$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FFC6UbZVjz_cyPOa2wzKJin7KPs.roa File: FFC6UbZVjz_cyPOa2wzKJin7KPs.roa (raw, json) Hash identifier: 0tcOPEHnupYx6E74OY62nZ459imvyoNxGVarXcwa1KA= Subject key identifier: 14:50:BA:51:B6:55:8F:3F:DC:C8:F3:9A:DB:0C:CA:26:29:FB:28:FB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34E3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FFC6UbZVjz_cyPOa2wzKJin7KPs.roa Signing time: Mon 10 Feb 2025 13:52:47 +0000 ROA not before: Mon 10 Feb 2025 13:52:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13539 (0x34e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1450BA51B6558F3FDCC8F39ADB0CCA2629FB28FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:7c:3a:67:3f:37:62:e1:29:99:f4:88:c9: 23:65:fa:2b:51:18:11:4e:05:7a:47:a3:1f:a6:fa: 36:c0:90:88:97:8b:92:78:83:b6:93:86:dd:05:1a: 6c:c9:f9:92:63:5a:17:67:2c:4e:63:c3:6b:82:e0: 35:ea:e5:e1:04:63:d3:b7:da:3a:63:61:53:bc:bd: ea:82:40:68:c5:8b:8a:8d:0b:32:99:3d:45:87:b3: 64:87:d2:c2:43:fd:eb:42:fb:7b:61:d1:a2:2c:57: d8:bc:d6:7b:4e:be:2f:22:3f:71:c2:6c:e1:8f:b6: 32:0f:24:2e:e9:74:8e:07:b4:d1:69:28:f8:90:7d: 4c:72:4c:f4:e3:da:bc:af:5f:c3:bf:9a:ed:36:ea: ef:00:2e:33:af:45:3f:3c:db:ae:2f:21:0b:99:6c: 01:8c:69:87:ef:dc:23:22:e7:e9:b7:03:c2:f0:2d: 81:9b:6f:d9:c8:cf:eb:08:58:56:50:86:45:74:ed: 5e:5f:ca:5e:09:ed:ed:89:08:30:1d:8c:4a:a2:68: 5a:54:db:66:5a:b7:5f:58:6c:3b:58:0d:53:21:5f: ff:14:88:db:65:8f:cd:a4:ac:41:3c:4c:59:cb:69: 5c:0f:e2:43:42:1c:33:9f:60:31:d9:c0:a1:bc:7d: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:50:BA:51:B6:55:8F:3F:DC:C8:F3:9A:DB:0C:CA:26:29:FB:28:FB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FFC6UbZVjz_cyPOa2wzKJin7KPs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.4.0/22 Signature Algorithm: sha256WithRSAEncryption a2:0f:2e:8a:c0:c2:c7:88:20:bb:44:8d:3d:74:db:fd:52:5e: b3:76:b9:fd:e7:69:87:c8:c8:c6:3f:1b:b5:b2:fa:08:d7:4a: 10:d2:81:09:ac:3a:e9:73:5b:c2:59:81:3e:e2:8f:be:82:04: 74:35:e9:9d:3e:a6:c5:65:9e:2c:af:bd:e8:30:4e:7a:ae:e4: 10:34:68:a7:55:97:a5:57:47:ff:3f:74:3a:9d:dc:d2:e8:fb: 0d:75:6a:80:99:11:0d:ef:91:a1:30:e9:47:5c:cd:98:2b:f2: 4d:12:43:28:1b:67:4e:e5:ff:b6:b0:be:b9:77:63:09:7f:a5: 53:8c:f8:14:60:c8:43:ff:e6:49:00:b0:6a:9a:17:80:df:b7: eb:fd:1f:73:1f:e7:9f:c8:7c:c3:d8:a4:40:28:78:16:e9:70: fe:33:a8:f3:97:bd:d6:7b:fc:3f:71:ce:8e:fe:ff:82:45:ac: 05:7c:fb:c1:98:24:b3:cf:6a:3f:20:6d:ca:73:a7:57:7d:a0: 72:a3:9c:16:5a:95:c5:49:75:7d:9d:ae:d9:f2:4f:74:a2:02: 0a:d6:e1:d7:a2:4a:ee:a6:14:84:5a:cf:59:f6:ee:fb:9b:dd: e7:d5:60:8b:6e:b9:2b:60:e3:96:24:2b:8a:1e:04:d4:3b:33: eb:d6:4d:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0NTBCQTUxQjY1NThG M0ZEQ0M4RjM5QURCMENDQTI2MjlGQjI4RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxFXw6Zz83YuEpmfSIySNl+itRGBFOBXpHox+m+jbAkIiXi5J4 g7aTht0FGmzJ+ZJjWhdnLE5jw2uC4DXq5eEEY9O32jpjYVO8veqCQGjFi4qNCzKZ PUWHs2SH0sJD/etC+3th0aIsV9i81ntOvi8iP3HCbOGPtjIPJC7pdI4HtNFpKPiQ fUxyTPTj2ryvX8O/mu026u8ALjOvRT88264vIQuZbAGMaYfv3CMi5+m3A8LwLYGb b9nIz+sIWFZQhkV07V5fyl4J7e2JCDAdjEqiaFpU22Zat19YbDtYDVMhX/8UiNtl j82krEE8TFnLaVwP4kNCHDOfYDHZwKG8ffXpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFFC6UbZVjz/cyPOa2wzKJin7KPswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZGQzZVYlpWanpfY3lQT2Ey d3pLSmluN0tQcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wwQwDQYJKoZIhvcNAQELBQADggEBAKIPLorAwseIILtEjT102/1SXrN2uf3naYfI yMY/G7Wy+gjXShDSgQmsOulzW8JZgT7ij76CBHQ16Z0+psVlniyvvegwTnqu5BA0 aKdVl6VXR/8/dDqd3NLo+w11aoCZEQ3vkaEw6UdczZgr8k0SQygbZ07l/7awvrl3 Ywl/pVOM+BRgyEP/5kkAsGqaF4Dft+v9H3Mf55/IfMPYpEAoeBbpcP4zqPOXvdZ7 /D9xzo7+/4JFrAV8+8GYJLPPaj8gbcpzp1d9oHKjnBZalcVJdX2drtnyT3SiAgrW 4deiSu6mFIRaz1n27vub3efVYItuuStg45YkK4oeBNQ7M+vWTWY= -----END CERTIFICATE-----Generated at Fri Apr 18 22:28:37 2025 by rpki-client