$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9CAngE5j8-H6rbyei3A1EEHxKkM.roa File: 9CAngE5j8-H6rbyei3A1EEHxKkM.roa (raw, json) Hash identifier: YVOiVt1dTzLDWLANtW36rOi56Xs0A0+ueHe0xcj/Cko= Subject key identifier: F4:20:27:80:4E:63:F3:E1:FA:AD:BC:9E:8B:70:35:10:41:F1:2A:43 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3658 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9CAngE5j8-H6rbyei3A1EEHxKkM.roa Signing time: Mon 10 Feb 2025 13:54:14 +0000 ROA not before: Mon 10 Feb 2025 13:54:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13912 (0x3658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F42027804E63F3E1FAADBC9E8B70351041F12A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:2c:a0:7d:14:27:a0:b0:cb:11:e9:e3:5b: ec:fc:44:45:a3:d8:74:18:48:4c:b8:3e:17:13:20: 7b:56:e7:1b:85:ff:81:25:ca:25:9d:f7:5c:e3:cb: 94:ed:18:e0:09:c7:54:ec:0c:bd:06:6d:6f:ef:8f: 37:0c:33:c0:9b:fe:74:2d:e0:95:f6:e6:bd:c1:91: 2c:1d:ab:7b:e3:b4:8b:1d:98:b6:cc:fc:2d:08:36: c0:45:f2:5a:e6:82:47:04:8b:4c:c3:5e:27:aa:08: 12:40:4f:84:c4:2a:cb:6c:f8:7c:d2:e6:60:1a:a9: 27:ac:2b:7b:d4:62:cc:ee:55:f2:07:3f:be:6d:73: e3:41:fa:a6:af:ff:0d:f3:a5:db:21:96:3e:d5:c5: 43:39:41:4e:04:db:7e:9b:a9:e9:36:a9:50:6c:04: d4:13:9b:58:65:f3:00:98:3d:89:74:5d:05:ae:c0: 7b:b4:40:e2:40:44:6b:c4:9f:b7:21:82:ee:ac:20: e1:4c:bb:2d:0b:c2:ca:8b:8c:59:66:fc:63:52:c8: 41:fb:4c:ac:e4:55:1f:e2:2e:f1:2b:b7:5a:12:f6: 19:c8:3d:f7:df:98:00:2d:b4:7d:8c:e3:8e:49:25: 6b:54:3b:e1:6c:81:ed:80:d9:91:c0:01:f4:d1:78: c1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:20:27:80:4E:63:F3:E1:FA:AD:BC:9E:8B:70:35:10:41:F1:2A:43 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9CAngE5j8-H6rbyei3A1EEHxKkM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.248.0/22 Signature Algorithm: sha256WithRSAEncryption 31:9e:c3:18:b4:40:1d:83:df:d1:9e:7b:e8:f8:c5:05:66:9e: 9e:29:4f:e5:b2:0b:ba:9e:71:6a:9b:e8:ca:e7:97:d7:d1:a8: a3:3a:21:6b:60:52:90:57:4c:11:69:57:f4:01:1d:0d:a7:5c: fc:3f:27:82:77:03:65:f0:7d:75:d7:e3:87:b0:5f:f4:cd:2c: c9:f7:3d:7e:e5:14:d6:50:22:ed:dc:01:fc:87:a5:53:89:ad: 0c:09:6b:33:6e:1f:4e:3e:f0:97:35:d6:c5:39:06:2e:96:2b: 7e:19:c3:59:5e:7b:f9:97:1c:dc:90:de:e0:8d:b7:a4:bf:bc: a7:e3:f2:aa:65:dc:12:94:20:da:a2:ea:8c:0b:b2:92:6d:f5: d5:ed:c2:91:6d:52:03:b2:3f:2e:6d:94:9a:1e:9d:b8:0e:e5: d6:5a:8f:8a:19:a2:c2:11:7e:4b:2b:5a:fa:df:d5:c8:62:9d: 12:c8:db:90:ee:f5:3e:14:3b:ee:15:f3:0e:7d:98:91:6e:a8: 3b:65:08:1f:7c:04:f7:3b:d4:00:35:cf:10:4e:33:e5:ba:dd: d1:7e:61:66:07:4f:6a:af:57:7d:81:bd:92:01:78:16:cc:2e: 3a:2e:8c:f1:44:d7:15:3c:b4:73:31:47:2c:b7:9f:61:f5:d0: ba:d6:58:19 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY0MjAyNzgwNEU2M0Yz RTFGQUFEQkM5RThCNzAzNTEwNDFGMTJBNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV/CygfRQnoLDLEenjW+z8REWj2HQYSEy4PhcTIHtW5xuF/4El yiWd91zjy5TtGOAJx1TsDL0GbW/vjzcMM8Cb/nQt4JX25r3BkSwdq3vjtIsdmLbM /C0INsBF8lrmgkcEi0zDXieqCBJAT4TEKsts+HzS5mAaqSesK3vUYszuVfIHP75t c+NB+qav/w3zpdshlj7VxUM5QU4E236bqek2qVBsBNQTm1hl8wCYPYl0XQWuwHu0 QOJARGvEn7chgu6sIOFMuy0LwsqLjFlm/GNSyEH7TKzkVR/iLvErt1oS9hnIPfff mAAttH2M445JJWtUO+Fsge2A2ZHAAfTReMFXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9CAngE5j8+H6rbyei3A1EEHxKkMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlDQW5nRTVqOC1INnJieWVp M0ExRUVIeEtrTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wfgwDQYJKoZIhvcNAQELBQADggEBADGewxi0QB2D39Gee+j4xQVmnp4pT+WyC7qe cWqb6Mrnl9fRqKM6IWtgUpBXTBFpV/QBHQ2nXPw/J4J3A2XwfXXX44ewX/TNLMn3 PX7lFNZQIu3cAfyHpVOJrQwJazNuH04+8Jc11sU5Bi6WK34Zw1lee/mXHNyQ3uCN t6S/vKfj8qpl3BKUINqi6owLspJt9dXtwpFtUgOyPy5tlJoenbgO5dZaj4oZosIR fksrWvrf1chinRLI25Du9T4UO+4V8w59mJFuqDtlCB98BPc71AA1zxBOM+W63dF+ YWYHT2qvV32BvZIBeBbMLjoujPFE1xU8tHMxRyy3n2H10LrWWBk= -----END CERTIFICATE-----Generated at Fri Apr 18 23:00:23 2025 by rpki-client