$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lk6yKcEjmtAEjdl4CamOrtRa-s0.roa File: lk6yKcEjmtAEjdl4CamOrtRa-s0.roa (raw, json) Hash identifier: MGK5/IU31MiAl/id5Yx+N86XadKSRpZWXVfhFX+zlfw= Subject key identifier: 96:4E:B2:29:C1:23:9A:D0:04:8D:D9:78:09:A9:8E:AE:D4:5A:FA:CD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35DC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lk6yKcEjmtAEjdl4CamOrtRa-s0.roa Signing time: Mon 10 Feb 2025 13:53:45 +0000 ROA not before: Mon 10 Feb 2025 13:53:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13788 (0x35dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=964EB229C1239AD0048DD97809A98EAED45AFACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:f8:95:da:06:9e:fd:56:6a:13:f0:c6:0d: 1c:21:d0:3b:e0:d4:eb:7e:c9:d0:ee:a0:29:61:03: c5:fb:a5:a7:9d:ce:32:2a:fa:15:2a:2f:76:de:c4: 67:56:f5:dc:2c:c4:a2:54:5b:fd:08:20:15:8c:c4: 4a:17:80:9d:6e:19:7b:ce:c1:53:7c:42:7c:7e:b3: ce:5e:c8:4f:38:66:4e:86:7b:10:93:92:ac:a9:6c: fb:ac:4b:c7:70:cf:fa:82:8f:c6:dd:9a:4c:b3:73: 71:aa:ec:b8:cd:24:13:e7:23:16:52:09:7d:ed:e0: 1c:30:dc:f4:0a:ed:bf:03:5e:fb:ec:21:07:be:23: 8c:45:5c:a6:a8:28:6d:16:de:7e:7c:ae:ac:8b:5f: f7:19:d9:f8:76:13:3c:b5:71:a8:98:e4:f6:17:aa: f7:8a:e4:0a:30:db:fc:99:18:fa:2f:bd:85:ec:79: 28:1f:97:fe:92:07:64:29:75:69:0b:a4:16:97:e8: 09:09:7e:3b:01:0b:b1:36:b0:9f:e2:9a:c2:c6:cb: 43:50:43:5c:4f:f4:26:06:3a:de:2f:18:cb:e9:17: af:b0:5a:88:95:e2:45:e3:54:9a:29:d4:7a:2e:e6: 6a:a2:24:73:1c:83:f6:f1:73:ac:d4:49:cb:32:57: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4E:B2:29:C1:23:9A:D0:04:8D:D9:78:09:A9:8E:AE:D4:5A:FA:CD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lk6yKcEjmtAEjdl4CamOrtRa-s0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.112.0/20 Signature Algorithm: sha256WithRSAEncryption 8c:f6:49:ce:1c:11:4b:e0:5a:bc:d6:da:2c:b6:1c:a1:8f:d7: 33:d9:16:b2:ef:85:e9:db:48:6f:73:c9:fc:8e:fe:04:b2:fa: fb:36:16:58:c3:2a:db:02:f7:d3:81:df:f2:5f:1d:a0:b3:86: fa:e2:3c:44:92:32:7d:45:f0:05:a8:ff:d9:b1:90:1d:79:8a: a1:28:ac:96:ae:87:be:87:e0:c0:0a:b6:99:26:ca:ad:fc:9a: be:c1:5b:cc:f2:f1:0e:09:87:43:fd:4e:3e:7b:12:a4:15:6b: 02:0b:8a:fe:f4:d4:f4:85:79:b2:39:5b:6b:12:94:81:ba:1a: 31:b4:5f:18:54:a2:02:cd:0d:d6:ac:7d:a0:fc:5f:8f:ea:cb: df:d9:86:5b:39:71:ea:01:ef:f3:f9:3f:7c:fa:bf:b7:7d:1f: 55:d2:dc:42:4b:c1:9c:1e:42:b5:cf:62:e1:7d:60:81:ac:ce: c2:cd:d5:10:39:17:e2:66:e1:90:5a:f7:ca:e9:32:54:fb:75: c9:60:b7:c4:7b:05:2e:6f:b9:91:fb:12:3a:87:a4:75:cd:06: cd:d5:10:93:f6:86:5c:80:4b:89:89:92:15:65:3f:ff:e7:c6: 6b:fc:5e:8d:15:a3:ca:3a:0f:c0:00:59:8f:c6:49:2c:ba:f4: 5f:a6:bd:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk2NEVCMjI5QzEyMzlB RDAwNDhERDk3ODA5QTk4RUFFRDQ1QUZBQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI8PiV2gae/VZqE/DGDRwh0Dvg1Ot+ydDuoClhA8X7paedzjIq +hUqL3bexGdW9dwsxKJUW/0IIBWMxEoXgJ1uGXvOwVN8Qnx+s85eyE84Zk6GexCT kqypbPusS8dwz/qCj8bdmkyzc3Gq7LjNJBPnIxZSCX3t4Bww3PQK7b8DXvvsIQe+ I4xFXKaoKG0W3n58rqyLX/cZ2fh2Ezy1caiY5PYXqveK5Aow2/yZGPovvYXseSgf l/6SB2QpdWkLpBaX6AkJfjsBC7E2sJ/imsLGy0NQQ1xP9CYGOt4vGMvpF6+wWoiV 4kXjVJop1Hou5mqiJHMcg/bxc6zUScsyV/yVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlk6yKcEjmtAEjdl4CamOrtRa+s0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xrNnlLY0VqbXRBRWpkbDRD YW1PcnRSYS1zMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wHAwDQYJKoZIhvcNAQELBQADggEBAIz2Sc4cEUvgWrzW2iy2HKGP1zPZFrLvhenb SG9zyfyO/gSy+vs2FljDKtsC99OB3/JfHaCzhvriPESSMn1F8AWo/9mxkB15iqEo rJauh76H4MAKtpkmyq38mr7BW8zy8Q4Jh0P9Tj57EqQVawILiv701PSFebI5W2sS lIG6GjG0XxhUogLNDdasfaD8X4/qy9/Zhls5ceoB7/P5P3z6v7d9H1XS3EJLwZwe QrXPYuF9YIGszsLN1RA5F+Jm4ZBa98rpMlT7dclgt8R7BS5vuZH7EjqHpHXNBs3V EJP2hlyAS4mJkhVlP//nxmv8Xo0Vo8o6D8AAWY/GSSy69F+mvcA= -----END CERTIFICATE-----Generated at Tue Apr 22 14:59:20 2025 by rpki-client