$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4n-lvr7FvtMIaBjuowM9UZIJuB4.roa File: 4n-lvr7FvtMIaBjuowM9UZIJuB4.roa (raw, json) Hash identifier: 2McvsoFwFMDOeRC71DnnWX/R+FsWSKRxQQ8HqsxU1Pc= Subject key identifier: E2:7F:A5:BE:BE:C5:BE:D3:08:68:18:EE:A3:03:3D:51:92:09:B8:1E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33C7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4n-lvr7FvtMIaBjuowM9UZIJuB4.roa Signing time: Mon 10 Feb 2025 13:51:46 +0000 ROA not before: Mon 10 Feb 2025 13:51:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13255 (0x33c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E27FA5BEBEC5BED3086818EEA3033D519209B81E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:81:5a:c2:f1:0c:c6:62:ba:03:0f:d6:54: fa:3f:7a:5d:c9:7c:a6:b6:a8:b7:b1:2b:78:c5:16: 35:ac:5a:2c:ae:0e:83:ee:71:1b:de:80:35:00:d3: 4e:0e:fe:10:73:10:43:6e:ba:f7:46:b2:ef:ba:f2: e5:7b:26:b8:cd:be:e2:62:3d:70:bd:d1:4c:fc:9a: 93:46:17:a5:74:38:f9:2b:18:e1:b0:ca:5f:7b:e6: bb:58:c5:f0:9c:04:13:13:2b:ac:b4:06:d0:df:0e: 4c:3b:54:81:52:8f:d3:e2:84:24:92:06:f5:6e:11: 2a:1e:2c:da:fe:ce:e7:0d:c9:fa:e2:1c:b4:bf:84: 67:1f:2d:2e:47:b2:ef:7c:f9:2c:2f:82:ee:cb:c2: e9:c8:02:e8:60:40:a8:16:56:6a:fc:d6:f9:f5:b1: 3d:81:c6:9a:78:86:ec:8d:8e:1e:ab:a6:84:61:e2: 7b:6a:e9:03:0d:e5:00:c5:15:01:a5:a2:56:7b:b6: 8a:6c:66:cc:33:5e:e7:38:44:42:a7:79:5a:84:a2: b2:4e:a0:86:49:91:70:d4:55:8b:e6:bc:81:56:cd: f6:31:5a:95:df:bf:5b:3d:60:84:5a:97:1f:a8:5d: b5:46:c7:33:de:f5:28:54:a0:dd:04:c3:d5:3d:38: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7F:A5:BE:BE:C5:BE:D3:08:68:18:EE:A3:03:3D:51:92:09:B8:1E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4n-lvr7FvtMIaBjuowM9UZIJuB4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.120.0/21 Signature Algorithm: sha256WithRSAEncryption 91:1e:0a:6c:10:d3:15:ef:6a:f8:e1:37:f8:9d:45:ad:a9:8b: 13:bf:7f:37:ad:d7:42:96:3e:4c:f9:da:04:8f:92:ab:c3:00: a4:51:40:7e:7a:ee:94:88:86:f7:a3:7e:e7:34:1c:7e:f8:61: 8b:3a:74:43:cc:4c:6b:48:bc:3c:eb:65:05:73:7e:63:46:7f: d1:de:22:fa:a5:f1:ff:79:21:2e:b3:f3:a9:20:34:75:70:43: ae:ed:c2:fd:57:f4:fc:64:db:00:5c:05:3f:ba:ec:17:19:8e: 18:d6:4e:8e:be:64:23:69:a7:69:31:59:ee:f5:5a:11:18:62: 22:42:6e:62:ef:0f:c8:55:e0:17:2f:4f:14:68:ab:48:51:bf: bb:70:12:cb:d8:24:0e:d9:6a:75:bc:54:5a:4f:84:93:41:b3: 3e:d5:df:bc:a8:a7:ee:a4:57:17:18:b4:27:70:43:a8:b4:e9: 81:14:87:1d:68:d3:c4:f7:93:21:d7:d6:d1:42:db:eb:e4:0a: 12:4e:fb:f1:c1:a2:0e:83:81:94:28:9a:7c:f8:e4:0e:2e:42: 84:f6:b1:f3:24:5b:ae:75:b2:d2:54:85:02:46:0e:5b:fc:f4: 43:1a:b7:49:04:21:16:d3:9c:a2:b2:42:83:85:3a:4b:99:fe: 59:af:e8:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyN0ZBNUJFQkVDNUJF RDMwODY4MThFRUEzMDMzRDUxOTIwOUI4MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHWoFawvEMxmK6Aw/WVPo/el3JfKa2qLexK3jFFjWsWiyuDoPu cRvegDUA004O/hBzEENuuvdGsu+68uV7JrjNvuJiPXC90Uz8mpNGF6V0OPkrGOGw yl975rtYxfCcBBMTK6y0BtDfDkw7VIFSj9PihCSSBvVuESoeLNr+zucNyfriHLS/ hGcfLS5Hsu98+Swvgu7LwunIAuhgQKgWVmr81vn1sT2Bxpp4huyNjh6rpoRh4ntq 6QMN5QDFFQGlolZ7topsZswzXuc4REKneVqEorJOoIZJkXDUVYvmvIFWzfYxWpXf v1s9YIRalx+oXbVGxzPe9ShUoN0Ew9U9OCpZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4n+lvr7FvtMIaBjuowM9UZIJuB4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRuLWx2cjdGdnRNSWFCanVv d005VVpJSnVCNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w3gwDQYJKoZIhvcNAQELBQADggEBAJEeCmwQ0xXvavjhN/idRa2pixO/fzet10KW Pkz52gSPkqvDAKRRQH567pSIhvejfuc0HH74YYs6dEPMTGtIvDzrZQVzfmNGf9He Ivql8f95IS6z86kgNHVwQ67twv1X9Pxk2wBcBT+67BcZjhjWTo6+ZCNpp2kxWe71 WhEYYiJCbmLvD8hV4BcvTxRoq0hRv7twEsvYJA7ZanW8VFpPhJNBsz7V37yop+6k VxcYtCdwQ6i06YEUhx1o08T3kyHX1tFC2+vkChJO+/HBog6DgZQomnz45A4uQoT2 sfMkW651stJUhQJGDlv89EMat0kEIRbTnKKyQoOFOkuZ/lmv6PI= -----END CERTIFICATE-----Generated at Wed Apr 23 00:33:14 2025 by rpki-client