$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0wAsLlgKuaMEQ8dsovSLv4YkrWo.roa File: 0wAsLlgKuaMEQ8dsovSLv4YkrWo.roa (raw, json) Hash identifier: ritBESRxjFS/+7XvDGC9RXAqus8cjSrRmuJKdOoDsxU= Subject key identifier: D3:00:2C:2E:58:0A:B9:A3:04:43:C7:6C:A2:F4:8B:BF:86:24:AD:6A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3471 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0wAsLlgKuaMEQ8dsovSLv4YkrWo.roa Signing time: Mon 10 Feb 2025 13:52:23 +0000 ROA not before: Mon 10 Feb 2025 13:52:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D3002C2E580AB9A30443C76CA2F48BBF8624AD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:8d:e3:44:b3:9a:a2:53:a0:5e:ed:cb:58: 16:69:76:68:c5:5a:b1:7b:26:20:17:5a:5b:01:89: eb:8f:ba:4e:53:0a:ca:bd:54:cf:6f:d4:fb:fa:c5: df:96:53:e6:8e:83:92:ec:0a:f3:19:8d:6d:e7:b9: 34:c5:26:d5:dc:58:6d:02:7e:a4:55:f0:7b:58:c9: b8:9f:9d:83:91:58:f2:c2:06:d5:5a:1f:21:69:43: f5:85:e8:3f:f6:64:9c:76:cb:72:50:1c:00:c9:fa: 30:d8:f4:88:11:48:ff:d5:c4:19:80:e5:25:83:9f: 61:83:6b:b1:f7:0b:cd:67:99:1d:df:3a:a0:85:9a: c4:49:10:c2:ed:1e:ef:bf:8b:12:5b:a4:35:fd:35: 71:73:ec:e6:35:0a:22:e3:79:b8:fb:74:48:6d:7d: 47:74:f8:55:f4:7c:47:3b:ee:30:e7:63:17:59:a1: 18:f9:99:32:44:3e:f1:3c:7b:91:45:00:62:70:d2: 41:1c:9a:69:f3:44:ff:f3:90:fe:54:2f:96:82:a5: 4b:60:11:3d:ab:3d:40:ae:e1:23:02:b2:50:ec:fc: 72:39:12:6c:9f:64:9e:63:6f:f1:ce:61:22:46:05: de:a2:b8:f1:08:52:0b:79:f2:af:0b:0c:e1:f9:a6: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:00:2C:2E:58:0A:B9:A3:04:43:C7:6C:A2:F4:8B:BF:86:24:AD:6A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0wAsLlgKuaMEQ8dsovSLv4YkrWo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.56.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:6f:92:f7:22:08:f4:9b:cb:a0:24:fd:d6:2d:68:be:b1:15: 42:29:86:e1:d4:85:f8:cc:a1:da:a7:a4:65:8e:9f:44:ae:44: 5b:f1:1d:af:08:70:2e:6a:f2:95:15:39:b3:46:4b:f6:b1:d1: b8:b2:a5:b8:37:65:1c:ac:fb:ee:04:ed:c6:ac:06:1b:cb:34: 79:6d:2c:cb:07:2a:57:75:51:2e:70:dc:94:dd:61:9d:10:4c: e6:29:22:d4:cb:a3:a2:de:1f:33:5f:ac:d4:72:e1:97:1e:d8: 1a:9b:fe:36:4e:b6:6f:1c:f0:de:f7:38:fb:fe:7c:86:b8:42: 68:90:66:5d:27:d8:18:f7:8e:4c:16:5c:ba:89:36:d4:75:49: 80:3f:9e:60:ae:e1:eb:fe:e7:4b:c4:6d:3b:33:f7:93:6f:35: d2:9e:86:8a:8c:a3:f0:47:33:6d:61:5f:8c:08:59:38:3f:b8: c0:7a:b1:1e:9a:d2:5a:13:e1:28:91:70:dc:4d:37:f2:1b:42: 0c:93:a4:6a:ed:46:f8:54:55:f9:c1:45:d2:bf:6a:a2:24:bb: b3:16:1d:59:73:da:40:1f:fa:de:3b:7b:d4:4f:eb:d5:de:2b: 71:f0:44:c4:70:f8:61:66:1f:e4:9a:74:2d:4a:d0:72:e1:ec: 83:60:6b:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQzMDAyQzJFNTgwQUI5 QTMwNDQzQzc2Q0EyRjQ4QkJGODYyNEFENkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAyo3jRLOaolOgXu3LWBZpdmjFWrF7JiAXWlsBieuPuk5TCsq9 VM9v1Pv6xd+WU+aOg5LsCvMZjW3nuTTFJtXcWG0CfqRV8HtYybifnYORWPLCBtVa HyFpQ/WF6D/2ZJx2y3JQHADJ+jDY9IgRSP/VxBmA5SWDn2GDa7H3C81nmR3fOqCF msRJEMLtHu+/ixJbpDX9NXFz7OY1CiLjebj7dEhtfUd0+FX0fEc77jDnYxdZoRj5 mTJEPvE8e5FFAGJw0kEcmmnzRP/zkP5UL5aCpUtgET2rPUCu4SMCslDs/HI5Emyf ZJ5jb/HOYSJGBd6iuPEIUgt58q8LDOH5pq3rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0wAsLlgKuaMEQ8dsovSLv4YkrWowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzB3QXNMbGdLdWFNRVE4ZHNv dlNMdjRZa3JXby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wjgwDQYJKoZIhvcNAQELBQADggEBAE1vkvciCPSby6Ak/dYtaL6xFUIphuHUhfjM odqnpGWOn0SuRFvxHa8IcC5q8pUVObNGS/ax0biypbg3ZRys++4E7casBhvLNHlt LMsHKld1US5w3JTdYZ0QTOYpItTLo6LeHzNfrNRy4Zce2Bqb/jZOtm8c8N73OPv+ fIa4QmiQZl0n2Bj3jkwWXLqJNtR1SYA/nmCu4ev+50vEbTsz95NvNdKehoqMo/BH M21hX4wIWTg/uMB6sR6a0loT4SiRcNxNN/IbQgyTpGrtRvhUVfnBRdK/aqIku7MW HVlz2kAf+t47e9RP69XeK3HwRMRw+GFmH+SadC1K0HLh7INgayQ= -----END CERTIFICATE-----Generated at Fri Apr 18 22:47:31 2025 by rpki-client