$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WrwLF9sSduXFShSQu44tYngsdQ.roa File: -WrwLF9sSduXFShSQu44tYngsdQ.roa (raw, json) Hash identifier: An8aaJnkF/QDVUo395gdIdso3+zhcbWceesFrGmaaic= Subject key identifier: F9:6A:F0:2C:5F:6C:49:DB:97:15:28:52:42:EE:38:B5:89:E0:B1:D4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33EC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WrwLF9sSduXFShSQu44tYngsdQ.roa Signing time: Mon 10 Feb 2025 13:51:54 +0000 ROA not before: Mon 10 Feb 2025 13:51:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13292 (0x33ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F96AF02C5F6C49DB9715285242EE38B589E0B1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:9f:9e:53:79:8b:be:58:5b:9c:ac:ed:e7: f4:71:26:60:bb:be:fa:34:8d:8d:b2:a2:e1:47:48: c4:8b:94:96:cf:21:56:f1:44:f4:1b:97:29:54:74: 84:48:67:c0:ff:c8:2c:2d:06:24:39:dd:cf:33:c2: 9d:06:44:02:60:74:5a:31:1f:63:ca:19:1b:7a:6e: 0a:42:59:b9:64:6e:e9:60:94:eb:e8:54:07:92:de: b9:25:5f:5a:43:ac:43:fe:71:70:16:6c:18:2d:8d: 47:e1:41:0d:04:79:8c:a5:07:80:19:79:e1:93:56: 6c:1d:dd:3f:8f:e3:97:9b:27:2a:eb:7e:b2:31:0d: 2a:70:18:db:83:4a:e8:27:8c:d9:36:12:a6:59:b0: 11:ff:40:ef:41:2a:d7:a4:99:38:4d:d2:1d:fd:70: 59:3f:44:1f:22:65:85:c8:b6:b7:13:2e:36:1f:8e: 15:f7:95:85:f9:5a:a9:a2:ea:8c:6d:65:5a:d4:66: de:cf:22:21:6b:be:4d:02:87:14:bc:9b:42:45:b3: 5b:04:1d:96:dc:fb:d2:29:6c:85:ba:4a:9b:05:32: c4:9d:52:e3:6b:7f:c9:fc:9c:2c:b6:ba:46:56:73: fc:f2:0f:23:d0:7a:ce:21:30:b1:76:40:02:3d:80: 51:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6A:F0:2C:5F:6C:49:DB:97:15:28:52:42:EE:38:B5:89:E0:B1:D4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WrwLF9sSduXFShSQu44tYngsdQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.60.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:c2:27:a5:2b:29:4f:0b:03:87:2e:5d:a0:b9:90:9d:47:de: 4f:1e:71:70:88:51:0e:d8:c5:98:3e:79:41:ef:00:a7:f0:6c: 9e:7b:e8:40:ee:ac:df:97:e3:ea:ed:f2:e7:57:fd:5b:e4:1c: 70:e3:68:e8:69:b2:8d:87:14:1f:7f:b1:71:ce:87:b7:5e:e7: b0:f3:a9:9e:2b:6d:5c:7c:8b:4a:ee:5f:ad:d2:3f:ef:ec:59: e9:1a:b7:01:1a:87:a5:1c:52:7e:02:0a:aa:2d:a3:c8:ad:0a: aa:bb:04:ad:1a:c5:3c:d8:7d:f9:d9:62:52:b1:32:bd:21:67: 6a:c2:bb:55:25:f0:92:81:c6:50:59:79:a0:df:e1:e9:92:0b: b0:5c:f4:ef:e1:b3:95:cc:51:cb:18:4f:2d:be:8c:f7:66:4d: 78:a2:7f:a1:37:78:ed:02:bd:de:41:bc:72:b5:ee:b9:d5:d3: e2:be:91:12:06:61:f0:56:27:97:40:d4:cd:8b:0d:b0:ab:44: bb:75:59:2f:f4:f6:ff:cd:69:20:5b:c0:42:f3:85:2f:3e:9a: a3:cd:f6:aa:08:58:23:75:ac:61:ce:77:44:d6:d5:cc:e2:47: 16:50:00:2d:17:74:ab:17:f9:22:ec:2b:f4:b3:cb:9d:4e:4d: 9a:38:79:ba -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM+wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY5NkFGMDJDNUY2QzQ5 REI5NzE1Mjg1MjQyRUUzOEI1ODlFMEIxRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGK5+eU3mLvlhbnKzt5/RxJmC7vvo0jY2youFHSMSLlJbPIVbx RPQblylUdIRIZ8D/yCwtBiQ53c8zwp0GRAJgdFoxH2PKGRt6bgpCWblkbulglOvo VAeS3rklX1pDrEP+cXAWbBgtjUfhQQ0EeYylB4AZeeGTVmwd3T+P45ebJyrrfrIx DSpwGNuDSugnjNk2EqZZsBH/QO9BKtekmThN0h39cFk/RB8iZYXItrcTLjYfjhX3 lYX5Wqmi6oxtZVrUZt7PIiFrvk0ChxS8m0JFs1sEHZbc+9IpbIW6SpsFMsSdUuNr f8n8nCy2ukZWc/zyDyPQes4hMLF2QAI9gFFpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+WrwLF9sSduXFShSQu44tYngsdQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1XcndMRjlzU2R1WEZTaFNR dTQ0dFluZ3NkUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wTwwDQYJKoZIhvcNAQELBQADggEBAC3CJ6UrKU8LA4cuXaC5kJ1H3k8ecXCIUQ7Y xZg+eUHvAKfwbJ576EDurN+X4+rt8udX/VvkHHDjaOhpso2HFB9/sXHOh7de57Dz qZ4rbVx8i0ruX63SP+/sWekatwEah6UcUn4CCqoto8itCqq7BK0axTzYffnZYlKx Mr0hZ2rCu1Ul8JKBxlBZeaDf4emSC7Bc9O/hs5XMUcsYTy2+jPdmTXiif6E3eO0C vd5BvHK17rnV0+K+kRIGYfBWJ5dA1M2LDbCrRLt1WS/09v/NaSBbwELzhS8+mqPN 9qoIWCN1rGHOd0TW1cziRxZQAC0XdKsX+SLsK/Szy51OTZo4ebo= -----END CERTIFICATE-----Generated at Tue Apr 22 14:59:21 2025 by rpki-client