$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ESfJI57rZj2WvI3Cnse3X5-Ct7I.roa File: ESfJI57rZj2WvI3Cnse3X5-Ct7I.roa (raw, json) Hash identifier: BGbFyaEXwx1To9pJttHoDXQoGuAozYWkxeP6ZHaSo7M= Subject key identifier: 11:27:C9:23:9E:EB:66:3D:96:BC:8D:C2:9E:C7:B7:5F:9F:82:B7:B2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 338B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ESfJI57rZj2WvI3Cnse3X5-Ct7I.roa Signing time: Mon 10 Feb 2025 13:51:31 +0000 ROA not before: Mon 10 Feb 2025 13:51:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13195 (0x338b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1127C9239EEB663D96BC8DC29EC7B75F9F82B7B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:89:bb:a1:d5:cc:e8:00:87:3c:46:e0:1b: 32:47:ec:08:cd:3f:d5:b3:b5:78:ea:f2:be:75:ae: c9:ac:20:22:1e:b7:50:27:cb:9b:06:60:2c:71:d6: 5d:05:4b:9a:93:a3:8e:1c:2b:f2:16:44:17:ef:c0: 08:20:92:76:f7:5f:6b:ba:86:d8:71:68:cc:78:34: df:c8:9c:95:12:bb:6e:a5:b0:46:d6:19:3b:de:c3: af:c7:74:b1:46:2c:52:09:12:12:17:d1:01:b8:99: c2:86:0d:a2:39:a6:e4:ba:be:c6:0c:80:e6:4f:65: f0:e3:1a:e5:d2:47:ed:d9:74:d4:06:26:62:f1:99: 3d:b4:8f:9d:43:55:ff:b1:ab:89:50:75:27:38:56: df:26:b9:f2:e4:aa:a4:72:58:ea:ec:8f:0f:34:05: 46:c6:41:f2:a9:2c:60:a2:5f:13:e7:e3:ba:f8:0b: c8:f5:f7:61:7f:76:9f:14:27:28:c0:18:1b:e6:8a: 13:eb:95:0d:dc:80:55:d5:67:e4:99:27:8e:79:89: 3b:75:e7:8f:e9:d3:eb:65:34:83:b2:97:64:45:af: 7b:58:17:e1:ec:ea:e8:d3:be:b9:f3:00:f5:ac:ea: 7a:32:a7:5a:aa:3b:81:d0:67:34:b1:2f:d2:c0:5f: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:27:C9:23:9E:EB:66:3D:96:BC:8D:C2:9E:C7:B7:5F:9F:82:B7:B2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ESfJI57rZj2WvI3Cnse3X5-Ct7I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.108.0/22 Signature Algorithm: sha256WithRSAEncryption a8:3e:93:1d:44:f9:6d:34:75:6c:20:93:2a:cf:a9:f6:a4:90: 5f:ad:80:9c:91:4b:ce:9f:dd:bb:e0:bd:04:86:e8:c4:98:7e: f1:33:e6:7b:29:58:71:ad:98:12:e9:36:ce:76:e4:12:8a:d1: dd:fc:be:53:bb:6f:af:f6:cc:f3:3a:d7:1c:c6:07:7c:a5:2d: 6b:da:8c:fe:12:1d:d0:8e:d0:3f:49:e6:9e:e4:59:2a:27:40: 6f:3d:4c:17:d8:fd:37:d1:2c:3b:8e:b5:d7:be:d3:f1:82:85: 68:6b:15:35:58:e9:a9:29:b2:ba:ac:2f:1c:87:db:31:a1:65: db:c5:ad:bf:a6:0f:0a:22:1e:ba:39:57:34:d6:35:29:db:b6: c8:04:36:9f:87:1d:52:18:47:8a:48:7e:4c:02:a2:68:9f:5b: dd:c2:ba:58:4e:f9:61:92:45:26:62:e8:72:e3:23:84:65:55: 2a:ce:dc:2e:72:5a:50:eb:9a:91:93:dd:12:fe:12:1f:aa:2b: e0:2c:f9:82:81:a3:6c:bd:59:7e:94:25:65:31:12:26:7c:2b: 61:69:50:f7:1d:ea:5d:58:3e:f0:f6:0e:5c:84:ad:62:da:9d: 39:be:a1:06:d2:5d:d7:d6:17:75:ff:c9:2c:ac:e8:6e:50:4b: be:aa:4b:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDExMjdDOTIzOUVFQjY2 M0Q5NkJDOERDMjlFQzdCNzVGOUY4MkI3QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPU4m7odXM6ACHPEbgGzJH7AjNP9WztXjq8r51rsmsICIet1An y5sGYCxx1l0FS5qTo44cK/IWRBfvwAggknb3X2u6hthxaMx4NN/InJUSu26lsEbW GTvew6/HdLFGLFIJEhIX0QG4mcKGDaI5puS6vsYMgOZPZfDjGuXSR+3ZdNQGJmLx mT20j51DVf+xq4lQdSc4Vt8mufLkqqRyWOrsjw80BUbGQfKpLGCiXxPn47r4C8j1 92F/dp8UJyjAGBvmihPrlQ3cgFXVZ+SZJ455iTt154/p0+tlNIOyl2RFr3tYF+Hs 6ujTvrnzAPWs6noyp1qqO4HQZzSxL9LAX1NLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUESfJI57rZj2WvI3Cnse3X5+Ct7IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VTZkpJNTdyWmoyV3ZJM0Nu c2UzWDUtQ3Q3SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wmwwDQYJKoZIhvcNAQELBQADggEBAKg+kx1E+W00dWwgkyrPqfakkF+tgJyRS86f 3bvgvQSG6MSYfvEz5nspWHGtmBLpNs525BKK0d38vlO7b6/2zPM61xzGB3ylLWva jP4SHdCO0D9J5p7kWSonQG89TBfY/TfRLDuOtde+0/GChWhrFTVY6akpsrqsLxyH 2zGhZdvFrb+mDwoiHro5VzTWNSnbtsgENp+HHVIYR4pIfkwComifW93CulhO+WGS RSZi6HLjI4RlVSrO3C5yWlDrmpGT3RL+Eh+qK+As+YKBo2y9WX6UJWUxEiZ8K2Fp UPcd6l1YPvD2DlyErWLanTm+oQbSXdfWF3X/ySys6G5QS76qS/g= -----END CERTIFICATE-----Generated at Tue Apr 22 15:01:31 2025 by rpki-client