$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8jz6muuqEypmeTUpuy4psVmv6Sg.roa File: 8jz6muuqEypmeTUpuy4psVmv6Sg.roa (raw, json) Hash identifier: TV75zwSaT6OJiCGnpYAOFxhN1d5LQijdl4Q4sFQov6k= Subject key identifier: F2:3C:FA:9A:EB:AA:13:2A:66:79:35:29:BB:2E:29:B1:59:AF:E9:28 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33D3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8jz6muuqEypmeTUpuy4psVmv6Sg.roa Signing time: Mon 10 Feb 2025 13:51:48 +0000 ROA not before: Mon 10 Feb 2025 13:51:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13267 (0x33d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F23CFA9AEBAA132A66793529BB2E29B159AFE928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:9f:5c:bb:7b:b5:0d:41:e4:42:28:a8:9c: cf:f6:60:02:5d:14:a0:9e:85:3f:7b:67:9f:09:28: 98:42:16:e3:a7:b7:07:10:25:b1:12:6b:44:fe:99: 81:2a:c0:8e:be:69:69:56:af:54:72:dc:aa:88:b2: df:c7:e1:13:c2:83:9c:02:59:98:07:2b:ab:96:74: ae:66:1a:f6:34:47:9e:e9:f4:11:91:8d:92:13:b4: bb:69:7f:b5:89:a1:08:b8:68:2e:46:98:a2:73:44: f1:57:69:12:08:02:31:f6:58:1b:bc:d2:d3:14:0f: 29:8b:25:81:fb:10:d1:90:fa:db:93:4c:49:6a:9e: b1:bc:8d:87:ce:1a:ef:d7:f9:62:aa:7c:90:ce:bd: 89:74:a0:58:e2:7f:40:5c:fa:39:01:17:0e:a5:f0: f8:e7:93:bc:4c:77:04:86:da:d8:8c:7b:73:5e:83: c6:81:13:ad:de:f2:ae:85:03:ce:e9:1f:26:65:ac: aa:42:47:59:af:59:03:76:61:33:84:82:85:fd:68: 73:3d:9c:a6:84:10:50:68:dd:01:e3:3a:b7:a3:3e: 3e:72:b8:aa:1f:35:01:3f:5e:48:fb:ef:24:e7:6d: 92:73:08:9f:8e:93:e2:6a:8e:a9:25:01:19:68:90: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3C:FA:9A:EB:AA:13:2A:66:79:35:29:BB:2E:29:B1:59:AF:E9:28 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8jz6muuqEypmeTUpuy4psVmv6Sg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.0.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:36:0d:51:f9:01:20:33:3c:bf:57:e3:ee:d8:88:2c:aa:c1: 5b:a9:0d:e7:24:27:b6:94:5e:2b:b2:39:1d:e3:9e:a7:93:0c: 77:54:b2:be:f5:e7:40:3c:fe:ce:86:73:70:13:55:33:56:9f: f4:79:93:8b:1d:8f:35:2f:e8:0e:91:41:8a:8c:90:40:df:28: 2b:2b:15:98:a2:8d:b8:34:83:3b:85:c9:cf:ed:54:96:e8:8f: b9:f7:80:10:d8:a8:a8:b2:97:33:4f:80:0f:a5:5b:b9:45:1b: 7b:6b:bb:cc:72:e6:44:35:c8:4f:f8:6a:01:4f:e5:b4:06:c4: 89:cc:a3:dc:c3:d3:bf:55:df:64:6f:a6:6e:ee:e3:e8:60:d8: ac:70:1c:c2:68:ac:0e:14:9a:6c:f6:1b:bb:d8:98:84:5d:62: 81:25:f7:18:ce:4a:28:34:6f:e6:86:25:1d:6b:8c:02:8c:c0: 27:1b:53:b2:83:e2:62:93:ae:f1:e9:12:61:72:85:0d:52:89: 1e:f5:8a:99:e7:12:7f:38:45:0c:6d:c7:84:21:53:d1:2f:83: d1:72:35:b5:af:07:29:23:f2:3d:85:48:95:0e:0f:8b:56:e1: 71:56:67:2b:29:a7:ae:8c:57:5a:9d:c8:9d:23:f6:11:2b:ed: b8:cf:46:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM9MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyM0NGQTlBRUJBQTEz MkE2Njc5MzUyOUJCMkUyOUIxNTlBRkU5MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4J59cu3u1DUHkQiionM/2YAJdFKCehT97Z58JKJhCFuOntwcQ JbESa0T+mYEqwI6+aWlWr1Ry3KqIst/H4RPCg5wCWZgHK6uWdK5mGvY0R57p9BGR jZITtLtpf7WJoQi4aC5GmKJzRPFXaRIIAjH2WBu80tMUDymLJYH7ENGQ+tuTTElq nrG8jYfOGu/X+WKqfJDOvYl0oFjif0Bc+jkBFw6l8Pjnk7xMdwSG2tiMe3Neg8aB E63e8q6FA87pHyZlrKpCR1mvWQN2YTOEgoX9aHM9nKaEEFBo3QHjOrejPj5yuKof NQE/Xkj77yTnbZJzCJ+Ok+JqjqklARlokOzpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8jz6muuqEypmeTUpuy4psVmv6SgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhqejZtdXVxRXlwbWVUVXB1 eTRwc1ZtdjZTZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wwAwDQYJKoZIhvcNAQELBQADggEBAA02DVH5ASAzPL9X4+7YiCyqwVupDeckJ7aU XiuyOR3jnqeTDHdUsr7150A8/s6Gc3ATVTNWn/R5k4sdjzUv6A6RQYqMkEDfKCsr FZiijbg0gzuFyc/tVJboj7n3gBDYqKiylzNPgA+lW7lFG3tru8xy5kQ1yE/4agFP 5bQGxInMo9zD079V32Rvpm7u4+hg2KxwHMJorA4Ummz2G7vYmIRdYoEl9xjOSig0 b+aGJR1rjAKMwCcbU7KD4mKTrvHpEmFyhQ1SiR71ipnnEn84RQxtx4QhU9Evg9Fy NbWvBykj8j2FSJUOD4tW4XFWZyspp66MV1qdyJ0j9hEr7bjPRqw= -----END CERTIFICATE-----Generated at Wed Apr 23 04:41:47 2025 by rpki-client