$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Kbwjyr6a2gBR2Rx6TE_4R1CEmQ.roa File: _Kbwjyr6a2gBR2Rx6TE_4R1CEmQ.roa (raw, json) Hash identifier: vh4BsQ2ujdGG3WLHs8AkcbjLqNainpZmzFA8LZiPVZQ= Subject key identifier: FC:A6:F0:8F:2A:FA:6B:68:01:47:64:71:E9:31:3F:E1:1D:42:12:64 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33DB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Kbwjyr6a2gBR2Rx6TE_4R1CEmQ.roa Signing time: Mon 10 Feb 2025 13:51:50 +0000 ROA not before: Mon 10 Feb 2025 13:51:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13275 (0x33db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FCA6F08F2AFA6B6801476471E9313FE11D421264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:34:35:92:c8:37:2f:4e:6d:38:b3:44:82:3a: b6:df:dc:44:2e:99:cb:04:cc:d5:69:29:25:a0:f1: 38:7e:0d:8b:ed:6e:89:08:0a:75:24:02:5f:ab:c3: 9f:d8:a2:8e:01:4d:d0:21:c5:a1:9e:ea:11:a9:8b: 8a:f3:b9:46:55:9c:8d:09:99:32:a2:9a:ed:3b:1b: 91:a4:47:18:5f:1a:a1:77:b8:e1:f3:57:22:3c:42: 70:4c:98:4b:e5:85:f8:c3:8d:84:fa:18:bf:08:22: 37:74:86:fa:18:cc:b2:2e:a2:5d:f3:f1:98:2a:25: e3:7c:5f:dd:88:bd:52:9a:f6:91:04:da:20:9e:97: 82:f9:c2:c8:64:a3:7b:a1:7c:f3:a6:5a:b6:65:00: 0f:98:61:94:6d:ab:d6:54:c4:81:6c:47:99:39:6f: de:e2:33:2a:ca:97:b8:83:8f:40:24:4d:61:dc:fc: ab:de:60:10:4e:39:f8:73:d1:3d:b5:77:17:92:27: c0:02:81:f9:5a:30:81:fa:87:26:66:f9:e5:d3:dc: 51:95:d8:73:b1:f0:6d:1d:26:e3:14:73:91:67:31: 9c:45:04:bc:b5:80:65:de:16:b6:81:d2:23:99:90: 20:2c:fa:4f:7c:bd:c0:87:18:68:fa:4c:e6:d5:97: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:F0:8F:2A:FA:6B:68:01:47:64:71:E9:31:3F:E1:1D:42:12:64 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Kbwjyr6a2gBR2Rx6TE_4R1CEmQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.104.0/22 Signature Algorithm: sha256WithRSAEncryption 10:fc:b4:e5:c1:8d:2a:1e:f0:98:56:48:3f:61:57:99:22:5b: 49:6b:f5:d6:e1:35:71:f5:56:fb:70:df:6d:ab:f2:5a:2b:2d: c6:6b:24:30:96:01:54:bb:90:58:77:15:1d:65:6b:38:da:82: 4f:da:76:ec:40:c2:05:8a:10:61:75:1c:b4:7c:72:1a:3b:8e: d6:a7:ed:73:d3:8a:9a:2d:cf:4f:5d:89:0d:ee:49:45:28:7d: ce:0a:7c:a2:45:49:92:13:ad:66:5b:b9:2a:b8:e9:85:03:0b: a0:67:6f:e7:48:c9:10:96:22:ba:5c:ea:88:df:19:cf:eb:22: 3d:22:63:1b:f9:7d:ff:a9:d3:9a:de:91:f3:0d:b1:e5:c3:b3: 16:2c:23:07:0f:73:ed:0a:70:52:28:68:99:0a:6b:41:9d:8c: c5:a9:3f:fd:e6:56:e8:27:04:92:b2:b0:59:d4:8e:80:73:6d: 2c:52:fb:0c:db:80:ac:7b:34:15:9b:a6:a7:18:ff:25:db:51: 34:25:72:4e:6a:53:31:33:9f:bc:82:a7:52:92:c0:37:5d:c5: 6f:97:d3:59:11:3c:0a:48:42:be:de:0b:cc:c6:fe:31:51:cc: cd:89:96:15:f1:44:45:10:76:4a:f5:cb:7e:6d:83:4a:5b:d3: 85:69:ad:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM9swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDQTZGMDhGMkFGQTZC NjgwMTQ3NjQ3MUU5MzEzRkUxMUQ0MjEyNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkNDWSyDcvTm04s0SCOrbf3EQumcsEzNVpKSWg8Th+DYvtbokI CnUkAl+rw5/Yoo4BTdAhxaGe6hGpi4rzuUZVnI0JmTKimu07G5GkRxhfGqF3uOHz VyI8QnBMmEvlhfjDjYT6GL8IIjd0hvoYzLIuol3z8ZgqJeN8X92IvVKa9pEE2iCe l4L5wshko3uhfPOmWrZlAA+YYZRtq9ZUxIFsR5k5b97iMyrKl7iDj0AkTWHc/Kve YBBOOfhz0T21dxeSJ8ACgflaMIH6hyZm+eXT3FGV2HOx8G0dJuMUc5FnMZxFBLy1 gGXeFraB0iOZkCAs+k98vcCHGGj6TObVl663AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/Kbwjyr6a2gBR2Rx6TE/4R1CEmQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19LYndqeXI2YTJnQlIyUng2 VEVfNFIxQ0VtUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w2gwDQYJKoZIhvcNAQELBQADggEBABD8tOXBjSoe8JhWSD9hV5kiW0lr9dbhNXH1 Vvtw322r8lorLcZrJDCWAVS7kFh3FR1lazjagk/aduxAwgWKEGF1HLR8cho7jtan 7XPTipotz09diQ3uSUUofc4KfKJFSZITrWZbuSq46YUDC6Bnb+dIyRCWIrpc6ojf Gc/rIj0iYxv5ff+p05rekfMNseXDsxYsIwcPc+0KcFIoaJkKa0GdjMWpP/3mVugn BJKysFnUjoBzbSxS+wzbgKx7NBWbpqcY/yXbUTQlck5qUzEzn7yCp1KSwDddxW+X 01kRPApIQr7eC8zG/jFRzM2JlhXxREUQdkr1y35tg0pb04VprZU= -----END CERTIFICATE-----Generated at Wed Apr 23 04:43:46 2025 by rpki-client