$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZvrRjTaTr0zveRYJ5_0Z-ViEJc.roa File: IZvrRjTaTr0zveRYJ5_0Z-ViEJc.roa (raw, json) Hash identifier: YMqO5IH7pVwj2clnvsLRrh+hI7sp4f0jKWvYu7Dh694= Subject key identifier: 21:9B:EB:46:34:DA:4E:BD:33:BD:E4:58:27:9F:F4:67:E5:62:10:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3398 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZvrRjTaTr0zveRYJ5_0Z-ViEJc.roa Signing time: Mon 10 Feb 2025 13:51:35 +0000 ROA not before: Mon 10 Feb 2025 13:51:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.193.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13208 (0x3398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=219BEB4634DA4EBD33BDE458279FF467E5621097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:b9:48:8e:20:1f:cf:74:9d:29:3f:75:80: 37:37:71:42:47:14:8d:bc:50:0e:59:a9:44:c0:b8: b9:50:8e:ee:ac:61:3a:56:a3:a3:6d:64:f0:dd:04: b0:c0:42:50:a4:1d:a1:76:cc:50:cd:98:a2:20:52: 63:15:90:4b:fa:8a:5d:4d:81:1c:d9:89:d7:96:36: 09:a4:59:4e:72:8c:89:97:3c:b2:59:a1:94:7a:18: 65:94:9d:32:47:ac:b7:03:7b:7e:61:c0:4c:b6:51: e4:f4:58:23:0d:39:07:ef:ab:4d:47:fb:9c:45:82: 69:75:12:9a:8d:68:c6:08:69:77:6f:a8:26:5d:5a: e2:9e:79:25:e3:88:e6:49:d5:2c:05:dc:6e:02:77: 38:1e:93:eb:70:5c:f7:a5:31:79:bb:45:4d:8e:56: 88:b3:55:04:e4:47:e0:03:99:c0:b2:31:8b:2c:b5: d0:1a:9f:90:53:ce:40:5c:d0:9c:04:9e:5c:7f:0b: 2f:c0:75:7c:e3:9d:b5:65:5c:db:75:5c:48:82:b2: 21:63:15:32:90:7e:19:74:20:9a:3d:18:36:cb:05: ad:30:ca:8d:74:10:89:8a:38:b3:ca:19:48:30:56: ed:7e:35:bd:ea:58:c7:74:28:89:d8:37:d1:8e:dc: e6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9B:EB:46:34:DA:4E:BD:33:BD:E4:58:27:9F:F4:67:E5:62:10:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZvrRjTaTr0zveRYJ5_0Z-ViEJc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.223.0/24 Signature Algorithm: sha256WithRSAEncryption 38:68:63:93:d4:c3:9b:54:24:4d:ac:ad:48:b9:fd:62:46:1e: 5b:1d:0f:95:0f:c0:b7:62:23:98:4c:3a:f1:9f:d1:94:a0:c5: f5:33:c3:52:99:dd:c6:52:90:00:97:1e:d0:48:57:88:fb:bf: 2f:4c:1a:56:3f:ee:a9:90:0c:a2:16:b8:0c:30:92:04:92:84: 57:6b:ae:20:de:65:d4:5a:b7:18:e4:a4:fe:e1:28:5f:36:53: 65:29:86:1f:c5:b8:a6:aa:64:a0:b9:07:47:4a:4e:d4:e8:ed: cc:14:19:5a:2d:17:a8:60:f7:05:fc:92:b3:21:65:7d:7b:4f: 3e:45:81:17:1b:9d:b7:da:17:73:52:72:7c:df:af:bd:25:70: 69:c5:0d:f2:d0:ac:4b:29:58:f5:a6:53:e0:8e:86:86:2a:84: 3d:30:78:0c:64:22:25:c0:33:bd:bb:85:d5:80:bb:c3:5e:90: b4:8e:73:df:f7:fd:68:bb:a1:57:2a:63:3b:78:8f:c5:ee:55: 2b:07:2d:65:b1:dd:e1:48:09:61:1a:87:ca:0b:47:f8:4b:18: f4:92:11:94:7b:72:2e:94:6d:e0:4c:1b:03:e5:41:56:58:72: b7:2c:48:a4:cd:58:69:56:67:86:37:a4:18:c9:90:5c:bd:d1: b8:00:7b:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIxOUJFQjQ2MzREQTRF QkQzM0JERTQ1ODI3OUZGNDY3RTU2MjEwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUQLlIjiAfz3SdKT91gDc3cUJHFI28UA5ZqUTAuLlQju6sYTpW o6NtZPDdBLDAQlCkHaF2zFDNmKIgUmMVkEv6il1NgRzZideWNgmkWU5yjImXPLJZ oZR6GGWUnTJHrLcDe35hwEy2UeT0WCMNOQfvq01H+5xFgml1EpqNaMYIaXdvqCZd WuKeeSXjiOZJ1SwF3G4Cdzgek+twXPelMXm7RU2OVoizVQTkR+ADmcCyMYsstdAa n5BTzkBc0JwEnlx/Cy/AdXzjnbVlXNt1XEiCsiFjFTKQfhl0IJo9GDbLBa0wyo10 EImKOLPKGUgwVu1+Nb3qWMd0KInYN9GO3ObBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIZvrRjTaTr0zveRYJ5/0Z+ViEJcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ladnJSalRhVHIwenZlUllK NV8wWi1WaUVKYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wd8wDQYJKoZIhvcNAQELBQADggEBADhoY5PUw5tUJE2srUi5/WJGHlsdD5UPwLdi I5hMOvGf0ZSgxfUzw1KZ3cZSkACXHtBIV4j7vy9MGlY/7qmQDKIWuAwwkgSShFdr riDeZdRatxjkpP7hKF82U2Uphh/FuKaqZKC5B0dKTtTo7cwUGVotF6hg9wX8krMh ZX17Tz5FgRcbnbfaF3NScnzfr70lcGnFDfLQrEspWPWmU+COhoYqhD0weAxkIiXA M727hdWAu8NekLSOc9/3/Wi7oVcqYzt4j8XuVSsHLWWx3eFICWEah8oLR/hLGPSS EZR7ci6UbeBMGwPlQVZYcrcsSKTNWGlWZ4Y3pBjJkFy90bgAe2Y= -----END CERTIFICATE-----Generated at Fri Apr 18 22:39:06 2025 by rpki-client