$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DX_r25fnaSCSRAC2A8YRijriotA.roa File: DX_r25fnaSCSRAC2A8YRijriotA.roa (raw, json) Hash identifier: A14DJE0yyPckKXHSDhPl9QpwbCtYwYYGtzDZVNpiFbo= Subject key identifier: 0D:7F:EB:DB:97:E7:69:20:92:44:00:B6:03:C6:11:8A:3A:E2:A2:D0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 363A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DX_r25fnaSCSRAC2A8YRijriotA.roa Signing time: Mon 10 Feb 2025 13:54:07 +0000 ROA not before: Mon 10 Feb 2025 13:54:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13882 (0x363a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0D7FEBDB97E76920924400B603C6118A3AE2A2D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:f8:9d:42:f9:aa:ce:b7:74:db:7f:98:42: 67:77:76:13:f2:43:d1:4e:11:92:a5:37:75:cb:2d: ee:46:23:b9:f4:a7:ff:f6:88:56:9d:e6:c2:92:d1: b4:2a:b4:2c:b2:f4:c7:e8:26:fa:ab:16:d7:6e:79: d9:10:60:fa:67:20:fc:15:e8:1e:68:54:03:f0:64: 74:34:6b:92:5e:19:74:85:a3:11:f2:c7:2f:1c:05: b9:51:3c:11:73:d0:97:63:f2:66:a1:0e:7c:a1:9d: ff:8e:79:fe:77:ba:5f:ab:b3:d4:04:d2:2f:75:01: 67:d8:25:d7:28:61:24:67:0b:19:30:ac:68:36:07: 1a:f0:3f:69:94:8b:ca:a7:f9:ed:95:07:e4:01:e2: 5f:e1:cd:31:69:a6:54:a6:6a:7c:4c:98:a4:43:7d: 0a:f7:a8:af:a1:7a:4f:72:da:27:35:85:b3:26:b2: dc:b4:20:32:8b:5d:1c:9d:ef:ee:46:19:de:2c:ff: 92:53:8d:47:2f:6c:7a:82:0d:c5:7e:f0:f5:69:10: 49:a4:05:c3:4d:30:88:e1:06:e9:14:67:8d:5e:28: b2:6a:3a:97:29:4d:0f:fa:8e:f8:e2:2b:c0:44:f8: 99:a5:47:4c:eb:75:76:45:bf:61:9c:ac:86:21:72: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7F:EB:DB:97:E7:69:20:92:44:00:B6:03:C6:11:8A:3A:E2:A2:D0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DX_r25fnaSCSRAC2A8YRijriotA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.160.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:0c:18:a6:1e:04:ce:75:16:e6:be:7f:85:52:fd:10:1b:10: d4:6d:29:e1:b7:90:28:d4:19:08:da:aa:05:97:d6:25:eb:f2: fd:d2:92:30:05:24:17:0c:61:ef:23:11:2c:9e:b5:06:df:bd: 3c:36:cb:81:c4:fd:d3:64:39:d4:26:3f:21:5a:d8:8b:ab:82: d5:34:34:70:fa:46:f4:ab:e8:0c:b3:9a:a0:19:44:34:98:da: ce:19:4a:a0:7a:29:b8:6c:e7:5b:6f:d3:af:33:67:ff:91:7c: a8:93:c5:6e:e5:e1:e8:3b:19:d9:7a:b3:24:b4:06:cf:f5:df: 58:1b:64:89:6a:1f:c3:aa:7d:ae:6e:be:03:67:4f:0a:c0:de: 3d:a0:0c:3b:e3:b8:bb:a3:ee:24:8b:a1:b9:66:93:72:d6:cd: 67:c4:f4:74:83:34:73:f7:56:f5:35:c2:4a:5d:4a:c2:55:d3: d8:ce:76:e7:53:0a:21:59:0e:7f:cd:60:e0:73:35:c3:17:51: c0:9e:5f:1a:93:ea:52:de:a9:63:43:bc:35:1e:99:39:d1:52: e5:08:e2:81:ae:83:5b:b3:ae:1e:f1:bb:66:fa:3a:9b:71:18: ee:7f:df:80:5e:3c:ca:c3:62:72:59:0c:50:1a:7d:32:82:c3: ec:8d:ff:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBEN0ZFQkRCOTdFNzY5 MjA5MjQ0MDBCNjAzQzYxMThBM0FFMkEyRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY3/idQvmqzrd023+YQmd3dhPyQ9FOEZKlN3XLLe5GI7n0p//2 iFad5sKS0bQqtCyy9MfoJvqrFtduedkQYPpnIPwV6B5oVAPwZHQ0a5JeGXSFoxHy xy8cBblRPBFz0Jdj8mahDnyhnf+Oef53ul+rs9QE0i91AWfYJdcoYSRnCxkwrGg2 BxrwP2mUi8qn+e2VB+QB4l/hzTFpplSmanxMmKRDfQr3qK+hek9y2ic1hbMmsty0 IDKLXRyd7+5GGd4s/5JTjUcvbHqCDcV+8PVpEEmkBcNNMIjhBukUZ41eKLJqOpcp TQ/6jvjiK8BE+JmlR0zrdXZFv2GcrIYhcsrXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDX/r25fnaSCSRAC2A8YRijriotAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RYX3IyNWZuYVNDU1JBQzJB OFlSaWpyaW90QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wKAwDQYJKoZIhvcNAQELBQADggEBAEoMGKYeBM51Fua+f4VS/RAbENRtKeG3kCjU GQjaqgWX1iXr8v3SkjAFJBcMYe8jESyetQbfvTw2y4HE/dNkOdQmPyFa2IurgtU0 NHD6RvSr6AyzmqAZRDSY2s4ZSqB6Kbhs51tv068zZ/+RfKiTxW7l4eg7Gdl6syS0 Bs/131gbZIlqH8Oqfa5uvgNnTwrA3j2gDDvjuLuj7iSLoblmk3LWzWfE9HSDNHP3 VvU1wkpdSsJV09jOdudTCiFZDn/NYOBzNcMXUcCeXxqT6lLeqWNDvDUemTnRUuUI 4oGug1uzrh7xu2b6OptxGO5/34BePMrDYnJZDFAafTKCw+yN/6c= -----END CERTIFICATE-----Generated at Fri Apr 18 22:39:17 2025 by rpki-client