$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DyLnwMhGcVlCN5LT3A_VvplqC94.roa File: DyLnwMhGcVlCN5LT3A_VvplqC94.roa (raw, json) Hash identifier: 10AcW3bkFGYJ7irIEH5TffBn/eWVPrBZGbM65Rh8bmU= Subject key identifier: 0F:22:E7:C0:C8:46:71:59:42:37:92:D3:DC:0F:D5:BE:99:6A:0B:DE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 358B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DyLnwMhGcVlCN5LT3A_VvplqC94.roa Signing time: Mon 10 Feb 2025 13:53:27 +0000 ROA not before: Mon 10 Feb 2025 13:53:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13707 (0x358b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0F22E7C0C8467159423792D3DC0FD5BE996A0BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:e9:f4:db:13:c4:b2:2f:c3:cb:26:95:df: 2a:cf:1a:5b:d7:36:0b:c5:a2:df:a4:87:ba:5d:0d: 17:84:4a:80:3e:f0:c0:d3:59:fe:dc:b2:59:0a:f1: 30:96:b5:a3:e6:5a:c8:fc:b6:98:a7:ae:34:16:0f: 68:ed:22:7f:93:1c:b5:2d:79:60:f6:6d:22:12:01: 92:1d:51:f9:31:3a:fb:96:a3:aa:c6:0d:05:0e:9e: a2:b6:ab:41:18:47:b8:7c:db:97:75:67:da:7e:5e: 62:5b:74:d2:1d:d0:1c:f7:a3:73:94:5e:b2:b2:f3: 15:9f:05:e3:66:19:2b:65:bd:1e:d1:ac:e0:02:b2: 81:ed:20:29:33:c5:53:a7:5c:21:59:69:6a:e7:eb: 92:f1:97:4d:e8:9b:c8:95:7c:bc:22:6b:87:a8:f7: 98:e2:a2:3e:31:40:88:c5:54:a6:e5:23:97:69:4b: a5:b1:95:1f:38:7d:4f:2d:53:11:2e:b1:95:67:35: 6e:7c:7e:49:75:7c:a3:9a:cb:a9:4c:36:36:03:fb: 47:47:87:ba:97:b7:b3:9b:98:a5:12:a1:8b:a5:9f: 81:20:da:2c:8a:45:35:df:22:e9:5b:09:a5:65:9d: a6:e6:05:6b:83:29:06:21:2c:e5:19:c6:61:21:ae: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:22:E7:C0:C8:46:71:59:42:37:92:D3:DC:0F:D5:BE:99:6A:0B:DE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DyLnwMhGcVlCN5LT3A_VvplqC94.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.232.0/21 Signature Algorithm: sha256WithRSAEncryption a0:af:bb:86:38:fc:06:ef:f5:e3:4e:c4:b2:80:8d:3c:9a:af: 19:f0:61:0e:18:97:9a:a9:70:2e:5d:e9:97:81:16:84:90:af: dd:cc:f6:10:bb:35:da:74:0d:95:de:9f:4d:ba:5c:72:dd:83: cd:8d:36:a1:9a:e8:c1:24:f8:f6:86:17:b5:5d:c9:4f:a3:d0: d9:33:68:9d:40:41:9f:ad:2f:b9:e6:cf:c9:da:d7:4d:8c:c1: 6d:e0:db:f6:bf:a5:de:1b:6e:07:50:b2:90:3f:c2:95:36:5b: 4c:8f:a7:94:35:3d:9c:10:c1:08:e0:35:22:be:66:29:be:12: f0:a3:3f:2c:89:33:d0:94:e3:d5:28:d5:cd:11:f2:10:db:74: a0:8d:fb:e4:11:28:1d:cd:60:57:0e:a0:b6:4f:4a:f3:ce:e1: c1:e1:c7:c3:39:08:be:27:e0:b7:63:75:a7:d5:6a:41:d1:0d: ce:9e:2f:f4:1d:a8:d2:03:c1:fa:5d:53:c6:be:a8:42:b9:bc: 27:28:0b:d0:88:a2:f6:ef:7a:49:06:05:31:4c:22:bd:21:15: 96:b3:50:ff:fd:64:02:16:04:88:68:9d:e6:3c:a8:c5:e9:6c: 83:fa:00:b4:3d:7a:32:09:73:b4:e6:8a:4c:e7:fe:87:90:e2: dc:22:55:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBGMjJFN0MwQzg0Njcx NTk0MjM3OTJEM0RDMEZENUJFOTk2QTBCREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzhun02xPEsi/DyyaV3yrPGlvXNgvFot+kh7pdDReESoA+8MDT Wf7cslkK8TCWtaPmWsj8tpinrjQWD2jtIn+THLUteWD2bSISAZIdUfkxOvuWo6rG DQUOnqK2q0EYR7h825d1Z9p+XmJbdNId0Bz3o3OUXrKy8xWfBeNmGStlvR7RrOAC soHtICkzxVOnXCFZaWrn65Lxl03om8iVfLwia4eo95jioj4xQIjFVKblI5dpS6Wx lR84fU8tUxEusZVnNW58fkl1fKOay6lMNjYD+0dHh7qXt7ObmKUSoYuln4Eg2iyK RTXfIulbCaVlnabmBWuDKQYhLOUZxmEhrrxRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDyLnwMhGcVlCN5LT3A/VvplqC94wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0R5TG53TWhHY1ZsQ041TFQz QV9WdnBscUM5NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wOgwDQYJKoZIhvcNAQELBQADggEBAKCvu4Y4/Abv9eNOxLKAjTyarxnwYQ4Yl5qp cC5d6ZeBFoSQr93M9hC7Ndp0DZXen026XHLdg82NNqGa6MEk+PaGF7VdyU+j0Nkz aJ1AQZ+tL7nmz8na102MwW3g2/a/pd4bbgdQspA/wpU2W0yPp5Q1PZwQwQjgNSK+ Zim+EvCjPyyJM9CU49Uo1c0R8hDbdKCN++QRKB3NYFcOoLZPSvPO4cHhx8M5CL4n 4LdjdafVakHRDc6eL/QdqNIDwfpdU8a+qEK5vCcoC9CIovbvekkGBTFMIr0hFZaz UP/9ZAIWBIhoneY8qMXpbIP6ALQ9ejIJc7Tmikzn/oeQ4twiVRM= -----END CERTIFICATE-----Generated at Wed Apr 23 04:49:52 2025 by rpki-client