$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ta9JdKSP5lL-sIN0oQ7eRip39uY.roa File: Ta9JdKSP5lL-sIN0oQ7eRip39uY.roa (raw, json) Hash identifier: fwByPcJWf+oZvMwLAaGiHXIAKUY8pRptfaWHuKS6yXE= Subject key identifier: 4D:AF:49:74:A4:8F:E6:52:FE:B0:83:74:A1:0E:DE:46:2A:77:F6:E6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3575 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ta9JdKSP5lL-sIN0oQ7eRip39uY.roa Signing time: Mon 10 Feb 2025 13:53:21 +0000 ROA not before: Mon 10 Feb 2025 13:53:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13685 (0x3575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4DAF4974A48FE652FEB08374A10EDE462A77F6E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:44:9f:0c:68:05:f8:7e:41:94:58:d4:fa: e2:c0:0f:34:fd:42:f9:95:4f:75:0d:46:45:4b:dd: 89:17:62:0a:f2:13:cf:86:7f:ec:d1:bc:b6:4f:52: a9:18:e9:ae:82:65:46:e6:59:d1:34:12:4d:50:15: c4:f5:e5:fa:f6:ac:9f:d8:0d:86:42:e8:dd:84:8f: 1f:9d:06:b9:56:46:ac:f1:5f:08:3c:ad:a9:a8:17: aa:7b:08:b8:2a:dd:dd:89:5e:96:ed:8e:e5:d4:79: a9:95:6f:08:1b:3e:a2:f4:8c:68:61:2c:e5:a3:e3: 1c:ac:4b:c9:c2:0a:50:87:47:19:72:5a:53:17:07: 47:13:2c:40:1d:86:17:01:cc:72:9e:51:12:49:92: f6:26:e8:d0:7c:c2:31:d3:a9:b5:d0:20:5b:80:4f: 5c:9b:96:09:a1:bb:bb:28:1f:9a:1a:e0:dd:c2:d5: 3c:f3:66:6e:1d:f8:2b:e2:7b:1c:99:b1:41:b6:61: 70:62:d7:f1:f7:91:b7:f9:da:80:30:5d:b4:18:bf: f1:cb:9c:d3:25:6e:5e:55:55:c3:7b:89:16:ef:5b: 2c:e0:52:5e:32:7a:92:06:47:f0:b9:7e:3c:5a:59: c3:f0:60:2e:96:16:4f:ad:e4:84:8d:83:0e:b2:4c: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AF:49:74:A4:8F:E6:52:FE:B0:83:74:A1:0E:DE:46:2A:77:F6:E6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ta9JdKSP5lL-sIN0oQ7eRip39uY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.72.0/22 Signature Algorithm: sha256WithRSAEncryption ad:48:0b:be:ff:3c:2c:ff:ef:2b:60:23:9d:d5:68:d8:83:fb: ac:95:10:b5:74:6f:51:87:3b:80:a0:c2:be:0f:51:38:22:bd: e2:1c:a1:ae:d9:6a:a0:d5:43:cf:8b:96:05:65:5d:da:f4:4a: f1:fd:91:ad:eb:59:03:29:64:4c:89:6d:7d:1e:f5:bb:0a:64: 89:25:ea:c1:bc:a7:8e:26:1e:1b:ca:22:e5:43:77:bf:94:02: 90:e5:a5:6b:48:6a:b7:76:20:91:ca:d7:47:08:ef:02:96:b4: d6:3c:7f:0a:04:72:ff:c4:a9:eb:2f:81:e3:84:00:35:92:09: 8a:4f:fe:ca:de:7e:e0:ee:82:0d:bf:69:c1:fd:21:8a:59:07: 9e:0b:9e:11:07:d4:45:39:ab:47:b5:d9:90:03:57:ec:0a:10: bb:23:86:99:c2:1b:f2:fa:d0:0c:fc:77:b3:7a:b1:22:08:aa: f0:06:97:6a:90:0e:1f:f8:d8:16:5b:ef:5e:88:3b:7c:58:a5: f3:fb:ff:a0:74:fc:5a:57:52:aa:13:31:3c:55:ab:d8:74:ca: f8:9f:6a:fe:42:7a:a3:2b:d7:9f:af:a9:e2:54:41:c4:34:2b: 25:0f:c9:e3:0f:e6:22:4b:a3:21:d4:19:6f:e5:ac:ff:51:6e: 85:f0:3e:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNXUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDREQUY0OTc0QTQ4RkU2 NTJGRUIwODM3NEExMEVERTQ2MkE3N0Y2RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4E0SfDGgF+H5BlFjU+uLADzT9QvmVT3UNRkVL3YkXYgryE8+G f+zRvLZPUqkY6a6CZUbmWdE0Ek1QFcT15fr2rJ/YDYZC6N2Ejx+dBrlWRqzxXwg8 ramoF6p7CLgq3d2JXpbtjuXUeamVbwgbPqL0jGhhLOWj4xysS8nCClCHRxlyWlMX B0cTLEAdhhcBzHKeURJJkvYm6NB8wjHTqbXQIFuAT1yblgmhu7soH5oa4N3C1Tzz Zm4d+CviexyZsUG2YXBi1/H3kbf52oAwXbQYv/HLnNMlbl5VVcN7iRbvWyzgUl4y epIGR/C5fjxaWcPwYC6WFk+t5ISNgw6yTEnzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTa9JdKSP5lL+sIN0oQ7eRip39uYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RhOUpkS1NQNWxMLXNJTjBv UTdlUmlwMzl1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w0gwDQYJKoZIhvcNAQELBQADggEBAK1IC77/PCz/7ytgI53VaNiD+6yVELV0b1GH O4Cgwr4PUTgiveIcoa7ZaqDVQ8+LlgVlXdr0SvH9ka3rWQMpZEyJbX0e9bsKZIkl 6sG8p44mHhvKIuVDd7+UApDlpWtIard2IJHK10cI7wKWtNY8fwoEcv/EqesvgeOE ADWSCYpP/srefuDugg2/acH9IYpZB54LnhEH1EU5q0e12ZADV+wKELsjhpnCG/L6 0Az8d7N6sSIIqvAGl2qQDh/42BZb716IO3xYpfP7/6B0/FpXUqoTMTxVq9h0yvif av5CeqMr15+vqeJUQcQ0KyUPyeMP5iJLoyHUGW/lrP9RboXwPqA= -----END CERTIFICATE-----Generated at Wed Apr 23 04:42:46 2025 by rpki-client