$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bAR2FrHl2Bmn79Wm68FKlHMysCI.roa File: bAR2FrHl2Bmn79Wm68FKlHMysCI.roa (raw, json) Hash identifier: T1/f+DaadotQ+JIa52jlU/9vCG8wwn1KmkeTmGufZcA= Subject key identifier: 6C:04:76:16:B1:E5:D8:19:A7:EF:D5:A6:EB:C1:4A:94:73:32:B0:22 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3412 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bAR2FrHl2Bmn79Wm68FKlHMysCI.roa Signing time: Mon 10 Feb 2025 13:52:03 +0000 ROA not before: Mon 10 Feb 2025 13:52:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13330 (0x3412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6C047616B1E5D819A7EFD5A6EBC14A947332B022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:74:15:9b:a8:25:68:e9:cb:0d:76:72:5f: 3b:71:ac:c7:38:d0:eb:9e:81:c2:2c:48:b2:8b:8d: 5a:ff:3d:e1:51:e0:11:93:51:fe:26:a8:91:ab:b6: ba:6d:e7:a7:8c:1f:49:a2:22:23:01:33:e8:35:51: dd:5c:1e:16:69:d0:57:63:25:37:bc:d5:cb:5e:c7: f2:0b:ff:c4:4b:07:68:d6:05:c5:71:8c:25:1d:83: d5:69:c4:4f:6a:99:f1:28:61:33:fa:4a:22:e3:2d: e3:48:84:62:fb:d6:31:b1:b1:c7:d0:b9:77:e4:5c: 0b:99:29:01:92:55:8a:05:42:21:75:fb:68:a3:d6: b7:e0:57:df:56:17:25:2c:23:fd:91:31:ae:89:2b: e3:24:10:40:f2:bb:6b:1d:c2:79:f1:bc:c9:8c:33: 10:b9:4d:14:62:56:a9:34:d1:e3:04:e7:56:51:09: 20:8d:3e:d9:46:97:65:66:78:25:39:6e:11:a0:5b: de:e8:3b:5d:84:ef:6a:69:13:a5:a8:ed:f1:e9:0c: b8:84:b8:73:5e:32:1c:a2:a3:58:8c:01:33:7e:9f: 2d:45:3c:f4:91:21:d7:5c:9d:bc:c2:e7:5a:ed:1e: b7:29:50:29:09:7d:dd:51:f1:1b:f6:0d:1e:76:3f: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:04:76:16:B1:E5:D8:19:A7:EF:D5:A6:EB:C1:4A:94:73:32:B0:22 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bAR2FrHl2Bmn79Wm68FKlHMysCI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.32.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:99:34:47:68:4a:81:da:22:37:f0:23:71:ad:5b:16:ec:6b: 7b:72:0a:39:d7:de:35:c1:47:69:df:e1:ff:81:9e:85:a5:23: a9:ec:55:a4:e4:98:38:2f:9c:1f:a1:d8:85:3d:a1:fb:83:8b: 37:cc:16:9b:8c:4d:5a:f8:ae:cf:e5:4a:aa:9d:ff:e9:b9:a4: a8:46:51:01:01:b2:ff:5a:92:c0:64:90:1b:d8:2e:5d:40:98: 53:17:5d:86:d8:36:6e:a8:be:9f:5a:67:00:4c:3f:11:bf:0c: 10:c0:7a:69:e2:99:8f:f5:c2:7d:bc:08:ed:fa:38:7b:79:9a: c9:b5:4b:8b:20:6e:1c:69:d6:0d:fc:5f:e4:b9:d0:ed:82:4b: 05:53:ac:1f:c9:59:f5:3e:8b:e9:70:4c:26:10:87:d2:6f:c8: 6d:7e:3c:e5:c2:59:c1:4b:45:e0:0b:a9:7a:53:65:c0:ed:f0: ef:ea:4c:de:ad:ed:cb:e3:4f:e1:29:7a:8c:2d:b1:91:17:4a: c2:65:12:6b:40:7f:65:71:05:a0:c3:e2:dd:af:8d:cb:08:ff: c8:92:fd:13:42:d3:80:cb:79:79:08:1b:59:fa:95:9e:18:38: b1:6d:92:e1:fe:65:60:fe:0d:93:8b:6b:82:65:33:ff:cf:0a: 48:30:ac:97 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZDMDQ3NjE2QjFFNUQ4 MTlBN0VGRDVBNkVCQzE0QTk0NzMzMkIwMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiLnQVm6glaOnLDXZyXztxrMc40OuegcIsSLKLjVr/PeFR4BGT Uf4mqJGrtrpt56eMH0miIiMBM+g1Ud1cHhZp0FdjJTe81ctex/IL/8RLB2jWBcVx jCUdg9VpxE9qmfEoYTP6SiLjLeNIhGL71jGxscfQuXfkXAuZKQGSVYoFQiF1+2ij 1rfgV99WFyUsI/2RMa6JK+MkEEDyu2sdwnnxvMmMMxC5TRRiVqk00eME51ZRCSCN PtlGl2VmeCU5bhGgW97oO12E72ppE6Wo7fHpDLiEuHNeMhyio1iMATN+ny1FPPSR IddcnbzC51rtHrcpUCkJfd1R8Rv2DR52P7KJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbAR2FrHl2Bmn79Wm68FKlHMysCIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JBUjJGckhsMkJtbjc5V202 OEZLbEhNeXNDSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wyAwDQYJKoZIhvcNAQELBQADggEBAE2ZNEdoSoHaIjfwI3GtWxbsa3tyCjnX3jXB R2nf4f+BnoWlI6nsVaTkmDgvnB+h2IU9ofuDizfMFpuMTVr4rs/lSqqd/+m5pKhG UQEBsv9aksBkkBvYLl1AmFMXXYbYNm6ovp9aZwBMPxG/DBDAemnimY/1wn28CO36 OHt5msm1S4sgbhxp1g38X+S50O2CSwVTrB/JWfU+i+lwTCYQh9JvyG1+POXCWcFL ReALqXpTZcDt8O/qTN6t7cvjT+EpeowtsZEXSsJlEmtAf2VxBaDD4t2vjcsI/8iS /RNC04DLeXkIG1n6lZ4YOLFtkuH+ZWD+DZOLa4JlM//PCkgwrJc= -----END CERTIFICATE-----Generated at Fri Apr 18 22:21:23 2025 by rpki-client