$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jqlp8_eET6BbBxPgM4mltTBZ9o8.roa File: Jqlp8_eET6BbBxPgM4mltTBZ9o8.roa (raw, json) Hash identifier: UkZl4pWC1XZaUBH0mf/bG3OotqsfpDLiZeh7kzd9I7E= Subject key identifier: 26:A9:69:F3:F7:84:4F:A0:5B:07:13:E0:33:89:A5:B5:30:59:F6:8F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3484 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jqlp8_eET6BbBxPgM4mltTBZ9o8.roa Signing time: Mon 10 Feb 2025 13:52:27 +0000 ROA not before: Mon 10 Feb 2025 13:52:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=26A969F3F7844FA05B0713E03389A5B53059F68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:c7:7d:2c:e6:b0:fc:e5:03:b1:05:66:20: 79:a5:8c:cb:8a:47:6f:2c:77:29:54:22:96:8d:ee: fa:4a:71:25:32:2b:66:a7:6d:41:d7:af:9f:ee:f9: 83:38:9c:78:b3:3a:ef:17:36:06:70:06:03:56:a5: b0:e0:48:7e:27:5a:8c:c3:9f:2d:07:b0:b2:99:37: b2:03:11:91:53:05:f4:ac:e4:46:f8:c3:05:a4:ce: 1f:ad:b0:79:45:9e:ef:be:56:68:07:9d:7d:4b:83: 05:e8:8a:41:9b:7d:1e:25:a4:38:62:d0:d8:6e:b1: 82:1b:30:fd:30:a2:82:5d:9e:19:4a:2b:4b:78:df: 63:57:98:d9:ec:d5:fa:53:c7:22:f3:81:48:67:ab: ea:20:0d:65:48:96:2d:6f:e1:0f:b2:ce:0e:70:1a: d7:c0:ab:e5:04:f8:66:96:c0:aa:6e:8b:a6:73:fc: 21:71:3f:67:e0:14:9a:fd:7f:f4:32:7e:6b:95:09: 59:0c:2c:53:ce:cc:fb:73:4e:45:bf:87:81:d4:4b: 54:50:7a:98:0d:54:61:07:02:6c:fb:f2:cf:6c:f4: bf:c0:8d:fb:0c:40:24:68:60:51:25:34:54:16:c0: 68:63:67:e3:82:16:6c:19:5e:72:6d:2a:c5:88:1a: 96:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A9:69:F3:F7:84:4F:A0:5B:07:13:E0:33:89:A5:B5:30:59:F6:8F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jqlp8_eET6BbBxPgM4mltTBZ9o8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.20.0/22 Signature Algorithm: sha256WithRSAEncryption 32:5e:48:f1:bb:ed:a0:20:6d:83:d3:65:20:2f:80:d9:1b:9f: 0b:bf:aa:38:e8:29:97:03:c6:db:61:bb:13:ef:cc:0c:e6:d8: 3f:e3:30:fd:b5:aa:d1:b9:77:3c:3f:8f:95:79:bd:c7:dd:b0: 22:19:f3:bf:62:ba:7d:94:76:26:0b:cb:cf:09:7b:1b:00:f5: 40:11:a9:1e:70:a0:58:54:30:88:b5:d7:ec:28:88:c4:91:c9: 25:38:e4:b0:64:07:31:02:19:d6:08:9a:ea:25:07:fa:dd:44: 94:60:f1:65:46:97:f4:55:ec:60:f7:04:35:63:51:a8:5c:68: e2:1b:fb:40:d5:6e:78:cf:24:c3:ae:a3:a4:f1:32:13:45:f7: 0a:25:20:aa:bc:9c:f9:92:82:68:d0:32:86:99:16:43:0b:fa: 19:06:f8:79:15:ea:34:38:2e:bf:0a:69:57:92:c2:b7:9a:36: e8:62:71:82:96:ec:2e:7b:dc:19:d0:11:7c:62:9a:50:64:b2: 7d:bb:cb:0d:96:a8:80:08:4e:da:57:2c:46:0f:c0:71:86:68: 81:3e:d1:c6:35:be:33:17:df:9e:94:2e:52:57:0c:6b:9f:14: 2c:df:9c:af:68:f0:a5:2c:00:0d:6a:d5:33:0c:3c:c0:99:7d: cf:68:ce:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2QTk2OUYzRjc4NDRG QTA1QjA3MTNFMDMzODlBNUI1MzA1OUY2OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDgMd9LOaw/OUDsQVmIHmljMuKR28sdylUIpaN7vpKcSUyK2an bUHXr5/u+YM4nHizOu8XNgZwBgNWpbDgSH4nWozDny0HsLKZN7IDEZFTBfSs5Eb4 wwWkzh+tsHlFnu++VmgHnX1LgwXoikGbfR4lpDhi0NhusYIbMP0wooJdnhlKK0t4 32NXmNns1fpTxyLzgUhnq+ogDWVIli1v4Q+yzg5wGtfAq+UE+GaWwKpui6Zz/CFx P2fgFJr9f/QyfmuVCVkMLFPOzPtzTkW/h4HUS1RQepgNVGEHAmz78s9s9L/AjfsM QCRoYFElNFQWwGhjZ+OCFmwZXnJtKsWIGpaBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJqlp8/eET6BbBxPgM4mltTBZ9o8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pxbHA4X2VFVDZCYkJ4UGdN NG1sdFRCWjlvOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 whQwDQYJKoZIhvcNAQELBQADggEBADJeSPG77aAgbYPTZSAvgNkbnwu/qjjoKZcD xtthuxPvzAzm2D/jMP21qtG5dzw/j5V5vcfdsCIZ879iun2UdiYLy88JexsA9UAR qR5woFhUMIi11+woiMSRySU45LBkBzECGdYImuolB/rdRJRg8WVGl/RV7GD3BDVj UahcaOIb+0DVbnjPJMOuo6TxMhNF9wolIKq8nPmSgmjQMoaZFkML+hkG+HkV6jQ4 Lr8KaVeSwreaNuhicYKW7C573BnQEXximlBksn27yw2WqIAITtpXLEYPwHGGaIE+ 0cY1vjMX356ULlJXDGufFCzfnK9o8KUsAA1q1TMMPMCZfc9oziU= -----END CERTIFICATE-----Generated at Fri Apr 18 22:43:50 2025 by rpki-client