$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vvgz5l55JtoqebA7-Og5bhtIucY.roa File: Vvgz5l55JtoqebA7-Og5bhtIucY.roa (raw, json) Hash identifier: wjueG6qFL761WoZLtQulgLg7oSr4qbDY1qiOTg9+1Y0= Subject key identifier: 56:F8:33:E6:5E:79:26:DA:2A:79:B0:3B:F8:E8:39:6E:1B:48:B9:C6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34D7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vvgz5l55JtoqebA7-Og5bhtIucY.roa Signing time: Mon 10 Feb 2025 13:52:44 +0000 ROA not before: Mon 10 Feb 2025 13:52:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.248.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=56F833E65E7926DA2A79B03BF8E8396E1B48B9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:f6:de:4a:69:44:18:d2:f6:e4:d5:6a:46: 85:c1:95:2a:c7:8a:0e:bf:e0:87:51:c8:c8:b7:a1: 4c:f8:9e:10:17:ea:46:ad:52:95:2c:f0:ab:ba:72: 96:f2:f8:e2:72:c4:75:92:40:de:aa:d6:a2:ba:b1: f8:e0:ba:e3:85:79:97:d8:a4:e8:8a:54:4d:e3:89: 83:29:4b:0b:6b:00:f9:2e:c8:14:3e:90:c7:8a:ee: e2:28:0f:bd:6e:6b:4b:1e:35:37:31:31:86:8d:37: 0e:68:f6:bd:d5:e6:4c:96:25:5a:70:5a:b5:92:a5: 68:8b:65:ef:49:4e:60:03:e0:ea:5b:78:8d:63:1f: 29:f8:d3:ab:aa:b3:60:91:5c:e2:36:8b:e9:41:70: bb:d9:de:16:e2:9e:9d:f7:29:d4:76:5e:c5:b5:eb: bb:14:66:89:f0:b1:f9:e6:e7:55:33:29:b1:b3:60: ca:91:7e:82:01:2b:db:d9:02:a7:0d:18:4a:b3:14: f6:82:89:3f:e6:2f:f8:13:c2:8f:8b:8e:9e:86:2f: b0:49:8b:ba:8c:98:f9:d0:2f:47:ac:c0:23:35:ce: fb:64:d8:48:0b:5f:19:43:34:ce:a3:f8:89:7a:ba: bc:0d:25:bc:f0:91:2e:95:3e:47:3e:dd:51:25:38: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F8:33:E6:5E:79:26:DA:2A:79:B0:3B:F8:E8:39:6E:1B:48:B9:C6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vvgz5l55JtoqebA7-Og5bhtIucY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.248.0/21 Signature Algorithm: sha256WithRSAEncryption 41:56:c0:0e:ed:9b:c8:61:93:86:94:e8:d6:ba:5e:ad:59:7d: 0d:90:00:64:4a:f3:db:44:b7:3a:d5:e7:2c:41:a4:03:3f:06: 0b:9f:f2:42:88:15:c2:f0:dc:81:7a:89:83:d0:5f:62:75:7a: 83:25:82:8e:e2:07:2e:f2:d2:b1:d4:f5:24:f6:0b:11:3a:84: 65:b8:df:f7:8e:4e:06:ef:e6:3e:84:5e:e4:ce:2f:73:f8:8f: c7:12:19:c1:d2:a0:f7:ba:56:36:0f:cb:4f:6d:a6:61:7a:30: 6a:48:c9:97:47:9d:8f:51:06:4e:29:2e:dc:19:76:f1:78:9c: 48:23:b9:cb:38:cb:04:3c:d1:26:4f:db:d8:3d:e6:03:c4:d2: e5:89:d5:d9:20:5c:d6:a7:b6:29:9f:70:95:29:99:44:d7:5d: 83:b3:59:b0:7e:31:8d:80:a1:d3:e7:65:7d:a0:f8:08:1a:b6: fe:06:81:6e:0c:69:53:55:77:bb:3f:16:bb:c0:ff:41:99:a7: 92:17:79:36:53:49:ea:cb:b5:36:2d:65:f9:7b:88:42:26:c6: 59:18:9f:1e:30:ed:01:f6:bd:c2:19:fa:04:53:75:d8:42:f1: 64:d4:82:28:fb:31:ac:fc:98:4c:b2:57:18:1c:03:56:81:ff: da:0e:7a:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU2RjgzM0U2NUU3OTI2 REEyQTc5QjAzQkY4RTgzOTZFMUI0OEI5QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/NvbeSmlEGNL25NVqRoXBlSrHig6/4IdRyMi3oUz4nhAX6kat UpUs8Ku6cpby+OJyxHWSQN6q1qK6sfjguuOFeZfYpOiKVE3jiYMpSwtrAPkuyBQ+ kMeK7uIoD71ua0seNTcxMYaNNw5o9r3V5kyWJVpwWrWSpWiLZe9JTmAD4OpbeI1j Hyn406uqs2CRXOI2i+lBcLvZ3hbinp33KdR2XsW167sUZonwsfnm51UzKbGzYMqR foIBK9vZAqcNGEqzFPaCiT/mL/gTwo+Ljp6GL7BJi7qMmPnQL0eswCM1zvtk2EgL XxlDNM6j+Il6urwNJbzwkS6VPkc+3VElOGZdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVvgz5l55JtoqebA7+Og5bhtIucYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1Z2Z3o1bDU1SnRvcWViQTct T2c1Ymh0SXVjWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wPgwDQYJKoZIhvcNAQELBQADggEBAEFWwA7tm8hhk4aU6Na6Xq1ZfQ2QAGRK89tE tzrV5yxBpAM/Bguf8kKIFcLw3IF6iYPQX2J1eoMlgo7iBy7y0rHU9ST2CxE6hGW4 3/eOTgbv5j6EXuTOL3P4j8cSGcHSoPe6VjYPy09tpmF6MGpIyZdHnY9RBk4pLtwZ dvF4nEgjucs4ywQ80SZP29g95gPE0uWJ1dkgXNantimfcJUpmUTXXYOzWbB+MY2A odPnZX2g+Agatv4GgW4MaVNVd7s/FrvA/0GZp5IXeTZTSerLtTYtZfl7iEImxlkY nx4w7QH2vcIZ+gRTddhC8WTUgij7Maz8mEyyVxgcA1aB/9oOem4= -----END CERTIFICATE-----Generated at Wed Apr 23 04:53:44 2025 by rpki-client