$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VDTW-sASkLmin69k0UseBegn22Q.roa File: VDTW-sASkLmin69k0UseBegn22Q.roa (raw, json) Hash identifier: VxsFPWFEk+rGKucRdNoqhKnMYj0QhZaBml5LBCWWB28= Subject key identifier: 54:34:D6:FA:C0:12:90:B9:A2:9F:AF:64:D1:4B:1E:05:E8:27:DB:64 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 341F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VDTW-sASkLmin69k0UseBegn22Q.roa Signing time: Mon 10 Feb 2025 13:52:06 +0000 ROA not before: Mon 10 Feb 2025 13:52:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13343 (0x341f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5434D6FAC01290B9A29FAF64D14B1E05E827DB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:aa:b4:c9:6b:73:d9:42:91:b4:63:ef:ef: be:fe:12:31:fc:30:6a:dd:95:6e:9d:28:ac:f3:ad: 02:8b:c2:20:b5:55:41:a5:d1:39:bd:96:92:c0:e1: 12:99:e7:de:bd:91:12:bb:c8:9f:11:06:4f:a4:0b: c8:54:b8:5a:0d:b3:d8:54:ea:27:5c:4c:58:cd:ca: ba:53:df:98:f9:3e:45:33:3b:6a:ef:39:1f:4e:8e: e8:45:7e:36:02:c4:58:1f:57:49:01:d3:ad:a9:d1: 0a:05:e3:19:14:4d:9d:e0:ac:06:69:08:23:7c:3d: 54:f3:e1:d5:6b:8d:70:f6:d6:97:57:8b:44:ee:f0: a5:f8:79:e7:0a:46:ad:26:01:64:06:36:e7:9d:2f: d4:9e:e5:6d:0c:ab:99:a0:19:1e:17:dc:d5:13:5a: c2:f8:98:52:be:74:88:3b:33:2e:1f:8a:49:d8:7e: f0:7e:2b:1b:6c:cd:b4:e4:33:46:7f:a3:a6:42:d6: bb:42:3c:f2:29:43:e9:97:5f:f3:68:79:a4:a4:b9: 4d:58:4c:d4:ff:c1:c0:62:45:3f:12:4f:91:7b:4b: 80:b2:52:7f:a1:a1:ea:77:21:f8:b6:59:60:74:97: 65:a3:b1:f0:73:81:17:20:db:c2:81:57:4b:2b:fe: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:34:D6:FA:C0:12:90:B9:A2:9F:AF:64:D1:4B:1E:05:E8:27:DB:64 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VDTW-sASkLmin69k0UseBegn22Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.245.0/24 Signature Algorithm: sha256WithRSAEncryption 43:1d:1d:08:16:0a:87:bf:76:36:ec:ad:39:c5:c3:ef:81:31: b5:96:c3:01:4e:3e:03:12:5c:7e:1c:0c:c0:2f:3e:c2:40:e2: 1c:3a:7b:68:ae:db:ec:11:a4:75:46:d0:3b:46:c5:32:e1:76: 98:54:d6:48:68:3b:eb:cd:04:53:3f:6c:6d:be:63:20:53:fa: 85:29:a2:4f:24:95:3e:26:59:48:d7:59:d9:0e:d0:09:5d:29: 51:cc:ca:50:80:1d:e2:ee:8c:1e:9b:3f:bb:23:12:6a:8a:c9: cc:42:08:e8:54:f6:9c:e6:b2:c0:1c:78:12:ba:95:0b:92:1d: ce:a9:8c:2b:09:82:5a:01:28:f9:f2:f8:51:56:19:3a:e7:58: 4c:05:20:58:97:9e:72:5f:13:ef:3d:82:75:2e:fe:9d:7e:c6: d1:a0:a1:a7:12:ae:ec:92:b8:f5:fe:55:2d:0f:35:09:75:a4: 53:65:94:08:06:8d:7c:82:0d:53:8b:5a:52:01:27:89:c1:76: 73:b7:43:d7:31:bc:9d:92:de:b8:38:44:af:07:a0:14:29:83: 9a:7b:ab:21:7c:73:a4:34:fe:18:44:57:ee:03:6f:ae:97:08: 0a:4b:5e:49:7f:25:6a:1d:32:17:59:9b:b4:2d:26:54:c5:58: 94:f9:16:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0MzRENkZBQzAxMjkw QjlBMjlGQUY2NEQxNEIxRTA1RTgyN0RCNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Kaq0yWtz2UKRtGPv777+EjH8MGrdlW6dKKzzrQKLwiC1VUGl 0Tm9lpLA4RKZ5969kRK7yJ8RBk+kC8hUuFoNs9hU6idcTFjNyrpT35j5PkUzO2rv OR9OjuhFfjYCxFgfV0kB062p0QoF4xkUTZ3grAZpCCN8PVTz4dVrjXD21pdXi0Tu 8KX4eecKRq0mAWQGNuedL9Se5W0Mq5mgGR4X3NUTWsL4mFK+dIg7My4fiknYfvB+ KxtszbTkM0Z/o6ZC1rtCPPIpQ+mXX/NoeaSkuU1YTNT/wcBiRT8ST5F7S4CyUn+h oep3Ifi2WWB0l2WjsfBzgRcg28KBV0sr/tp9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVDTW+sASkLmin69k0UseBegn22QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZEVFctc0FTa0xtaW42OWsw VXNlQmVnbjIyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6fUwDQYJKoZIhvcNAQELBQADggEBAEMdHQgWCoe/djbsrTnFw++BMbWWwwFOPgMS XH4cDMAvPsJA4hw6e2iu2+wRpHVG0DtGxTLhdphU1khoO+vNBFM/bG2+YyBT+oUp ok8klT4mWUjXWdkO0AldKVHMylCAHeLujB6bP7sjEmqKycxCCOhU9pzmssAceBK6 lQuSHc6pjCsJgloBKPny+FFWGTrnWEwFIFiXnnJfE+89gnUu/p1+xtGgoacSruyS uPX+VS0PNQl1pFNllAgGjXyCDVOLWlIBJ4nBdnO3Q9cxvJ2S3rg4RK8HoBQpg5p7 qyF8c6Q0/hhEV+4Db66XCApLXkl/JWodMhdZm7QtJlTFWJT5Fmw= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:49 2025 by rpki-client on console.sobornost.net