$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lbkzJ6jAkaKXEGgiIcHn1QJpNZQ.roa File: lbkzJ6jAkaKXEGgiIcHn1QJpNZQ.roa (raw, json) Hash identifier: 6OhV0D0YhaWvWfQBFw73/pJofIsz5V9FI7y8+m6icFk= Subject key identifier: 95:B9:33:27:A8:C0:91:A2:97:10:68:22:21:C1:E7:D5:02:69:35:94 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34E5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lbkzJ6jAkaKXEGgiIcHn1QJpNZQ.roa Signing time: Mon 10 Feb 2025 13:52:48 +0000 ROA not before: Mon 10 Feb 2025 13:52:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.144.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=95B93327A8C091A29710682221C1E7D502693594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:80:b6:e2:3d:1a:fe:c3:14:a7:60:d8:16: 4e:18:4d:e9:84:55:b8:e9:a4:8e:10:de:da:5c:ed: 38:84:61:15:4f:24:a9:dd:c3:04:69:b6:ed:64:e2: de:c0:84:45:74:98:9d:50:28:61:f0:98:83:6f:f9: 94:4e:70:3b:dd:f4:3d:d6:1d:bf:2d:59:1d:2e:9e: cb:c9:40:42:18:07:7a:f1:aa:f7:a2:f2:66:a6:9a: 0b:b5:68:60:67:5f:d8:bb:08:f4:07:8b:b6:a3:fd: 5a:6c:b4:db:7f:dc:63:51:ce:36:01:32:56:86:b9: cc:93:1e:8e:1b:22:cb:61:d3:4f:45:9f:19:65:61: 8c:dd:6b:29:0a:85:c9:68:02:bf:70:e8:bc:31:2e: 54:50:dd:b6:db:3e:2f:f4:ca:d4:37:fe:0d:05:49: c7:01:40:0a:86:d0:a0:a7:d6:06:84:5a:87:38:f3: f8:c9:f5:c4:79:f8:6b:8e:03:f1:8e:d7:13:12:e8: 95:d4:22:4c:5b:c7:5d:51:21:51:c0:3c:8f:d4:de: a0:bd:68:e5:a9:9c:d9:b1:14:45:37:55:f0:76:ba: 72:53:17:84:ef:92:c5:04:4f:e3:3c:a9:61:39:4f: 65:16:df:58:8c:79:d5:ce:b9:56:59:16:30:04:63: 06:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B9:33:27:A8:C0:91:A2:97:10:68:22:21:C1:E7:D5:02:69:35:94 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lbkzJ6jAkaKXEGgiIcHn1QJpNZQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.192/26 Signature Algorithm: sha256WithRSAEncryption 71:0c:1c:8f:f7:4b:13:a3:05:11:b5:14:c8:b1:c5:5c:e7:8d: d0:5e:ea:6b:01:95:a6:ad:82:40:76:b8:d2:dd:b9:7e:aa:61: 15:2e:a6:50:56:60:2a:a1:31:13:0c:07:c8:66:72:85:5d:7a: 97:96:4c:96:d9:53:8f:2c:44:31:d2:c5:48:3c:0a:8e:c3:15: a5:6a:84:cd:d3:ee:3c:44:db:4e:cc:da:e8:23:a9:a4:60:54: 65:0c:73:6f:8d:8d:1a:05:c8:fb:23:7d:3f:5b:04:19:2f:c9: b5:56:c2:66:cd:93:af:b8:a8:9b:6b:48:a5:38:fb:de:34:bc: 30:62:6a:48:56:6e:94:e0:7c:f3:74:3d:bb:38:2e:cf:49:d9: fc:74:cf:ae:bc:0a:df:5b:ce:fc:46:c8:c1:d5:fb:8b:7d:a5: db:73:e0:e9:7b:bb:46:08:cf:37:fa:6e:30:3c:3a:8c:e7:a9: 9b:b8:3a:2f:2e:6b:1d:81:fb:a6:a9:3c:b1:5b:dc:46:b8:6d: 29:e6:0e:a2:ce:24:1f:b5:e6:f2:50:68:08:96:03:be:90:d2: a7:f1:ff:dc:cb:16:a5:14:f6:6a:be:9d:35:8d:41:71:e5:9d: 3c:72:e6:6c:c2:bf:4c:99:ff:52:80:10:e3:67:5e:e8:d3:b9: 26:e3:7f:68 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk1QjkzMzI3QThDMDkx QTI5NzEwNjgyMjIxQzFFN0Q1MDI2OTM1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPu4C24j0a/sMUp2DYFk4YTemEVbjppI4Q3tpc7TiEYRVPJKnd wwRptu1k4t7AhEV0mJ1QKGHwmINv+ZROcDvd9D3WHb8tWR0unsvJQEIYB3rxqvei 8mammgu1aGBnX9i7CPQHi7aj/VpstNt/3GNRzjYBMlaGucyTHo4bIsth009Fnxll YYzdaykKhcloAr9w6LwxLlRQ3bbbPi/0ytQ3/g0FSccBQAqG0KCn1gaEWoc48/jJ 9cR5+GuOA/GO1xMS6JXUIkxbx11RIVHAPI/U3qC9aOWpnNmxFEU3VfB2unJTF4Tv ksUET+M8qWE5T2UW31iMedXOuVZZFjAEYwY9AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUlbkzJ6jAkaKXEGgiIcHn1QJpNZQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xia3pKNmpBa2FLWEVHZ2lJ Y0huMVFKcE5aUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wJDAMA0GCSqGSIb3DQEBCwUAA4IBAQBxDByP90sTowURtRTIscVc543QXuprAZWm rYJAdrjS3bl+qmEVLqZQVmAqoTETDAfIZnKFXXqXlkyW2VOPLEQx0sVIPAqOwxWl aoTN0+48RNtOzNroI6mkYFRlDHNvjY0aBcj7I30/WwQZL8m1VsJmzZOvuKiba0il OPveNLwwYmpIVm6U4HzzdD27OC7PSdn8dM+uvArfW878RsjB1fuLfaXbc+Dpe7tG CM83+m4wPDqM56mbuDovLmsdgfumqTyxW9xGuG0p5g6iziQftebyUGgIlgO+kNKn 8f/cyxalFPZqvp01jUFx5Z08cuZswr9Mmf9SgBDjZ17o07km439o -----END CERTIFICATE-----Generated at Fri Apr 18 23:19:17 2025 by rpki-client