$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YSsFHClOJVvqVELqY9Vp6EEyEO8.roa File: YSsFHClOJVvqVELqY9Vp6EEyEO8.roa (raw, json) Hash identifier: wzOorxGu6ETcJYvKXAb77emTrqv5rHiW35Tb7V/vUt4= Subject key identifier: 61:2B:05:1C:29:4E:25:5B:EA:54:42:EA:63:D5:69:E8:41:32:10:EF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 346F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YSsFHClOJVvqVELqY9Vp6EEyEO8.roa Signing time: Mon 10 Feb 2025 13:52:22 +0000 ROA not before: Mon 10 Feb 2025 13:52:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13423 (0x346f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=612B051C294E255BEA5442EA63D569E8413210EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:be:e8:11:e6:12:6a:a2:1d:ce:b8:87:e6: 3f:bf:3e:6a:88:fe:66:cf:1d:d5:7a:d2:e6:67:7a: e2:57:01:2a:4f:28:f4:c4:56:91:bb:c3:bf:76:63: 55:49:d7:8a:2c:9d:df:e1:2d:d3:f1:21:0c:1f:dc: 7e:03:c4:b2:d0:38:4d:ec:10:b0:92:9e:f5:5f:4d: 70:20:ba:70:08:dc:cf:c0:5b:4c:88:07:95:07:3d: 19:a5:a6:35:7c:cb:b7:ce:10:0a:af:8f:bb:29:4d: 7b:da:02:64:c3:8a:70:39:37:36:bf:b0:00:11:58: 3e:b1:37:83:e6:44:83:e8:f1:60:ef:0e:6a:ff:a3: d2:fd:45:c7:6a:9d:37:8c:49:d4:eb:c5:23:5f:9b: b9:f6:14:98:8a:3f:92:2b:1c:78:92:a5:14:68:a7: 4b:90:48:df:2c:81:22:88:55:6e:5d:43:89:29:e2: 8e:10:8c:44:35:88:81:75:f3:71:91:b2:37:e1:09: eb:64:51:35:25:c6:99:3b:0f:40:15:bd:9a:cf:9c: d5:07:4c:8d:90:ae:90:28:4e:ff:07:07:40:8a:83: 9b:23:1a:24:17:43:c0:a5:b6:79:3f:55:79:68:62: 1d:78:de:69:85:9c:f5:b6:42:2a:22:1c:8b:34:04: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2B:05:1C:29:4E:25:5B:EA:54:42:EA:63:D5:69:E8:41:32:10:EF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YSsFHClOJVvqVELqY9Vp6EEyEO8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.168.0/22 Signature Algorithm: sha256WithRSAEncryption 35:ac:75:fb:12:c8:d5:e8:49:6a:70:4d:d0:4b:7f:4c:30:56: 2a:dc:b9:b6:3e:38:44:20:6f:2e:da:68:47:f5:f8:bb:d9:cf: f4:17:6f:ea:5c:b6:66:25:e4:0f:7e:97:cf:37:af:37:23:8c: 9b:b1:3a:ca:86:90:c4:0c:97:5e:16:3d:0d:82:8d:35:01:1a: 5d:cd:0e:e1:92:ba:37:52:bc:27:20:5e:b2:59:b3:3a:78:be: 81:22:51:9a:63:1f:d2:d6:8b:e5:8f:f4:4d:52:03:0c:d9:04: 05:c3:d5:7f:55:90:ad:f8:29:a5:31:80:8e:3a:27:e9:dc:75: 75:6d:0e:f1:29:b9:e3:64:c6:36:5d:93:66:19:40:be:7a:ac: 30:1a:07:52:25:8a:ac:fa:4c:eb:6e:52:5e:26:c7:89:8d:06: 2b:12:5b:9b:8b:d2:e4:4c:56:86:4c:41:e2:37:aa:91:84:ba: 75:43:a7:4c:1e:05:63:68:ac:a5:96:ff:4f:94:c8:82:f3:97: b6:e3:ed:a3:26:9d:cf:c0:00:5e:27:d2:86:8e:46:c6:9c:b3: fb:e9:94:ed:ea:6b:db:52:fc:e7:97:8f:6a:27:16:fe:cb:af: 4b:cd:84:44:fe:b7:57:de:7d:8f:ab:1a:34:4c:92:3d:f8:1c: 32:4b:54:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxMkIwNTFDMjk0RTI1 NUJFQTU0NDJFQTYzRDU2OUU4NDEzMjEwRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQl77oEeYSaqIdzriH5j+/PmqI/mbPHdV60uZneuJXASpPKPTE VpG7w792Y1VJ14osnd/hLdPxIQwf3H4DxLLQOE3sELCSnvVfTXAgunAI3M/AW0yI B5UHPRmlpjV8y7fOEAqvj7spTXvaAmTDinA5Nza/sAARWD6xN4PmRIPo8WDvDmr/ o9L9RcdqnTeMSdTrxSNfm7n2FJiKP5IrHHiSpRRop0uQSN8sgSKIVW5dQ4kp4o4Q jEQ1iIF183GRsjfhCetkUTUlxpk7D0AVvZrPnNUHTI2QrpAoTv8HB0CKg5sjGiQX Q8Cltnk/VXloYh143mmFnPW2QioiHIs0BF3VAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYSsFHClOJVvqVELqY9Vp6EEyEO8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lTc0ZIQ2xPSlZ2cVZFTHFZ OVZwNkVFeUVPOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w6gwDQYJKoZIhvcNAQELBQADggEBADWsdfsSyNXoSWpwTdBLf0wwVircubY+OEQg by7aaEf1+LvZz/QXb+pctmYl5A9+l883rzcjjJuxOsqGkMQMl14WPQ2CjTUBGl3N DuGSujdSvCcgXrJZszp4voEiUZpjH9LWi+WP9E1SAwzZBAXD1X9VkK34KaUxgI46 J+ncdXVtDvEpueNkxjZdk2YZQL56rDAaB1Iliqz6TOtuUl4mx4mNBisSW5uL0uRM VoZMQeI3qpGEunVDp0weBWNorKWW/0+UyILzl7bj7aMmnc/AAF4n0oaORsacs/vp lO3qa9tS/OeXj2onFv7Lr0vNhET+t1fefY+rGjRMkj34HDJLVBg= -----END CERTIFICATE-----Generated at Fri Apr 18 22:33:41 2025 by rpki-client