$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fhbg6jxye4xjTsQIyrJ_4U-TOn4.roa File: Fhbg6jxye4xjTsQIyrJ_4U-TOn4.roa (raw, json) Hash identifier: RoQ5Rk6qqTP+DX+VE3XkQwm6LrVY1nlCRESLkG4wYNQ= Subject key identifier: 16:16:E0:EA:3C:72:7B:8C:63:4E:C4:08:CA:B2:7F:E1:4F:93:3A:7E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36C5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fhbg6jxye4xjTsQIyrJ_4U-TOn4.roa Signing time: Mon 10 Feb 2025 13:54:40 +0000 ROA not before: Mon 10 Feb 2025 13:54:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14021 (0x36c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1616E0EA3C727B8C634EC408CAB27FE14F933A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:43:38:a1:86:e3:29:b2:13:55:3b:60:cd:4f: da:00:9c:58:2c:a3:ff:dd:dc:5e:d9:01:1e:b0:2c: 5b:77:4c:c3:4d:8a:26:49:cc:e5:2e:b7:91:52:e1: 0a:bf:12:a4:c4:3f:f8:26:22:84:8f:50:a4:2d:b4: 7c:af:e4:ad:df:16:a1:6b:3c:69:b6:45:1d:c2:99: f9:ab:f8:30:e4:8e:2c:a1:5f:6a:64:ea:20:8d:1e: 12:df:96:fe:47:b8:0e:0c:6a:80:14:92:35:5d:6d: 7a:1e:c4:27:da:b7:dc:01:86:47:61:70:8e:c5:a8: 2b:9f:11:50:df:c0:29:e1:5f:cf:39:27:73:8a:64: c5:a9:14:07:df:eb:a6:5e:cd:c3:b6:e6:bd:b4:e4: d9:04:dc:6b:7b:55:ba:37:25:6c:e0:c3:22:6d:58: c8:0d:a4:21:f3:9e:92:40:1a:08:54:c4:f7:3c:3b: cc:59:62:6b:23:46:ec:77:45:0c:41:7a:01:c8:23: 67:da:15:1b:fc:c6:7a:c4:13:69:ae:26:a9:49:3f: 0e:2f:2a:28:3b:a2:64:66:db:86:0c:1d:b9:8e:0a: 2f:3c:8c:c4:86:2a:27:b6:11:d8:38:7e:9b:26:96: b0:0f:94:bb:86:8a:ef:f6:88:4c:b6:16:80:12:ff: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:16:E0:EA:3C:72:7B:8C:63:4E:C4:08:CA:B2:7F:E1:4F:93:3A:7E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fhbg6jxye4xjTsQIyrJ_4U-TOn4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.94.0/24 Signature Algorithm: sha256WithRSAEncryption ac:2d:96:10:2e:56:95:53:f9:99:6d:8e:55:84:cc:2f:75:40: c6:b0:13:3a:66:56:6f:a9:f3:ab:f1:85:8d:8e:0d:cb:09:4e: 51:f4:4d:23:87:79:5f:64:e8:d7:84:bb:78:e9:94:ac:03:d2: ab:d9:c9:63:c7:5f:1a:cc:77:df:d4:5d:b2:3e:ed:69:82:b4: 2c:1b:f5:d0:57:59:43:22:b6:8a:2c:7a:25:51:ab:91:0b:48: ac:53:d1:a3:ab:27:d4:08:a6:1e:5e:b3:84:f9:c9:1c:b2:8c: 89:ed:10:0b:53:b9:b9:94:86:11:9e:bc:f5:2d:1b:9d:92:98: 1e:57:3a:fb:51:54:85:63:69:7d:f7:8a:8c:de:54:f5:64:33: 9d:72:47:22:99:93:44:2b:c0:d3:0d:ed:29:18:b4:3f:29:0a: 2a:d4:41:bb:bb:c7:ba:49:4c:ff:a7:7c:3a:87:5c:35:52:35: 72:fa:b7:e3:bc:7e:ae:56:07:3b:c3:08:a0:b7:e6:d4:84:4f: cd:e2:7a:d0:25:50:72:1d:f7:77:4e:d2:d9:11:58:be:d3:78: d3:fe:ba:ea:d3:b1:27:d6:f9:0a:8b:4c:79:ce:25:ce:a7:fc: 92:74:e9:3b:7e:57:0f:4b:01:ba:d7:a5:f4:34:f3:e2:f7:5a: 98:52:0c:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2MTZFMEVBM0M3MjdC OEM2MzRFQzQwOENBQjI3RkUxNEY5MzNBN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlQzihhuMpshNVO2DNT9oAnFgso//d3F7ZAR6wLFt3TMNNiiZJ zOUut5FS4Qq/EqTEP/gmIoSPUKQttHyv5K3fFqFrPGm2RR3Cmfmr+DDkjiyhX2pk 6iCNHhLflv5HuA4MaoAUkjVdbXoexCfat9wBhkdhcI7FqCufEVDfwCnhX885J3OK ZMWpFAff66ZezcO25r205NkE3Gt7Vbo3JWzgwyJtWMgNpCHznpJAGghUxPc8O8xZ YmsjRux3RQxBegHII2faFRv8xnrEE2muJqlJPw4vKig7omRm24YMHbmOCi88jMSG Kie2Edg4fpsmlrAPlLuGiu/2iEy2FoAS/9IrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFhbg6jxye4xjTsQIyrJ/4U+TOn4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZoYmc2anh5ZTR4alRzUUl5 ckpfNFUtVE9uNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wV4wDQYJKoZIhvcNAQELBQADggEBAKwtlhAuVpVT+ZltjlWEzC91QMawEzpmVm+p 86vxhY2ODcsJTlH0TSOHeV9k6NeEu3jplKwD0qvZyWPHXxrMd9/UXbI+7WmCtCwb 9dBXWUMitooseiVRq5ELSKxT0aOrJ9QIph5es4T5yRyyjIntEAtTubmUhhGevPUt G52SmB5XOvtRVIVjaX33iozeVPVkM51yRyKZk0QrwNMN7SkYtD8pCirUQbu7x7pJ TP+nfDqHXDVSNXL6t+O8fq5WBzvDCKC35tSET83ietAlUHId93dO0tkRWL7TeNP+ uurTsSfW+QqLTHnOJc6n/JJ06Tt+Vw9LAbrXpfQ08+L3WphSDEg= -----END CERTIFICATE-----Generated at Tue Apr 22 15:13:34 2025 by rpki-client