$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1yXZuvRfSfguOPRWps_gyOobfLE.roa File: 1yXZuvRfSfguOPRWps_gyOobfLE.roa (raw, json) Hash identifier: lTxwA3oNrmT2IXGbuFobpu9lRQgfBI6NFREeuW5j5hc= Subject key identifier: D7:25:D9:BA:F4:5F:49:F8:2E:38:F4:56:A6:CF:E0:C8:EA:1B:7C:B1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34C1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1yXZuvRfSfguOPRWps_gyOobfLE.roa Signing time: Mon 10 Feb 2025 13:52:40 +0000 ROA not before: Mon 10 Feb 2025 13:52:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13505 (0x34c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D725D9BAF45F49F82E38F456A6CFE0C8EA1B7CB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:dc:90:84:67:6d:7d:21:7c:cc:13:6e:9d: 31:d0:b0:30:bb:21:04:31:c1:72:84:c8:35:42:95: 63:56:94:ae:2b:aa:51:a6:98:fa:d3:01:cf:14:f5: 72:53:50:20:ba:e6:3e:33:c0:3f:70:2d:66:90:52: f0:e3:18:12:e1:54:4a:64:91:88:e4:2b:1c:2d:38: 98:ac:b9:c5:6b:32:59:81:b0:8c:65:f7:b1:32:3a: a4:9f:7c:35:3a:74:26:e6:15:26:ef:97:60:a4:59: e4:b2:b2:6d:a9:d2:a4:6f:fa:9f:00:91:89:a7:38: 25:fc:68:36:ca:85:eb:2d:8c:13:dc:26:8c:e1:55: 4c:cf:d9:18:77:9f:38:20:b9:dc:9c:8e:ac:eb:c8: ea:20:13:0b:8b:b0:7c:eb:d4:60:c9:3e:d1:51:33: b2:16:fb:ea:03:12:c7:fd:73:46:2c:ac:ce:de:5c: 04:6f:4f:f7:ec:d7:f7:7b:a3:11:dd:4e:77:c0:03: 9c:92:ac:9d:64:cd:91:6d:25:cd:17:13:51:c4:21: 7c:a4:9f:19:9d:72:f2:44:c8:ef:cb:00:76:c7:6e: 51:f8:59:c8:58:14:ac:a6:04:1a:af:ca:6f:e9:4c: fc:31:ac:cd:0a:16:f6:1c:14:4b:8c:0c:3d:b3:3a: 69:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:25:D9:BA:F4:5F:49:F8:2E:38:F4:56:A6:CF:E0:C8:EA:1B:7C:B1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1yXZuvRfSfguOPRWps_gyOobfLE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.9.0/24 Signature Algorithm: sha256WithRSAEncryption 20:54:85:10:1b:e5:6a:67:08:44:97:7b:e4:c4:2c:87:5d:c5: 1c:a2:06:ca:1d:b9:7b:b9:59:07:ca:31:5b:71:39:17:5a:cb: 66:90:16:9c:2f:a1:19:85:29:b3:ea:90:32:33:75:ed:a9:fd: 6e:5a:c9:6f:28:57:ea:ef:8b:39:ce:ba:88:b8:a7:04:4d:b5: d8:1e:92:92:64:61:95:d3:e6:d8:fa:ca:4a:cf:be:77:79:6b: 34:f8:80:1f:07:ff:80:7e:3b:ee:34:f1:72:2b:6f:84:eb:44: 0e:10:31:55:b9:99:65:d7:d8:ef:d3:34:13:57:63:ba:de:cf: dd:7d:0c:bd:22:e5:2d:f2:27:08:ef:11:37:18:e4:e0:68:9d: 4a:d2:12:0b:91:ca:ed:bf:ce:a8:9b:b3:65:9f:df:7b:5e:c3: 6c:d1:c4:e3:9d:d7:8b:f6:00:ab:df:b0:ad:eb:06:2f:1f:58: cf:60:10:54:3a:4d:cd:d7:cd:ce:3d:5a:30:a3:22:e4:d2:f5: 98:1e:d7:c0:0c:81:ec:fc:e7:ca:d1:90:85:46:54:11:45:7e: fd:c5:d5:f2:20:7d:27:8b:72:db:f5:fb:98:80:73:f3:c1:cc: 84:33:02:76:38:46:51:8a:d2:4f:4e:34:00:a7:d6:b4:d6:48: 97:da:ca:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ3MjVEOUJBRjQ1RjQ5 RjgyRTM4RjQ1NkE2Q0ZFMEM4RUExQjdDQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM39yQhGdtfSF8zBNunTHQsDC7IQQxwXKEyDVClWNWlK4rqlGm mPrTAc8U9XJTUCC65j4zwD9wLWaQUvDjGBLhVEpkkYjkKxwtOJisucVrMlmBsIxl 97EyOqSffDU6dCbmFSbvl2CkWeSysm2p0qRv+p8AkYmnOCX8aDbKhestjBPcJozh VUzP2Rh3nzggudycjqzryOogEwuLsHzr1GDJPtFRM7IW++oDEsf9c0YsrM7eXARv T/fs1/d7oxHdTnfAA5ySrJ1kzZFtJc0XE1HEIXyknxmdcvJEyO/LAHbHblH4WchY FKymBBqvym/pTPwxrM0KFvYcFEuMDD2zOmmTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1yXZuvRfSfguOPRWps/gyOobfLEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzF5WFp1dlJmU2ZndU9QUldw c19neU9vYmZMRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wQkwDQYJKoZIhvcNAQELBQADggEBACBUhRAb5WpnCESXe+TELIddxRyiBsoduXu5 WQfKMVtxORday2aQFpwvoRmFKbPqkDIzde2p/W5ayW8oV+rviznOuoi4pwRNtdge kpJkYZXT5tj6ykrPvnd5azT4gB8H/4B+O+408XIrb4TrRA4QMVW5mWXX2O/TNBNX Y7rez919DL0i5S3yJwjvETcY5OBonUrSEguRyu2/zqibs2Wf33tew2zRxOOd14v2 AKvfsK3rBi8fWM9gEFQ6Tc3Xzc49WjCjIuTS9Zge18AMgez858rRkIVGVBFFfv3F 1fIgfSeLctv1+5iAc/PBzIQzAnY4RlGK0k9ONACn1rTWSJfayos= -----END CERTIFICATE-----Generated at Wed Apr 23 04:36:47 2025 by rpki-client