$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xzaxmj1yMQ4_WGuOCYCuEUTN6eE.roa File: Xzaxmj1yMQ4_WGuOCYCuEUTN6eE.roa (raw, json) Hash identifier: 8cBtlV30j71GxDn5L6zCcG+XnM+pLxpoPM6ewF+yu0g= Subject key identifier: 5F:36:B1:9A:3D:72:31:0E:3F:58:6B:8E:09:80:AE:11:44:CD:E9:E1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33AB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xzaxmj1yMQ4_WGuOCYCuEUTN6eE.roa Signing time: Mon 10 Feb 2025 13:51:39 +0000 ROA not before: Mon 10 Feb 2025 13:51:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13227 (0x33ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5F36B19A3D72310E3F586B8E0980AE1144CDE9E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:82:7a:0e:15:ad:aa:ed:e5:70:ba:cc:2a: f0:06:6f:03:a4:4f:77:41:cb:0a:58:2f:88:86:9c: ec:4c:f0:24:a3:e3:ee:78:bf:d1:b5:0d:60:e5:28: cf:ba:3c:4f:c2:ec:4f:e9:11:af:94:5d:a4:a1:43: 72:c4:8d:c4:ee:fc:f7:4f:99:85:ac:dd:4a:98:be: 3a:2a:50:3d:af:c0:ae:bc:6d:ed:17:d7:9e:f1:40: 71:4b:3d:28:75:e2:58:44:02:54:eb:12:35:9c:8b: a3:ca:1c:60:8c:59:f5:18:4c:40:46:5f:6c:38:30: 20:08:a5:ac:cd:f9:df:cd:ed:ab:59:89:1e:b1:6b: 1f:f2:de:88:be:b8:b1:4d:79:18:a2:27:de:53:46: 38:6d:1f:98:87:cd:1c:0d:f9:fd:de:85:ff:48:c6: 5b:10:c3:29:2a:12:bc:eb:b4:b6:93:da:ff:4b:4c: 7f:1a:31:39:96:5a:d2:f1:a2:e7:f6:3e:af:d7:da: ee:8b:9c:86:a0:6f:67:b1:29:64:f6:39:bf:2d:5c: 6d:f2:05:12:b8:aa:41:38:e8:42:2f:0b:5b:0d:05: 1e:52:ce:5a:cf:a4:c0:d7:60:21:75:8a:59:25:7c: e0:a7:6e:19:3b:5f:13:83:4b:5d:d3:bd:ff:83:4e: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:36:B1:9A:3D:72:31:0E:3F:58:6B:8E:09:80:AE:11:44:CD:E9:E1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xzaxmj1yMQ4_WGuOCYCuEUTN6eE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.100.0/22 Signature Algorithm: sha256WithRSAEncryption b6:e7:9e:9f:01:b9:06:f2:a8:46:f3:29:53:2c:e0:3e:d7:06: 0f:bb:3d:6c:ec:c7:2e:56:03:f0:d8:5f:7c:73:e4:fc:00:7c: da:df:73:f1:53:0f:24:e6:ca:1c:48:db:67:22:09:b8:2a:8f: 83:3f:48:18:f6:38:76:39:d2:a8:c9:d6:b1:1f:8e:c5:c4:81: ea:bf:9b:38:ca:e9:07:ab:1a:e1:96:4b:ab:92:59:13:75:96: 5c:22:c7:79:dd:fd:2c:6e:bf:1f:04:23:26:4e:d6:60:d3:4e: f0:67:65:05:0b:d8:a0:db:0e:8e:4f:79:7b:46:79:62:e5:90: cd:62:7e:55:e0:e6:b5:2b:d9:0f:e0:6f:75:94:20:a5:ab:a7: 60:42:58:5e:a4:26:a2:a6:f3:a0:82:6d:e1:b4:17:09:0f:db: 41:3a:fa:0c:e0:27:2d:0e:5c:02:fd:a8:22:e7:83:a8:4c:a8: 8c:ad:15:8f:ba:87:cb:63:6e:b1:f0:28:c6:37:3e:93:0c:4b: f4:8e:56:be:8f:c1:6c:05:f6:bd:98:d6:e7:67:64:db:0d:de: 7f:2a:89:e3:4f:4d:89:69:f2:36:76:9d:fc:9f:4e:28:92:26: ed:86:a9:a2:fc:cd:28:b8:c8:aa:7d:7d:5a:ac:f5:38:dc:99: 61:13:64:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGMzZCMTlBM0Q3MjMx MEUzRjU4NkI4RTA5ODBBRTExNDRDREU5RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsqIJ6DhWtqu3lcLrMKvAGbwOkT3dBywpYL4iGnOxM8CSj4+54 v9G1DWDlKM+6PE/C7E/pEa+UXaShQ3LEjcTu/PdPmYWs3UqYvjoqUD2vwK68be0X 157xQHFLPSh14lhEAlTrEjWci6PKHGCMWfUYTEBGX2w4MCAIpazN+d/N7atZiR6x ax/y3oi+uLFNeRiiJ95TRjhtH5iHzRwN+f3ehf9IxlsQwykqErzrtLaT2v9LTH8a MTmWWtLxouf2Pq/X2u6LnIagb2exKWT2Ob8tXG3yBRK4qkE46EIvC1sNBR5SzlrP pMDXYCF1ilklfOCnbhk7XxODS13Tvf+DTnzPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXzaxmj1yMQ4/WGuOCYCuEUTN6eEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1h6YXhtajF5TVE0X1dHdU9D WUN1RVVUTjZlRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wGQwDQYJKoZIhvcNAQELBQADggEBALbnnp8BuQbyqEbzKVMs4D7XBg+7PWzsxy5W A/DYX3xz5PwAfNrfc/FTDyTmyhxI22ciCbgqj4M/SBj2OHY50qjJ1rEfjsXEgeq/ mzjK6QerGuGWS6uSWRN1llwix3nd/Sxuvx8EIyZO1mDTTvBnZQUL2KDbDo5PeXtG eWLlkM1iflXg5rUr2Q/gb3WUIKWrp2BCWF6kJqKm86CCbeG0FwkP20E6+gzgJy0O XAL9qCLng6hMqIytFY+6h8tjbrHwKMY3PpMMS/SOVr6PwWwF9r2Y1udnZNsN3n8q ieNPTYlp8jZ2nfyfTiiSJu2GqaL8zSi4yKp9fVqs9TjcmWETZCQ= -----END CERTIFICATE-----Generated at Fri Apr 18 22:39:19 2025 by rpki-client