$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bkTALRjF9hkYxGFz9D9b7Ky_o1g.roa File: bkTALRjF9hkYxGFz9D9b7Ky_o1g.roa (raw, json) Hash identifier: TEizu0FrMr5p6KvfxLnamItM+ahyH5R+j/GwETaF/II= Subject key identifier: 6E:44:C0:2D:18:C5:F6:19:18:C4:61:73:F4:3F:5B:EC:AC:BF:A3:58 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36DA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bkTALRjF9hkYxGFz9D9b7Ky_o1g.roa Signing time: Mon 10 Feb 2025 13:54:45 +0000 ROA not before: Mon 10 Feb 2025 13:54:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14042 (0x36da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6E44C02D18C5F61918C46173F43F5BECACBFA358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:3e:10:1c:21:fd:8f:aa:b5:fb:ec:86:f8: ab:90:3b:a8:70:d9:61:b4:ad:df:98:b5:07:8a:0c: 61:ec:bf:12:a5:f8:95:4e:89:d0:de:60:19:5b:0a: 8f:8d:c6:4b:b6:df:d3:16:e5:57:a3:20:99:4e:32: 1c:ae:78:af:26:57:8e:3d:a4:c4:19:b8:9e:f9:28: 33:7a:61:4e:7b:4b:dc:9e:cc:cf:b7:7b:1c:04:90: 92:7f:47:c2:f5:76:b2:e9:5a:77:2c:d6:6c:85:98: b7:e4:23:d5:f5:56:0d:1a:8f:dd:b9:63:9b:be:ad: 0b:b1:32:d5:c4:07:11:2a:e6:2a:8e:f2:e3:02:6e: 83:3d:2b:e8:92:49:ba:bf:69:1f:41:15:5e:03:fd: ec:fb:45:88:61:bd:9d:c0:60:25:f0:be:e5:0d:b0: 6a:2e:15:7d:33:3b:72:f0:f2:e7:08:1a:33:04:75: 9b:0e:9c:2c:b4:6a:f6:c8:86:5b:a6:15:0a:10:77: 74:57:c8:e2:8f:96:dd:2d:3e:aa:b4:57:8d:51:bf: e4:e0:1b:f8:ab:ea:7f:ad:22:0d:c7:0f:69:69:12: 78:de:c6:e4:f7:d6:a7:25:21:7e:60:17:8d:e0:f9: 8b:04:6f:51:c4:97:0d:4a:96:cd:fd:31:a5:bd:19: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:44:C0:2D:18:C5:F6:19:18:C4:61:73:F4:3F:5B:EC:AC:BF:A3:58 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bkTALRjF9hkYxGFz9D9b7Ky_o1g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.192.0/18 Signature Algorithm: sha256WithRSAEncryption 0d:6b:e0:8d:7b:6a:74:1a:3b:2f:eb:b1:db:91:cc:fe:67:f2: 78:6e:3a:4a:72:44:e6:aa:a7:e3:47:81:3e:45:7e:ae:33:ef: 3e:f3:19:70:23:f1:e2:a8:22:6b:b7:e4:f6:d4:fb:57:29:16: cc:ef:d1:b9:2c:af:84:74:99:0f:3d:60:71:e3:4e:61:9b:2f: a5:96:ab:ba:f3:cf:35:8f:76:46:97:ef:77:04:9e:65:25:ef: 79:6c:b6:9a:10:16:cf:16:c4:58:7d:57:d1:3b:82:85:f7:8d: 4f:a7:1d:d3:49:90:b7:06:42:6a:97:50:70:f9:06:ff:c6:b5: a5:26:22:d8:40:23:fa:cb:93:2d:86:77:c6:d6:56:54:70:bf: 94:7c:4e:10:bf:4c:44:2e:d6:db:f3:f4:10:99:52:f3:60:83: 25:45:a9:0c:ab:d5:e7:94:2e:84:b2:89:31:9a:1c:20:8f:fc: ef:46:a0:29:76:a1:87:a1:50:00:53:2c:3d:28:30:b4:00:3a: 39:ea:8b:37:9d:74:4d:50:38:11:ae:50:ee:fc:c7:56:0d:3a: c0:9f:38:db:63:8f:7e:79:1a:7f:87:05:b6:1f:5a:93:1e:5d: fa:2c:2e:ff:01:73:68:92:14:4e:ee:5c:24:ab:a9:9b:65:d8: 16:63:34:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZFNDRDMDJEMThDNUY2 MTkxOEM0NjE3M0Y0M0Y1QkVDQUNCRkEzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJdj4QHCH9j6q1++yG+KuQO6hw2WG0rd+YtQeKDGHsvxKl+JVO idDeYBlbCo+Nxku239MW5VejIJlOMhyueK8mV449pMQZuJ75KDN6YU57S9yezM+3 exwEkJJ/R8L1drLpWncs1myFmLfkI9X1Vg0aj925Y5u+rQuxMtXEBxEq5iqO8uMC boM9K+iSSbq/aR9BFV4D/ez7RYhhvZ3AYCXwvuUNsGouFX0zO3Lw8ucIGjMEdZsO nCy0avbIhlumFQoQd3RXyOKPlt0tPqq0V41Rv+TgG/ir6n+tIg3HD2lpEnjexuT3 1qclIX5gF43g+YsEb1HElw1Kls39MaW9GRoBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbkTALRjF9hkYxGFz9D9b7Ky/o1gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JrVEFMUmpGOWhrWXhHRno5 RDliN0t5X28xZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7 wcAwDQYJKoZIhvcNAQELBQADggEBAA1r4I17anQaOy/rsduRzP5n8nhuOkpyROaq p+NHgT5Ffq4z7z7zGXAj8eKoImu35PbU+1cpFszv0bksr4R0mQ89YHHjTmGbL6WW q7rzzzWPdkaX73cEnmUl73lstpoQFs8WxFh9V9E7goX3jU+nHdNJkLcGQmqXUHD5 Bv/GtaUmIthAI/rLky2Gd8bWVlRwv5R8ThC/TEQu1tvz9BCZUvNggyVFqQyr1eeU LoSyiTGaHCCP/O9GoCl2oYehUABTLD0oMLQAOjnqizeddE1QOBGuUO78x1YNOsCf ONtjj355Gn+HBbYfWpMeXfosLv8Bc2iSFE7uXCSrqZtl2BZjNDA= -----END CERTIFICATE-----Generated at Fri Apr 18 22:34:16 2025 by rpki-client