$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-mGmd_lr1MsQsMuxdgNR5pcdevw.roa File: -mGmd_lr1MsQsMuxdgNR5pcdevw.roa (raw, json) Hash identifier: BZBQy9r0MJNtjET3hBcFrithMC+pY8XZWnJvDtbK17Y= Subject key identifier: FA:61:A6:77:F9:6B:D4:CB:10:B0:CB:B1:76:03:51:E6:97:1D:7A:FC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 352D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-mGmd_lr1MsQsMuxdgNR5pcdevw.roa Signing time: Mon 10 Feb 2025 13:53:06 +0000 ROA not before: Mon 10 Feb 2025 13:53:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13613 (0x352d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FA61A677F96BD4CB10B0CBB1760351E6971D7AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:fc:ad:69:ac:11:0a:e6:ef:ee:36:2d:44: 42:57:0d:95:fe:89:f9:d5:41:19:cc:23:58:8e:fa: ad:73:04:e7:6b:ee:5b:d2:8e:48:0e:5d:01:a9:c4: a5:5a:c2:a3:7e:9f:57:8a:12:be:63:f6:7a:28:78: f0:63:be:98:ff:38:96:f0:a2:47:29:3a:68:1c:d0: 36:0f:47:76:aa:a6:e4:19:0a:2b:f6:08:36:64:64: 60:9d:73:31:4c:da:fb:b8:33:33:84:d6:af:92:53: 98:8e:7a:34:3e:66:ca:07:4c:91:26:e3:64:68:6b: af:ad:66:b1:35:a3:8a:f8:b8:58:d2:8f:37:35:66: ea:8d:a1:cd:20:7e:9f:b8:37:70:0e:2f:5d:13:90: 66:92:7e:7d:2d:fb:56:ca:d1:b0:d1:e0:3f:f3:09: 0f:2c:f7:a2:e0:25:db:71:d6:d8:c9:70:6c:1b:c7: 07:9e:3e:eb:70:a3:85:3f:07:6f:37:51:f5:3b:61: 39:2b:11:45:b1:0a:1d:91:22:be:05:f2:ea:86:97: 06:73:fa:c1:a9:70:66:36:04:e8:c8:d4:3d:09:8d: 07:36:c7:20:81:ee:f6:42:4e:31:45:a7:75:bd:83: 34:2e:e2:ae:91:a5:f5:c2:64:ee:58:5e:00:4e:df: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:61:A6:77:F9:6B:D4:CB:10:B0:CB:B1:76:03:51:E6:97:1D:7A:FC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-mGmd_lr1MsQsMuxdgNR5pcdevw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.168.0/22 Signature Algorithm: sha256WithRSAEncryption 46:f4:8b:1d:94:85:9a:02:ad:5b:01:0c:d1:5d:95:7e:8d:ce: 23:9e:ae:76:9e:f8:e5:90:bc:ed:28:91:79:9f:37:ab:69:56: 81:a5:5f:de:fb:f6:a7:7b:68:7c:36:86:a7:ae:9e:9b:1d:33: 44:0e:10:34:db:7e:c5:6d:09:45:c0:de:dc:25:0f:3a:f3:65: 3b:e6:09:68:b9:8c:79:1b:8b:e2:94:cf:3e:07:1e:44:39:95: 3a:36:1d:cb:2e:41:a3:a3:d3:62:21:11:90:1b:b7:8d:a1:df: e3:79:db:a2:60:1a:52:94:70:dd:42:4e:c6:a9:eb:5c:04:b9: 2a:7e:3c:5f:61:ab:8d:20:e3:fc:08:55:56:19:95:36:10:f0: 09:1e:15:fb:ad:0b:64:b0:21:84:a7:53:28:b8:81:cd:f5:67: 8d:fc:0e:de:77:67:e7:2e:f5:eb:28:69:93:1d:c4:9b:35:0b: 6f:be:46:a9:97:27:1c:63:bc:41:9b:09:19:f9:d0:c4:cb:d9: 9d:b1:d9:72:c0:10:e9:7e:13:1d:36:86:3c:4b:92:ef:01:6c: a8:14:cc:fb:4f:c4:ed:b3:cd:8e:79:cd:34:af:c7:9e:cd:57: 91:e5:d7:17:f9:d3:19:d4:6a:f5:78:ec:47:19:5b:d7:48:ce: 89:6e:6e:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZBNjFBNjc3Rjk2QkQ0 Q0IxMEIwQ0JCMTc2MDM1MUU2OTcxRDdBRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrBvytaawRCubv7jYtREJXDZX+ifnVQRnMI1iO+q1zBOdr7lvS jkgOXQGpxKVawqN+n1eKEr5j9nooePBjvpj/OJbwokcpOmgc0DYPR3aqpuQZCiv2 CDZkZGCdczFM2vu4MzOE1q+SU5iOejQ+ZsoHTJEm42Roa6+tZrE1o4r4uFjSjzc1 ZuqNoc0gfp+4N3AOL10TkGaSfn0t+1bK0bDR4D/zCQ8s96LgJdtx1tjJcGwbxwee Putwo4U/B283UfU7YTkrEUWxCh2RIr4F8uqGlwZz+sGpcGY2BOjI1D0JjQc2xyCB 7vZCTjFFp3W9gzQu4q6RpfXCZO5YXgBO309ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+mGmd/lr1MsQsMuxdgNR5pcdevwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1tR21kX2xyMU1zUXNNdXhk Z05SNXBjZGV2dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wKgwDQYJKoZIhvcNAQELBQADggEBAEb0ix2UhZoCrVsBDNFdlX6NziOernae+OWQ vO0okXmfN6tpVoGlX9779qd7aHw2hqeunpsdM0QOEDTbfsVtCUXA3twlDzrzZTvm CWi5jHkbi+KUzz4HHkQ5lTo2HcsuQaOj02IhEZAbt42h3+N526JgGlKUcN1CTsap 61wEuSp+PF9hq40g4/wIVVYZlTYQ8AkeFfutC2SwIYSnUyi4gc31Z438Dt53Z+cu 9esoaZMdxJs1C2++RqmXJxxjvEGbCRn50MTL2Z2x2XLAEOl+Ex02hjxLku8BbKgU zPtPxO2zzY55zTSvx57NV5Hl1xf50xnUavV47EcZW9dIzolubkM= -----END CERTIFICATE-----Generated at Fri Apr 18 22:45:23 2025 by rpki-client