$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l1ln6adBkLx67af_m_CkChLfqp0.roa File: l1ln6adBkLx67af_m_CkChLfqp0.roa (raw, json) Hash identifier: Rc0Y9F2LvAA0v8/pvbnfbONOEbpDxVqqlNzJ8KTJoUs= Subject key identifier: 97:59:67:E9:A7:41:90:BC:7A:ED:A7:FF:9B:F0:A4:0A:12:DF:AA:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35DE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l1ln6adBkLx67af_m_CkChLfqp0.roa Signing time: Mon 10 Feb 2025 13:53:45 +0000 ROA not before: Mon 10 Feb 2025 13:53:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13790 (0x35de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=975967E9A74190BC7AEDA7FF9BF0A40A12DFAA9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:1a:32:73:60:05:d6:1c:8f:94:31:0f:07: d8:8b:2b:41:95:b5:fb:a7:06:21:e6:69:c5:0f:6d: 16:7f:b1:a7:d0:9d:03:9b:1b:69:a4:e6:24:37:d2: 2a:f0:c7:60:1a:36:0c:f7:4a:9b:67:97:1c:14:3e: 7f:9e:6e:af:2b:6a:84:17:f5:67:e7:43:37:a1:f6: 10:bc:a4:f6:be:16:19:2d:a7:13:a1:cc:7f:27:d1: d6:95:07:df:4f:b6:f0:2e:0d:fa:dd:84:e4:1c:bb: 2d:04:a2:75:4e:b2:ec:bc:d0:5e:bb:c7:a7:a0:54: 42:f1:05:7d:03:cc:a1:e0:1c:c5:a8:84:9a:22:76: a1:8f:56:64:38:1d:bf:c3:c1:b4:9b:06:0c:84:8b: e1:54:53:49:ae:fb:33:a3:2f:a5:e3:84:80:bc:99: 44:02:58:6d:64:35:8f:47:0c:e7:df:fc:f4:ff:7d: 5b:cb:fb:bf:11:a5:51:89:89:f3:a5:7e:65:7b:59: aa:bb:26:7e:df:05:98:26:59:ef:ae:88:99:1a:83: 64:81:80:04:f8:a0:70:94:e6:19:8f:41:ec:86:28: c3:dd:80:c5:43:55:af:1b:f9:6c:52:ab:9c:0a:7b: 6a:35:c6:d9:a1:ee:73:6c:18:e6:43:9f:50:bf:58: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:59:67:E9:A7:41:90:BC:7A:ED:A7:FF:9B:F0:A4:0A:12:DF:AA:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l1ln6adBkLx67af_m_CkChLfqp0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.104.0/21 Signature Algorithm: sha256WithRSAEncryption bb:11:68:e6:97:b1:37:85:56:c8:1b:d2:0a:ff:6c:66:5a:c8: 30:3a:a0:0c:28:9c:94:a8:e5:1a:07:bf:5f:09:d5:e8:da:d2: ae:4e:ae:63:ee:b9:8c:e3:fa:0f:26:32:6b:19:20:e6:d4:a9: ec:7f:fd:de:ee:06:56:6d:ca:3a:c1:4e:5e:89:0f:60:cd:fe: 4f:4e:1e:cb:02:82:83:1e:e7:de:65:51:d4:17:00:69:2c:66: b6:6e:c9:76:d3:ee:77:6c:0e:89:b8:bb:d6:f3:2b:01:ee:d2: 9b:83:b5:b5:ea:33:44:95:1d:ab:20:7b:6b:21:0d:dd:8e:1f: 5a:53:93:80:fb:eb:25:60:41:19:4d:23:d4:39:ca:38:3c:a7: 73:b8:8d:e0:cd:a1:c5:ed:44:31:fe:97:bd:ec:15:6a:20:b3: c4:ef:0b:50:9a:ac:ab:67:9e:98:6b:30:57:06:92:d4:37:1a: 50:76:ea:46:92:32:d8:d0:1d:c0:60:fe:09:71:69:8d:ed:96: 29:ea:23:db:58:37:3a:a0:2d:4b:c7:1e:ff:2e:9a:7f:b5:d6: a2:4f:c0:bb:aa:0a:99:1c:8c:98:86:f5:10:da:0d:24:8d:db: ea:bc:5c:0f:38:43:50:64:25:27:0b:dc:34:cb:5e:2b:26:b9: 6e:6d:3e:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3NTk2N0U5QTc0MTkw QkM3QUVEQTdGRjlCRjBBNDBBMTJERkFBOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA4hoyc2AF1hyPlDEPB9iLK0GVtfunBiHmacUPbRZ/safQnQOb G2mk5iQ30irwx2AaNgz3SptnlxwUPn+ebq8raoQX9WfnQzeh9hC8pPa+FhktpxOh zH8n0daVB99PtvAuDfrdhOQcuy0EonVOsuy80F67x6egVELxBX0DzKHgHMWohJoi dqGPVmQ4Hb/DwbSbBgyEi+FUU0mu+zOjL6XjhIC8mUQCWG1kNY9HDOff/PT/fVvL +78RpVGJifOlfmV7Waq7Jn7fBZgmWe+uiJkag2SBgAT4oHCU5hmPQeyGKMPdgMVD Va8b+WxSq5wKe2o1xtmh7nNsGOZDn1C/WKfbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUl1ln6adBkLx67af/m/CkChLfqp0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2wxbG42YWRCa0x4NjdhZl9t X0NrQ2hMZnFwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w2gwDQYJKoZIhvcNAQELBQADggEBALsRaOaXsTeFVsgb0gr/bGZayDA6oAwonJSo 5RoHv18J1eja0q5OrmPuuYzj+g8mMmsZIObUqex//d7uBlZtyjrBTl6JD2DN/k9O HssCgoMe595lUdQXAGksZrZuyXbT7ndsDom4u9bzKwHu0puDtbXqM0SVHasge2sh Dd2OH1pTk4D76yVgQRlNI9Q5yjg8p3O4jeDNocXtRDH+l73sFWogs8TvC1CarKtn nphrMFcGktQ3GlB26kaSMtjQHcBg/glxaY3tlinqI9tYNzqgLUvHHv8umn+11qJP wLuqCpkcjJiG9RDaDSSN2+q8XA84Q1BkJScL3DTLXismuW5tPlk= -----END CERTIFICATE-----Generated at Fri Apr 18 22:41:04 2025 by rpki-client