$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0UKM3YM8eSSuhhbibCiWKtZpuQs.roa File: 0UKM3YM8eSSuhhbibCiWKtZpuQs.roa (raw, json) Hash identifier: NoGwAQy3Zx4R3kHBupd3qStiFv3zUBA0bMEBQjakcVQ= Subject key identifier: D1:42:8C:DD:83:3C:79:24:AE:86:16:E2:6C:28:96:2A:D6:69:B9:0B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35C4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0UKM3YM8eSSuhhbibCiWKtZpuQs.roa Signing time: Mon 10 Feb 2025 13:53:40 +0000 ROA not before: Mon 10 Feb 2025 13:53:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13764 (0x35c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D1428CDD833C7924AE8616E26C28962AD669B90B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:a6:33:c4:00:2a:37:66:01:9b:c9:4f:1a: f4:39:f5:1f:ce:76:19:00:49:54:25:ec:e1:b6:89: 01:cc:19:eb:25:ad:b6:4a:1f:fc:65:9c:3a:7a:80: f5:ae:72:8b:d7:e7:48:48:4f:da:91:ed:bc:4d:91: 12:c9:2f:7b:1c:27:22:06:1b:e3:1c:61:7c:26:06: ce:6d:cc:05:86:bb:61:1e:66:f0:da:f0:ed:2b:ce: 68:35:59:2a:c6:b9:ce:fd:e9:e6:ca:58:12:b8:13: 22:9b:6c:34:46:82:95:26:8b:4c:42:35:6f:52:de: 3c:12:fd:79:a1:c8:82:66:84:56:82:67:e0:c1:5f: 23:3f:56:bc:3c:2f:a3:2b:72:ac:43:36:e0:75:60: 3d:1f:7f:7d:24:f3:13:04:11:85:66:09:55:fc:88: ab:e3:46:2a:4f:44:0e:55:c9:d7:60:21:03:58:38: fe:cc:71:1a:ea:b1:ee:ca:2d:b2:cb:62:1d:6b:64: 95:d1:c4:e3:14:e9:26:4c:1c:32:d1:bd:93:52:9a: 88:fe:45:54:8f:28:4f:e6:48:48:6a:1b:38:06:3b: 5c:7c:51:bd:ab:71:02:6b:92:31:2f:e2:5c:24:67: 9c:89:99:fb:95:dc:9c:4f:39:db:35:00:14:97:e5: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:42:8C:DD:83:3C:79:24:AE:86:16:E2:6C:28:96:2A:D6:69:B9:0B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0UKM3YM8eSSuhhbibCiWKtZpuQs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.100.0/22 Signature Algorithm: sha256WithRSAEncryption 26:95:50:6d:f3:e4:d3:21:81:6a:e7:aa:ed:9c:db:5c:fb:05: 45:c8:1a:78:9c:dd:2e:3c:4a:33:90:50:00:96:e6:eb:af:30: 4d:d4:e5:18:d9:1f:47:3f:72:15:a5:3d:93:b3:53:3d:69:06: 9a:f9:60:35:3f:68:90:07:06:cf:17:a3:aa:51:a1:90:5d:44: cc:6f:ac:34:de:02:89:27:65:93:7b:40:e8:29:18:6d:a0:89: 84:3c:60:2e:05:01:a1:c6:ab:66:d1:e6:f4:48:ef:b4:67:f1: 3f:ab:2f:1a:c5:a5:11:98:2b:2f:47:b6:dd:8b:54:10:d5:e9: df:af:da:9e:00:0d:64:28:98:17:7e:24:f9:1b:6f:26:ad:c1: c9:9c:d1:94:6f:06:40:e9:61:90:75:e8:89:3b:ce:25:a4:b1: 86:8b:00:59:0e:fb:42:3e:b3:8a:df:3e:1a:95:6a:63:02:dd: bb:fe:a5:2e:98:b6:1f:8c:ee:d9:17:8c:6c:74:95:36:e3:0b: 3f:f7:9b:6e:a0:8e:a5:8c:46:82:f6:75:7a:ae:98:16:c2:93: 45:f4:71:63:bc:77:8d:c1:8d:4b:5d:db:d4:73:5f:65:db:ab: b9:91:ac:09:4c:65:4c:4c:59:88:c9:08:dd:49:32:7d:41:96: b7:f4:3c:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxNDI4Q0REODMzQzc5 MjRBRTg2MTZFMjZDMjg5NjJBRDY2OUI5MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6NaYzxAAqN2YBm8lPGvQ59R/OdhkASVQl7OG2iQHMGeslrbZK H/xlnDp6gPWucovX50hIT9qR7bxNkRLJL3scJyIGG+McYXwmBs5tzAWGu2EeZvDa 8O0rzmg1WSrGuc796ebKWBK4EyKbbDRGgpUmi0xCNW9S3jwS/XmhyIJmhFaCZ+DB XyM/Vrw8L6MrcqxDNuB1YD0ff30k8xMEEYVmCVX8iKvjRipPRA5VyddgIQNYOP7M cRrqse7KLbLLYh1rZJXRxOMU6SZMHDLRvZNSmoj+RVSPKE/mSEhqGzgGO1x8Ub2r cQJrkjEv4lwkZ5yJmfuV3JxPOds1ABSX5b6JAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0UKM3YM8eSSuhhbibCiWKtZpuQswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBVS00zWU04ZVNTdWhoYmli Q2lXS3RacHVRcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wWQwDQYJKoZIhvcNAQELBQADggEBACaVUG3z5NMhgWrnqu2c21z7BUXIGnic3S48 SjOQUACW5uuvME3U5RjZH0c/chWlPZOzUz1pBpr5YDU/aJAHBs8Xo6pRoZBdRMxv rDTeAoknZZN7QOgpGG2giYQ8YC4FAaHGq2bR5vRI77Rn8T+rLxrFpRGYKy9Htt2L VBDV6d+v2p4ADWQomBd+JPkbbyatwcmc0ZRvBkDpYZB16Ik7ziWksYaLAFkO+0I+ s4rfPhqVamMC3bv+pS6Yth+M7tkXjGx0lTbjCz/3m26gjqWMRoL2dXqumBbCk0X0 cWO8d43BjUtd29RzX2Xbq7mRrAlMZUxMWYjJCN1JMn1Blrf0PIo= -----END CERTIFICATE-----Generated at Tue Apr 22 14:59:34 2025 by rpki-client