$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gj4AWpPJYTi_8vkTpsWs7rrofAo.roa File: Gj4AWpPJYTi_8vkTpsWs7rrofAo.roa (raw, json) Hash identifier: wxUyeYvkHWEUQaockE94wFabcv6+yZHD2vFjCKbPIsA= Subject key identifier: 1A:3E:00:5A:93:C9:61:38:BF:F2:F9:13:A6:C5:AC:EE:BA:E8:7C:0A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 344A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gj4AWpPJYTi_8vkTpsWs7rrofAo.roa Signing time: Mon 10 Feb 2025 13:52:15 +0000 ROA not before: Mon 10 Feb 2025 13:52:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13386 (0x344a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1A3E005A93C96138BFF2F913A6C5ACEEBAE87C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:01:c6:b4:08:46:31:e7:24:0e:64:17:af: 45:0d:77:54:45:6a:08:ec:30:af:2c:38:64:57:a6: 56:a8:0e:73:af:c4:51:fe:45:38:a2:67:ec:57:4d: c1:6a:ba:4c:a3:5a:64:ef:bd:6e:83:76:37:4c:96: 31:d7:6e:06:2b:b7:65:3b:27:42:99:96:11:06:b3: 69:06:c9:dc:3a:fd:8b:73:38:db:ec:e7:7c:24:8e: aa:fd:14:d5:ad:2a:c8:41:0c:d5:87:b4:1c:7b:0a: df:1f:31:93:b0:3a:59:e0:7d:f0:58:71:15:5e:9a: 28:e1:6e:29:03:0d:a2:3c:fb:04:1c:52:6d:25:7f: da:24:ed:ca:4d:e8:a1:c6:d2:dd:01:76:c6:de:c9: 0f:72:f8:4b:e8:22:ec:a3:a7:00:b1:fb:91:8f:49: 25:77:1e:79:fc:40:91:b9:45:1a:16:67:8a:31:6c: bd:2b:56:e7:66:7b:0f:68:9b:1a:b9:01:3a:4c:bd: 3b:d2:e1:90:1d:f2:6b:0a:56:9e:37:14:3f:18:e1: ee:bd:ae:e5:6d:77:e4:e1:b9:0c:a1:ff:99:45:4b: b2:d1:c2:20:2f:be:81:ab:08:3e:03:a0:2f:4e:17: 71:0e:06:b2:33:e6:0d:5d:3c:45:1d:c9:3c:2e:ae: 75:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3E:00:5A:93:C9:61:38:BF:F2:F9:13:A6:C5:AC:EE:BA:E8:7C:0A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gj4AWpPJYTi_8vkTpsWs7rrofAo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.159.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:0e:63:5b:1d:62:82:27:88:94:2f:b3:12:49:6d:dd:ef:a5: 54:2c:99:98:4e:1d:20:a5:aa:8d:4b:72:af:a0:60:28:ec:2c: 75:6c:96:ea:c6:ad:f2:11:61:ce:e9:73:f8:16:89:b6:85:a1: f0:67:6a:e7:39:4a:d9:f6:15:9c:c8:9d:69:fc:d2:ba:ff:09: 07:fd:3d:af:f6:90:63:bc:f0:f9:e8:de:47:43:81:4f:6f:c3: 92:0f:ee:4a:92:72:5f:b1:a5:26:2f:fb:f9:3c:85:3b:8d:85: 22:aa:78:49:bf:51:c7:78:73:e7:14:81:19:e1:1e:d4:8e:f8: a5:6e:8f:03:4b:7d:c6:a3:93:2e:fe:cc:91:3c:56:4a:49:e3: 7c:10:1a:e5:d1:2d:47:a2:db:1d:46:e0:47:64:35:fe:5a:5c: 19:ad:e3:7c:b8:54:88:34:83:ce:21:23:60:1c:76:ce:bd:d7: 8a:5b:6f:8e:98:05:16:73:6f:ab:58:3d:e8:e0:aa:32:a4:6f: 77:94:8e:87:78:c9:fc:d6:3d:7a:91:78:ec:23:2e:88:ee:aa: fe:bd:0b:61:5b:54:61:ef:35:20:cc:85:1a:9f:84:28:8a:ee: 55:0c:d0:4f:86:1d:fc:61:38:47:5f:7a:00:10:fd:c5:60:10: 62:4a:b9:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBM0UwMDVBOTNDOTYx MzhCRkYyRjkxM0E2QzVBQ0VFQkFFODdDMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDZgHGtAhGMeckDmQXr0UNd1RFagjsMK8sOGRXplaoDnOvxFH+ RTiiZ+xXTcFqukyjWmTvvW6DdjdMljHXbgYrt2U7J0KZlhEGs2kGydw6/YtzONvs 53wkjqr9FNWtKshBDNWHtBx7Ct8fMZOwOlngffBYcRVemijhbikDDaI8+wQcUm0l f9ok7cpN6KHG0t0BdsbeyQ9y+EvoIuyjpwCx+5GPSSV3Hnn8QJG5RRoWZ4oxbL0r Vudmew9omxq5ATpMvTvS4ZAd8msKVp43FD8Y4e69ruVtd+ThuQyh/5lFS7LRwiAv voGrCD4DoC9OF3EOBrIz5g1dPEUdyTwurnUlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGj4AWpPJYTi/8vkTpsWs7rrofAowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dqNEFXcFBKWVRpXzh2a1Rw c1dzN3Jyb2ZBby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wZ8wDQYJKoZIhvcNAQELBQADggEBABoOY1sdYoIniJQvsxJJbd3vpVQsmZhOHSCl qo1Lcq+gYCjsLHVslurGrfIRYc7pc/gWibaFofBnauc5Stn2FZzInWn80rr/CQf9 Pa/2kGO88Pno3kdDgU9vw5IP7kqScl+xpSYv+/k8hTuNhSKqeEm/Ucd4c+cUgRnh HtSO+KVujwNLfcajky7+zJE8VkpJ43wQGuXRLUei2x1G4EdkNf5aXBmt43y4VIg0 g84hI2Acds6914pbb46YBRZzb6tYPejgqjKkb3eUjod4yfzWPXqReOwjLojuqv69 C2FbVGHvNSDMhRqfhCiK7lUM0E+GHfxhOEdfegAQ/cVgEGJKubE= -----END CERTIFICATE-----Generated at Fri Apr 18 22:29:16 2025 by rpki-client