$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VfRiC_sTGoFTjYgRlCNNKhkCjFM.roa File: VfRiC_sTGoFTjYgRlCNNKhkCjFM.roa (raw, json) Hash identifier: u56pq0pMP/s7U13WH3YiQ99rpd2jyMmyMJYFGXrvw8c= Subject key identifier: 55:F4:62:0B:FB:13:1A:81:53:8D:88:11:94:23:4D:2A:19:02:8C:53 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3592 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VfRiC_sTGoFTjYgRlCNNKhkCjFM.roa Signing time: Mon 10 Feb 2025 13:53:29 +0000 ROA not before: Mon 10 Feb 2025 13:53:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13714 (0x3592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=55F4620BFB131A81538D881194234D2A19028C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5b:22:5d:9e:04:d4:58:5b:5f:7f:61:4d:47: 41:c0:b0:0d:83:3a:9a:5a:37:36:95:d7:59:7b:55: e4:43:69:4d:32:a4:bf:72:75:43:91:da:58:6f:af: 29:c4:e2:66:a3:52:d1:a4:b1:80:87:ee:97:8b:41: bc:4d:67:45:f8:15:da:32:0d:be:f2:01:be:e2:75: 0c:1d:be:79:91:59:f0:8e:f4:69:a0:c4:54:f9:2f: 32:46:6c:0b:8c:8f:78:92:70:fc:5a:a5:de:07:39: 4f:34:6e:cd:39:48:bb:4d:7d:e2:3d:18:97:38:a6: 13:76:85:22:4d:9d:ab:81:80:15:e8:f2:a4:be:5d: 6a:47:70:61:99:ca:d7:42:f8:98:b0:fa:d2:03:62: 01:d9:6f:0d:6d:9a:1c:0a:07:55:85:4b:49:eb:c2: ef:16:c8:42:44:8b:6b:b3:18:0b:81:d8:ba:63:64: 0f:d5:e7:0f:f2:a9:c9:c1:f3:be:99:3e:07:dd:17: f9:c0:25:a3:46:2f:c2:30:3c:2a:91:80:92:8e:95: a0:c7:aa:3e:13:ce:8e:d8:9a:67:42:83:b7:77:13: 14:51:09:10:36:02:b9:72:61:77:cd:8f:8e:fc:a5: 43:cb:66:97:3e:69:0f:0b:69:30:5c:c1:16:cf:b9: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F4:62:0B:FB:13:1A:81:53:8D:88:11:94:23:4D:2A:19:02:8C:53 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VfRiC_sTGoFTjYgRlCNNKhkCjFM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.144.0/21 Signature Algorithm: sha256WithRSAEncryption 79:35:35:25:71:6a:df:c2:9d:fc:68:49:91:29:81:68:e1:8d: c6:07:84:1f:4c:c3:1e:19:9d:3e:35:db:a8:88:2a:d8:ca:a2: c6:24:a2:9c:1a:de:41:c0:e0:53:6e:4e:00:93:e3:07:b9:bb: 6c:e3:9c:9c:27:81:c7:cd:9f:4e:c5:7e:1d:5f:04:32:09:f3: 69:f3:1a:6f:cb:87:14:c0:4e:a4:99:d5:8c:70:b1:21:ee:6d: 81:d2:05:63:9b:a4:0c:67:ca:df:9f:02:d6:73:b6:60:64:46: 7d:f8:d7:6e:26:05:f6:ed:71:bc:d1:76:83:66:fe:01:4f:c2: 4a:27:e0:75:d7:03:22:b7:2b:e4:4d:cc:c8:37:11:15:57:98: d2:51:d7:3b:21:5c:05:95:6d:5a:50:a2:95:9c:b9:9b:83:cd: e1:ee:a1:ae:22:d1:bd:9d:d2:a2:05:5f:d7:4e:24:c9:97:9b: f5:3f:cb:b6:30:9c:83:89:b1:ff:f6:27:33:96:f0:c7:7e:1d: e1:d7:78:fd:a3:03:b5:61:7a:61:13:c0:12:7c:97:e9:a6:f0: a3:28:28:fb:c7:7e:a7:b7:42:ac:d5:af:34:ea:f2:1a:af:6b: 52:5a:33:c0:45:48:f2:39:02:3f:ab:ac:7f:ad:06:32:2b:1a: 62:24:50:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1RjQ2MjBCRkIxMzFB ODE1MzhEODgxMTk0MjM0RDJBMTkwMjhDNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcWyJdngTUWFtff2FNR0HAsA2DOppaNzaV11l7VeRDaU0ypL9y dUOR2lhvrynE4majUtGksYCH7peLQbxNZ0X4FdoyDb7yAb7idQwdvnmRWfCO9Gmg xFT5LzJGbAuMj3iScPxapd4HOU80bs05SLtNfeI9GJc4phN2hSJNnauBgBXo8qS+ XWpHcGGZytdC+Jiw+tIDYgHZbw1tmhwKB1WFS0nrwu8WyEJEi2uzGAuB2LpjZA/V 5w/yqcnB876ZPgfdF/nAJaNGL8IwPCqRgJKOlaDHqj4Tzo7YmmdCg7d3ExRRCRA2 ArlyYXfNj478pUPLZpc+aQ8LaTBcwRbPuajbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVfRiC/sTGoFTjYgRlCNNKhkCjFMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZmUmlDX3NUR29GVGpZZ1Js Q05OS2hrQ2pGTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wZAwDQYJKoZIhvcNAQELBQADggEBAHk1NSVxat/CnfxoSZEpgWjhjcYHhB9Mwx4Z nT4126iIKtjKosYkopwa3kHA4FNuTgCT4we5u2zjnJwngcfNn07Ffh1fBDIJ82nz Gm/LhxTATqSZ1YxwsSHubYHSBWObpAxnyt+fAtZztmBkRn34124mBfbtcbzRdoNm /gFPwkon4HXXAyK3K+RNzMg3ERVXmNJR1zshXAWVbVpQopWcuZuDzeHuoa4i0b2d 0qIFX9dOJMmXm/U/y7YwnIOJsf/2JzOW8Md+HeHXeP2jA7VhemETwBJ8l+mm8KMo KPvHfqe3QqzVrzTq8hqva1JaM8BFSPI5Aj+rrH+tBjIrGmIkUFI= -----END CERTIFICATE-----Generated at Tue Apr 22 13:00:54 2025 by rpki-client