$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zqm-FAwR_w26v1ezs8foWtpJFwA.roa File: Zqm-FAwR_w26v1ezs8foWtpJFwA.roa (raw, json) Hash identifier: /cqWTpU+VDriAy5sZUtDujjikiTVlFfMo0nVI9r4ctE= Subject key identifier: 66:A9:BE:14:0C:11:FF:0D:BA:BF:57:B3:B3:C7:E8:5A:DA:49:17:00 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36B3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zqm-FAwR_w26v1ezs8foWtpJFwA.roa Signing time: Mon 10 Feb 2025 13:54:35 +0000 ROA not before: Mon 10 Feb 2025 13:54:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.194.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14003 (0x36b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=66A9BE140C11FF0DBABF57B3B3C7E85ADA491700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:0a:2e:00:6e:c2:4a:65:e9:7c:ef:67:9e: b6:14:d8:9c:cf:9f:49:30:6f:4a:c6:ab:de:b5:ff: 8a:ee:55:7b:c9:fb:3a:1c:3a:48:90:0f:6e:e8:ad: 05:99:4b:62:26:ae:3f:d7:77:33:35:b9:23:60:fb: f3:bf:b5:9e:82:4c:6b:a9:cb:9a:5c:d7:29:db:a1: fa:83:5d:4d:b5:05:05:e6:58:af:24:95:05:ff:cd: c7:32:44:3e:37:6a:57:89:de:f8:75:f9:aa:9f:6b: 0e:62:89:04:84:5e:ae:85:d4:1f:d2:07:8e:27:87: 6d:76:d7:02:60:fe:34:e6:9f:98:1f:2f:40:d7:66: ae:a5:c3:c6:c4:b7:3b:b5:97:e2:7c:fe:18:29:6c: 2d:5f:91:90:9a:f1:36:fa:43:74:86:ff:b5:b4:1c: d7:ec:76:05:e4:25:00:1c:d6:3d:97:35:83:84:fb: 4a:a4:6e:3a:f9:22:0d:50:40:04:01:40:b8:86:48: 94:86:81:0b:a0:f9:97:14:cf:57:16:9b:fb:68:8d: 7a:fc:ca:4e:20:75:48:3a:16:f5:44:cb:0c:64:82: 89:bd:b2:00:6c:db:d6:e6:1d:51:bf:4a:03:30:df: 83:78:8c:a1:f0:04:d8:64:b7:dd:0f:e8:9b:8c:7d: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A9:BE:14:0C:11:FF:0D:BA:BF:57:B3:B3:C7:E8:5A:DA:49:17:00 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zqm-FAwR_w26v1ezs8foWtpJFwA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.232.0/22 Signature Algorithm: sha256WithRSAEncryption 95:06:f8:02:08:2c:59:40:79:04:61:fe:9f:4d:44:49:c3:3e: 3a:32:cc:62:9a:65:e6:bf:10:08:9d:32:a4:07:a9:0c:91:8b: 5b:93:bb:89:fc:17:5b:e6:92:87:25:38:fb:bb:2f:28:cb:d5: 0f:c8:f2:71:fc:07:91:30:21:0a:be:02:e6:69:3e:f5:a4:02: 64:64:fc:89:da:29:88:85:88:48:6a:cf:a3:e5:8c:fb:cb:07: 75:a3:2c:cd:ce:be:ab:d0:18:50:2a:db:6a:13:46:b4:3f:d9: cc:52:6f:38:71:0e:3f:fb:5f:13:52:27:3a:b6:f2:b6:c1:f0: c5:b9:7c:60:11:4f:53:47:e2:e8:ed:c3:2d:01:29:61:a7:03: 02:44:66:92:9b:db:65:8a:f1:68:ff:01:3c:55:89:ce:35:80: 83:bc:44:8d:62:18:09:28:78:49:c0:ad:75:83:af:3b:e9:24: 73:53:29:e8:cc:31:24:6c:14:aa:f9:a8:24:a8:e9:88:f8:c1: 3e:cf:7e:bf:6a:b8:a5:89:20:12:62:d4:32:95:f5:d3:d6:e1: dc:5f:a4:81:b0:3d:ed:3b:d1:7c:ee:b1:56:7f:60:0b:93:4e: 07:b7:0c:4f:2e:60:04:fb:d5:2b:f2:55:aa:66:4c:a8:8e:6e: 92:cb:c4:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNrMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2QTlCRTE0MEMxMUZG MERCQUJGNTdCM0IzQzdFODVBREE0OTE3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkewouAG7CSmXpfO9nnrYU2JzPn0kwb0rGq961/4ruVXvJ+zoc OkiQD27orQWZS2Imrj/XdzM1uSNg+/O/tZ6CTGupy5pc1ynbofqDXU21BQXmWK8k lQX/zccyRD43aleJ3vh1+aqfaw5iiQSEXq6F1B/SB44nh2121wJg/jTmn5gfL0DX Zq6lw8bEtzu1l+J8/hgpbC1fkZCa8Tb6Q3SG/7W0HNfsdgXkJQAc1j2XNYOE+0qk bjr5Ig1QQAQBQLiGSJSGgQug+ZcUz1cWm/tojXr8yk4gdUg6FvVEywxkgom9sgBs 29bmHVG/SgMw34N4jKHwBNhkt90P6JuMfakxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZqm+FAwR/w26v1ezs8foWtpJFwAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pxbS1GQXdSX3cyNnYxZXpz OGZvV3RwSkZ3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wugwDQYJKoZIhvcNAQELBQADggEBAJUG+AIILFlAeQRh/p9NREnDPjoyzGKaZea/ EAidMqQHqQyRi1uTu4n8F1vmkoclOPu7LyjL1Q/I8nH8B5EwIQq+AuZpPvWkAmRk /InaKYiFiEhqz6PljPvLB3WjLM3OvqvQGFAq22oTRrQ/2cxSbzhxDj/7XxNSJzq2 8rbB8MW5fGART1NH4ujtwy0BKWGnAwJEZpKb22WK8Wj/ATxVic41gIO8RI1iGAko eEnArXWDrzvpJHNTKejMMSRsFKr5qCSo6Yj4wT7Pfr9quKWJIBJi1DKV9dPW4dxf pIGwPe070XzusVZ/YAuTTge3DE8uYAT71SvyVapmTKiObpLLxFA= -----END CERTIFICATE-----Generated at Fri Apr 18 22:37:12 2025 by rpki-client