C6C0654BB4EDB4088A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:ba:d2:60:2f:20:1f:57:d2:ac:86:d9:5b: 83:d9:8a:e3:65:b6:0f:d8:1c:9a:87:27:10:cb:d7: aa:d8:35:db:bd:ee:43:cc:86:f6:f5:10:d1:79:87: cc:23:8b:c0:d6:91:ca:e6:f7:75:52:06:35:4c:c5: d4:fb:55:91:9d:71:38:aa:62:f5:36:89:45:a7:b7: 1b:ca:50:c4:fb:9c:65:c5:ab:d8:6e:25:0a:a0:df: b8:a6:cf:7b:8f:80:46:46:4e:2b:9b:a2:a4:7b:ee: a4:e0:8a:eb:30:03:e6:d4:f6:03:12:80:69:54:53: 54:eb:16:b4:68:46:f3:cb:11:25:1f:8b:28:c5:df: 7c:41:29:f8:bb:5d:4a:20:f4:b4:c9:b0:f1:78:62: 20:39:68:e1:31:99:56:d0:d0:e8:44:78:56:5f:91: 73:28:71:c3:3f:6f:e8:f2:c3:98:21:e4:f0:fa:f6: 06:90:37:aa:ec:b5:47:e8:96:57:85:6e:2b:4e:20: c8:88:3d:64:6a:4c:93:17:a3:55:96:16:2c:8c:2e: da:e3:b1:c7:b5:d3:a3:32:15:29:11:bf:50:4d:2d: 26:a5:63:7b:6e:cf:8c:46:c7:2d:26:4d:81:96:dd: dc:3c:79:8d:04:20:e9:fb:f2:0a:0d:38:3d:5b:6b: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C8:7D:18:28:8F:B1:EC:20:1D:23:C6:C0:65:4B:B4:ED:B4:08:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h8h9GCiPsewgHSPGwGVLtO20CIo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.124.128/25 Signature Algorithm: sha256WithRSAEncryption 6b:c0:e9:34:a2:30:01:69:14:cf:7a:45:a4:d6:e5:cf:52:d5: b7:13:fc:69:39:28:51:76:e9:f1:1e:be:96:28:3c:c1:07:ed: af:cb:28:0e:53:a6:42:57:f5:b9:02:91:2e:0a:ad:7a:ab:d0: 6c:1b:0a:79:c4:df:29:4e:ee:58:4f:ed:62:78:bc:53:cf:24: 5e:5e:3b:12:ed:2a:31:52:83:78:9e:ff:bc:85:5e:a0:55:5e: b5:d8:ef:59:bc:ee:9c:83:1b:66:74:f7:c5:59:5e:78:91:31: c0:8c:0d:4a:a8:e2:b5:6f:e9:7c:92:96:6f:37:74:eb:eb:e2: 74:bf:75:6c:b7:84:31:e5:34:19:fd:8f:40:6b:a0:65:d4:9e: d7:e2:d1:90:9f:0f:5a:95:fb:08:42:f4:9e:9b:4a:bd:01:20: 52:da:3d:a4:0b:98:24:ff:c3:a0:f2:6e:d4:36:62:5a:4a:45: b4:03:84:07:a0:20:4c:7d:84:75:78:10:c7:42:cb:e3:b4:72: 8c:7e:f2:1c:27:92:e6:81:09:3a:fa:9f:4a:3c:c0:6d:89:72: d4:1f:d9:ce:ff:64:00:69:f6:2f:08:9b:4c:e0:12:63:52:d2: 25:ff:6d:bb:b6:46:f0:9c:1c:c7:6c:52:1d:a9:4e:5f:2d:80: 9c:df:57:15 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg3Qzg3RDE4Mjg4RkIx RUMyMDFEMjNDNkMwNjU0QkI0RURCNDA4OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0PbrSYC8gH1fSrIbZW4PZiuNltg/YHJqHJxDL16rYNdu97kPM hvb1ENF5h8wji8DWkcrm93VSBjVMxdT7VZGdcTiqYvU2iUWntxvKUMT7nGXFq9hu JQqg37imz3uPgEZGTiuboqR77qTgiuswA+bU9gMSgGlUU1TrFrRoRvPLESUfiyjF 33xBKfi7XUog9LTJsPF4YiA5aOExmVbQ0OhEeFZfkXMoccM/b+jyw5gh5PD69gaQ N6rstUfolleFbitOIMiIPWRqTJMXo1WWFiyMLtrjsce106MyFSkRv1BNLSalY3tu z4xGxy0mTYGW3dw8eY0EIOn78goNOD1ba6SrAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUh8h9GCiPsewgHSPGwGVLtO20CIowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2g4aDlHQ2lQc2V3Z0hTUEd3 R1ZMdE8yMENJby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THyAMA0GCSqGSIb3DQEBCwUAA4IBAQBrwOk0ojABaRTPekWk1uXPUtW3E/xpOShR dunxHr6WKDzBB+2vyygOU6ZCV/W5ApEuCq16q9BsGwp5xN8pTu5YT+1ieLxTzyRe XjsS7SoxUoN4nv+8hV6gVV612O9ZvO6cgxtmdPfFWV54kTHAjA1KqOK1b+l8kpZv N3Tr6+J0v3Vst4Qx5TQZ/Y9Aa6Bl1J7X4tGQnw9alfsIQvSem0q9ASBS2j2kC5gk /8Og8m7UNmJaSkW0A4QHoCBMfYR1eBDHQsvjtHKMfvIcJ5LmgQk6+p9KPMBtiXLU H9nO/2QAafYvCJtM4BJjUtIl/227tkbwnBzHbFIdqU5fLYCc31cV -----END CERTIFICATE-----Generated at Tue May 6 01:28:47 2025 by rpki-client