$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_yjC4PrYHSI0IyESy3kcbPTRYQU.roa File: _yjC4PrYHSI0IyESy3kcbPTRYQU.roa (raw, json) Hash identifier: ZFpeN+8jY6GEC5Ua22zbgalwL0TLbnSv7Mi4pjkxSGE= Subject key identifier: FF:28:C2:E0:FA:D8:1D:22:34:23:21:12:CB:79:1C:6C:F4:D1:61:05 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34E7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_yjC4PrYHSI0IyESy3kcbPTRYQU.roa Signing time: Mon 10 Feb 2025 13:52:48 +0000 ROA not before: Mon 10 Feb 2025 13:52:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 21:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FF28C2E0FAD81D2234232112CB791C6CF4D16105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:27:aa:4c:c2:41:ea:92:15:87:40:e7:3d: 2f:b5:15:3f:63:3b:db:0c:50:d1:46:5c:a0:01:6a: 87:a0:15:6a:16:74:7e:7a:ce:c7:79:d6:2b:8b:06: 1f:eb:7e:39:07:65:92:78:ce:d7:d9:3f:69:99:cf: 3e:0e:de:57:a5:32:8e:05:02:a4:c0:4e:82:83:35: e1:0d:a9:aa:89:03:f7:a2:28:70:41:24:12:eb:a8: 69:ab:99:d2:2d:83:8c:fc:7b:af:ac:7d:6e:40:0f: 0f:12:a0:ab:1f:c3:69:2a:4b:ed:36:6e:3f:ea:42: 8a:e5:04:c2:4d:2f:c8:31:4b:2d:29:96:9f:35:76: e4:e4:e2:91:52:77:b6:91:ab:4c:6b:a7:fe:e0:12: 02:d9:31:88:50:79:8e:47:c5:49:0a:f3:e8:c0:c6: 02:14:8f:2a:2d:4b:8a:3a:3c:d5:42:86:27:39:cc: b1:ee:2f:6c:23:7c:bb:a5:cc:8f:05:5f:84:7c:4a: 7f:a0:f5:85:b1:1a:3f:20:ee:9c:45:ee:cf:0b:de: d5:8f:1e:c9:31:ba:2c:49:19:5d:d5:4a:a6:6d:cf: e2:17:31:3d:e3:d7:ff:02:10:46:98:78:50:25:0d: 68:ae:2e:23:26:c5:67:86:55:c4:f3:fd:d2:af:68: 70:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:28:C2:E0:FA:D8:1D:22:34:23:21:12:CB:79:1C:6C:F4:D1:61:05 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_yjC4PrYHSI0IyESy3kcbPTRYQU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.128.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:4f:fe:98:1b:e8:92:42:50:9e:0e:76:bd:4e:b4:a3:14:77: 2d:d2:89:9d:91:c8:2c:b6:21:77:4b:36:29:b2:a4:82:bf:c8: 20:a3:14:54:99:51:7d:64:54:97:54:df:39:c4:1e:e7:55:4b: 31:56:d4:6d:a7:c0:72:9f:2c:80:60:dd:c4:89:03:0f:3f:89: 8e:bd:5b:9e:2e:1b:a1:32:e0:69:46:97:be:e0:93:6d:74:c3: 7f:58:00:b7:8d:61:ec:19:46:c9:85:73:c6:35:e9:6e:24:5c: 3e:52:f8:07:ee:9c:2c:5d:8e:10:44:1b:ee:2b:93:f7:d1:c9: 39:9d:07:50:a9:8e:90:0e:27:c8:c8:b9:88:d9:21:48:53:9f: 99:ec:15:fa:dd:1e:0d:2f:0d:f6:08:e9:07:55:5b:55:8d:b9: 47:1c:ed:08:0d:72:97:b6:bf:c0:87:70:c0:6d:5d:ce:6a:d9: 80:5d:5f:cc:c2:00:67:a9:52:10:47:59:70:4e:69:a2:8f:ad: 9a:9e:79:06:17:be:63:91:86:a4:5d:9a:e5:06:1a:e2:bb:b1: f7:67:d4:e8:5d:2c:6a:f4:a9:fa:f0:af:3c:b7:8c:47:c2:66: 74:43:2a:53:10:c6:f8:40:1d:59:19:85:1e:7f:ce:b9:b5:06: 9a:34:25:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGMjhDMkUwRkFEODFE MjIzNDIzMjExMkNCNzkxQzZDRjREMTYxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7LieqTMJB6pIVh0DnPS+1FT9jO9sMUNFGXKABaoegFWoWdH56 zsd51iuLBh/rfjkHZZJ4ztfZP2mZzz4O3lelMo4FAqTAToKDNeENqaqJA/eiKHBB JBLrqGmrmdItg4z8e6+sfW5ADw8SoKsfw2kqS+02bj/qQorlBMJNL8gxSy0plp81 duTk4pFSd7aRq0xrp/7gEgLZMYhQeY5HxUkK8+jAxgIUjyotS4o6PNVChic5zLHu L2wjfLulzI8FX4R8Sn+g9YWxGj8g7pxF7s8L3tWPHskxuixJGV3VSqZtz+IXMT3j 1/8CEEaYeFAlDWiuLiMmxWeGVcTz/dKvaHDzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/yjC4PrYHSI0IyESy3kcbPTRYQUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL195akM0UHJZSFNJMEl5RVN5 M2tjYlBUUllRVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w4AwDQYJKoZIhvcNAQELBQADggEBABpP/pgb6JJCUJ4Odr1OtKMUdy3SiZ2RyCy2 IXdLNimypIK/yCCjFFSZUX1kVJdU3znEHudVSzFW1G2nwHKfLIBg3cSJAw8/iY69 W54uG6Ey4GlGl77gk210w39YALeNYewZRsmFc8Y16W4kXD5S+AfunCxdjhBEG+4r k/fRyTmdB1CpjpAOJ8jIuYjZIUhTn5nsFfrdHg0vDfYI6QdVW1WNuUcc7QgNcpe2 v8CHcMBtXc5q2YBdX8zCAGepUhBHWXBOaaKPrZqeeQYXvmORhqRdmuUGGuK7sfdn 1OhdLGr0qfrwrzy3jEfCZnRDKlMQxvhAHVkZhR5/zrm1Bpo0JfA= -----END CERTIFICATE-----Generated at Tue Apr 22 20:29:17 2025 by rpki-client