$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZPiOx3-73F6U_vsGSyjplW1IuVo.roa File: ZPiOx3-73F6U_vsGSyjplW1IuVo.roa (raw, json) Hash identifier: fYaXjgHhbYyIFfVSGgkV6Teido0JyGeAT1noItn5faw= Subject key identifier: 64:F8:8E:C7:7F:BB:DC:5E:94:FE:FB:06:4B:28:E9:95:6D:48:B9:5A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34CE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZPiOx3-73F6U_vsGSyjplW1IuVo.roa Signing time: Mon 10 Feb 2025 13:52:42 +0000 ROA not before: Mon 10 Feb 2025 13:52:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13518 (0x34ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=64F88EC77FBBDC5E94FEFB064B28E9956D48B95A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:67:b9:95:8f:9c:2c:c7:20:36:09:a0:60: f7:3f:ee:6d:dc:fd:10:58:31:92:a8:ea:c3:89:96: f4:c3:ae:e4:93:30:72:27:2a:e4:23:db:5a:c2:e3: 5c:4c:c4:3e:66:9b:f4:b1:70:76:31:58:80:80:cc: 75:e7:40:84:00:fc:16:67:97:41:5e:9b:e3:50:e6: be:54:b6:11:f7:be:4c:2c:9e:e7:e8:89:9b:96:08: 12:8f:0f:f0:f0:ad:26:e3:c5:ee:71:8e:3a:61:fc: e9:79:cc:cb:e5:d5:09:f0:c6:f5:2d:71:24:f3:f6: 6b:e9:dc:7b:25:33:d1:2b:74:17:b1:8a:35:28:db: be:c8:f8:f5:58:95:f0:34:73:ca:fd:48:c0:04:f1: 68:40:8e:70:8b:4e:cc:19:b5:30:cc:2b:3f:9c:53: b0:d5:44:c6:e6:48:67:8d:95:12:d8:ed:ad:64:8f: dc:59:4d:ed:5b:50:55:8b:cd:1d:76:f2:77:2d:47: fc:e7:2b:63:33:93:77:1c:01:a4:f6:5d:3f:c2:78: 79:3e:03:a4:fa:62:d7:e8:d1:9e:f3:8c:d6:0f:6d: 50:e7:3a:3d:f6:1d:24:9c:d8:bd:5e:d5:16:22:00: ce:96:a1:8d:32:6c:bf:25:b8:06:92:fc:42:05:6b: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F8:8E:C7:7F:BB:DC:5E:94:FE:FB:06:4B:28:E9:95:6D:48:B9:5A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZPiOx3-73F6U_vsGSyjplW1IuVo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.112.0/22 Signature Algorithm: sha256WithRSAEncryption 00:4e:82:65:6e:35:c8:53:50:66:9d:19:a3:42:d6:e1:83:60: f1:ac:c6:b4:20:66:76:0f:1a:84:f2:db:10:c1:88:f7:c5:01: 52:f9:3d:49:42:a0:d5:50:29:28:d8:83:29:d8:f9:1b:20:6d: c9:33:ab:1f:d4:02:54:92:a5:15:12:aa:84:ab:f2:af:f4:69: 96:11:3a:7c:14:2c:31:c5:69:47:13:56:61:fc:9f:3b:b5:7d: 48:a8:5d:e9:43:20:83:c3:00:ee:65:c5:a8:9b:bc:1e:81:c4: c2:3c:05:69:da:6c:57:65:b2:86:96:da:d4:98:50:58:01:7c: b1:0f:da:e0:b1:e1:52:0b:65:9b:d1:c5:02:62:e6:72:05:26: 51:62:38:ff:d5:a2:ee:be:61:5c:50:40:13:ad:75:8a:77:8f: 0e:de:58:89:07:89:ac:d1:81:1a:cf:5c:cc:0d:d9:0b:f9:51: f7:f6:72:67:e1:02:ed:ba:49:16:42:4b:9f:97:80:cb:e1:85: e8:23:5e:10:03:ba:2b:08:bd:66:52:7f:f9:2a:53:16:69:51: 88:d4:9c:d1:cd:cf:6f:3b:c0:bb:0d:76:8d:28:64:7b:4f:d2: c6:01:ab:dd:ff:25:9a:1f:45:46:c4:23:d3:01:bb:c8:09:3c: 4a:b5:71:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0Rjg4RUM3N0ZCQkRD NUU5NEZFRkIwNjRCMjhFOTk1NkQ0OEI5NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI62e5lY+cLMcgNgmgYPc/7m3c/RBYMZKo6sOJlvTDruSTMHIn KuQj21rC41xMxD5mm/SxcHYxWICAzHXnQIQA/BZnl0Fem+NQ5r5UthH3vkwsnufo iZuWCBKPD/DwrSbjxe5xjjph/Ol5zMvl1QnwxvUtcSTz9mvp3HslM9ErdBexijUo 277I+PVYlfA0c8r9SMAE8WhAjnCLTswZtTDMKz+cU7DVRMbmSGeNlRLY7a1kj9xZ Te1bUFWLzR128nctR/znK2Mzk3ccAaT2XT/CeHk+A6T6Ytfo0Z7zjNYPbVDnOj32 HSSc2L1e1RYiAM6WoY0ybL8luAaS/EIFa55vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZPiOx3+73F6U/vsGSyjplW1IuVowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pQaU94My03M0Y2VV92c0dT eWpwbFcxSXVWby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w3AwDQYJKoZIhvcNAQELBQADggEBAABOgmVuNchTUGadGaNC1uGDYPGsxrQgZnYP GoTy2xDBiPfFAVL5PUlCoNVQKSjYgynY+Rsgbckzqx/UAlSSpRUSqoSr8q/0aZYR OnwULDHFaUcTVmH8nzu1fUioXelDIIPDAO5lxaibvB6BxMI8BWnabFdlsoaW2tSY UFgBfLEP2uCx4VILZZvRxQJi5nIFJlFiOP/Vou6+YVxQQBOtdYp3jw7eWIkHiazR gRrPXMwN2Qv5Uff2cmfhAu26SRZCS5+XgMvhhegjXhADuisIvWZSf/kqUxZpUYjU nNHNz287wLsNdo0oZHtP0sYBq93/JZofRUbEI9MBu8gJPEq1cRo= -----END CERTIFICATE-----Generated at Fri Apr 18 22:29:13 2025 by rpki-client