$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4b9azYTOH7zrWayiS0duzprxezw.roa File: 4b9azYTOH7zrWayiS0duzprxezw.roa (raw, json) Hash identifier: tM0ZEHqlWwu8OHyWPO8/aC/9B0GSTOrMcCljKxooN0g= Subject key identifier: E1:BF:5A:CD:84:CE:1F:BC:EB:59:AC:A2:4B:47:6E:CE:9A:F1:7B:3C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3445 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4b9azYTOH7zrWayiS0duzprxezw.roa Signing time: Mon 10 Feb 2025 13:52:14 +0000 ROA not before: Mon 10 Feb 2025 13:52:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.193.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13381 (0x3445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E1BF5ACD84CE1FBCEB59ACA24B476ECE9AF17B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:83:21:c1:17:ec:b7:4e:d9:3c:2d:8a:a2: b4:5f:22:a5:af:c1:63:52:59:a2:26:5e:15:ee:fa: fb:f8:ab:af:47:18:7b:a0:cd:1d:38:7d:8f:f3:c6: 2f:55:dc:13:1f:17:6c:3b:2b:28:bc:9e:60:75:33: 85:9e:86:a1:c0:6d:c8:07:39:9d:57:3b:c4:f4:ae: b0:b0:a4:66:19:12:6f:36:3d:4e:8e:66:7c:af:4d: 85:cf:fc:d9:6d:94:22:a9:c5:a1:e2:7c:67:50:bf: a4:38:64:be:20:db:75:b1:c1:db:8c:20:b2:21:78: 51:20:d6:5f:17:4f:4e:db:19:c9:ef:5f:fc:32:c8: 1a:8d:f4:5f:de:34:92:6d:9f:e9:b0:1c:28:b3:73: 5d:7d:ef:43:54:a4:fa:25:da:e9:ef:fc:2f:50:39: c6:d3:c5:d6:ef:e8:37:21:1c:65:a5:43:be:1d:00: 8a:ae:b5:f9:6e:c9:29:0b:b2:29:80:5a:fe:ee:e0: 9c:eb:e3:eb:26:81:a0:df:63:13:b7:43:78:4b:1f: de:21:51:a4:53:4f:d9:f4:38:8c:18:12:99:6b:b0: c7:ab:9c:e1:17:c7:2d:00:cf:5e:c9:a8:f4:89:11: 9c:2c:8d:b4:68:78:2e:6c:95:18:e9:82:e2:05:7d: 42:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BF:5A:CD:84:CE:1F:BC:EB:59:AC:A2:4B:47:6E:CE:9A:F1:7B:3C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4b9azYTOH7zrWayiS0duzprxezw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.32.0/19 Signature Algorithm: sha256WithRSAEncryption 04:92:fd:cf:8f:ae:19:b6:2a:e6:84:21:cd:d8:65:5c:81:dd: 36:c4:80:66:03:1f:01:31:07:48:fc:72:04:67:13:19:2a:9f: d7:f1:b1:3e:a3:48:9a:14:15:08:f0:7f:1b:0d:42:0e:20:a3: 00:1b:6b:82:04:93:bc:5f:78:a5:08:9a:61:0e:5f:2c:91:a8: b2:fe:1d:95:de:ad:55:39:4d:66:cd:44:96:87:a5:0e:dd:b3: 18:ec:fe:49:d0:d3:5e:c7:7b:1a:e5:b6:a2:f2:54:7b:82:35: 3c:1d:e1:95:3c:79:ff:26:0c:d7:85:eb:0f:e6:0e:39:f0:52: f8:8e:70:04:1f:07:4a:07:1a:7e:55:d5:ee:70:38:ff:16:87: f2:41:52:67:d3:d4:fb:7d:11:c7:3c:5a:71:84:40:e2:4b:c5: 40:fe:77:13:f6:d1:11:a6:33:c1:e7:57:d3:d4:3f:ac:f6:7e: 78:b3:cc:4e:eb:d1:d6:26:03:b4:ef:be:b2:15:5f:90:e6:9b: 57:43:95:77:4f:e7:e0:5c:e2:13:8c:cd:b1:60:df:78:53:47: 0b:2f:f0:42:b8:0a:1a:37:9b:16:e7:80:5c:db:24:40:6a:71: 89:de:64:10:c7:34:7c:c1:a8:97:ac:64:ec:f5:07:c7:87:f0: 55:c3:e5:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUxQkY1QUNEODRDRTFG QkNFQjU5QUNBMjRCNDc2RUNFOUFGMTdCM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxfIMhwRfst07ZPC2KorRfIqWvwWNSWaImXhXu+vv4q69HGHug zR04fY/zxi9V3BMfF2w7Kyi8nmB1M4WehqHAbcgHOZ1XO8T0rrCwpGYZEm82PU6O ZnyvTYXP/NltlCKpxaHifGdQv6Q4ZL4g23WxwduMILIheFEg1l8XT07bGcnvX/wy yBqN9F/eNJJtn+mwHCizc11970NUpPol2unv/C9QOcbTxdbv6DchHGWlQ74dAIqu tfluySkLsimAWv7u4Jzr4+smgaDfYxO3Q3hLH94hUaRTT9n0OIwYEplrsMernOEX xy0Az17JqPSJEZwsjbRoeC5slRjpguIFfUKjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4b9azYTOH7zrWayiS0duzprxezwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRiOWF6WVRPSDd6cldheWlT MGR1enByeGV6dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 wSAwDQYJKoZIhvcNAQELBQADggEBAASS/c+Prhm2KuaEIc3YZVyB3TbEgGYDHwEx B0j8cgRnExkqn9fxsT6jSJoUFQjwfxsNQg4gowAba4IEk7xfeKUImmEOXyyRqLL+ HZXerVU5TWbNRJaHpQ7dsxjs/knQ017HexrltqLyVHuCNTwd4ZU8ef8mDNeF6w/m DjnwUviOcAQfB0oHGn5V1e5wOP8Wh/JBUmfT1Pt9Ecc8WnGEQOJLxUD+dxP20RGm M8HnV9PUP6z2fnizzE7r0dYmA7TvvrIVX5Dmm1dDlXdP5+Bc4hOMzbFg33hTRwsv 8EK4Cho3mxbngFzbJEBqcYneZBDHNHzBqJesZOz1B8eH8FXD5Tc= -----END CERTIFICATE-----Generated at Wed Apr 23 00:22:22 2025 by rpki-client