$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RexlGSaxsAiJ1X3UWQmwxO1NL6g.roa File: RexlGSaxsAiJ1X3UWQmwxO1NL6g.roa (raw, json) Hash identifier: 4iKE0VDhlSCo9h58cTIQ4DqhI2bI3ELKe7oKSA9QUNs= Subject key identifier: 45:EC:65:19:26:B1:B0:08:89:D5:7D:D4:59:09:B0:C4:ED:4D:2F:A8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3683 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RexlGSaxsAiJ1X3UWQmwxO1NL6g.roa Signing time: Mon 10 Feb 2025 13:54:23 +0000 ROA not before: Mon 10 Feb 2025 13:54:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13955 (0x3683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=45EC651926B1B00889D57DD45909B0C4ED4D2FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:13:35:57:ff:e6:c8:f9:30:92:b7:c7:15: 67:8b:4a:03:44:b2:4c:e0:37:24:bd:9d:dd:a9:5d: fa:11:15:cb:83:ad:47:3c:2e:75:de:58:98:8a:27: af:05:20:cc:24:72:99:15:11:b9:ba:eb:4a:83:74: 1b:b8:18:e1:6c:38:b7:35:4e:de:5e:07:08:10:34: 86:18:e2:cd:4c:e7:6f:cc:dc:7d:54:4d:72:b3:e9: d1:73:cf:9d:9f:ab:63:91:ff:ed:8d:39:14:4a:ad: 4f:82:ee:7e:58:d5:c7:aa:0d:8b:18:2a:90:ed:25: 35:78:e7:18:90:43:3c:df:11:b3:81:05:fe:41:70: 53:49:cc:27:62:98:4f:f4:44:a4:43:b6:52:8a:13: 39:38:43:b8:fe:13:e0:50:c6:80:96:69:b7:39:49: 30:0d:fd:76:1c:c9:6e:89:ac:10:e6:fa:6b:d0:9d: 05:44:a3:d3:3d:f4:ab:0b:8c:7f:73:00:7b:ea:c2: 41:23:27:2c:ab:8c:67:2c:d2:f6:77:e6:e5:7d:bf: 62:25:03:6b:38:41:48:0b:8d:41:46:df:d5:53:e4: fb:3a:5a:bf:f9:a7:ce:e6:09:74:41:8c:a8:58:88: 64:d7:5c:98:5c:64:5c:ef:b1:ce:f7:99:dd:4f:2c: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EC:65:19:26:B1:B0:08:89:D5:7D:D4:59:09:B0:C4:ED:4D:2F:A8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RexlGSaxsAiJ1X3UWQmwxO1NL6g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.44.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:e5:91:9e:37:14:f0:0b:c0:ab:20:3f:b5:de:ba:d3:b9:91: 53:44:e5:40:59:9e:10:b4:98:8f:38:aa:1b:b0:c0:46:7a:5c: 44:40:35:a6:6f:53:b3:bd:bc:2d:73:57:97:26:5b:a9:16:d1: 45:ae:9c:63:26:99:49:d7:6b:e9:c4:0b:d1:f3:80:50:cd:9a: 74:f8:e3:52:58:34:89:bc:53:48:e3:fc:9d:80:fc:d0:98:50: c9:88:78:28:6e:af:ce:07:b8:c3:97:5e:fa:a9:24:9b:0f:5b: a3:1d:9c:c8:38:73:0c:10:0e:db:5d:ca:f8:d0:a2:79:5e:b3: ee:c7:a9:4a:7a:0e:82:86:94:9d:bf:1d:8c:59:04:02:21:48: 71:be:ad:d7:0d:c7:9b:43:57:db:be:0e:46:04:c9:d4:d6:8d: df:e4:35:dd:91:e2:8e:14:8e:ab:7d:3c:16:f5:b5:17:c0:63: 91:17:04:18:e1:d0:f3:7a:a2:ee:90:14:2a:85:18:9c:b6:f7: 64:c4:89:80:04:4c:38:f2:4a:fb:0b:0f:60:8e:a3:5c:12:50: 52:93:06:d4:e7:a6:f9:e0:34:2e:8a:08:4f:40:85:b0:ad:2f: f9:cb:32:d9:18:a5:85:fe:db:e7:1a:c9:61:7a:10:98:11:6d: f4:9a:64:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1RUM2NTE5MjZCMUIw MDg4OUQ1N0RENDU5MDlCMEM0RUQ0RDJGQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC3RM1V//myPkwkrfHFWeLSgNEskzgNyS9nd2pXfoRFcuDrUc8 LnXeWJiKJ68FIMwkcpkVEbm660qDdBu4GOFsOLc1Tt5eBwgQNIYY4s1M52/M3H1U TXKz6dFzz52fq2OR/+2NORRKrU+C7n5Y1ceqDYsYKpDtJTV45xiQQzzfEbOBBf5B cFNJzCdimE/0RKRDtlKKEzk4Q7j+E+BQxoCWabc5STAN/XYcyW6JrBDm+mvQnQVE o9M99KsLjH9zAHvqwkEjJyyrjGcs0vZ35uV9v2IlA2s4QUgLjUFG39VT5Ps6Wr/5 p87mCXRBjKhYiGTXXJhcZFzvsc73md1PLGF7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURexlGSaxsAiJ1X3UWQmwxO1NL6gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JleGxHU2F4c0FpSjFYM1VX UW13eE8xTkw2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wCwwDQYJKoZIhvcNAQELBQADggEBAEzlkZ43FPALwKsgP7XeutO5kVNE5UBZnhC0 mI84qhuwwEZ6XERANaZvU7O9vC1zV5cmW6kW0UWunGMmmUnXa+nEC9HzgFDNmnT4 41JYNIm8U0jj/J2A/NCYUMmIeChur84HuMOXXvqpJJsPW6MdnMg4cwwQDttdyvjQ onles+7HqUp6DoKGlJ2/HYxZBAIhSHG+rdcNx5tDV9u+DkYEydTWjd/kNd2R4o4U jqt9PBb1tRfAY5EXBBjh0PN6ou6QFCqFGJy292TEiYAETDjySvsLD2COo1wSUFKT BtTnpvngNC6KCE9AhbCtL/nLMtkYpYX+2+cayWF6EJgRbfSaZEI= -----END CERTIFICATE-----Generated at Wed Apr 23 04:55:20 2025 by rpki-client