$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzRKXHMe-hw0mgIHhuP6epGtxng.roa File: lzRKXHMe-hw0mgIHhuP6epGtxng.roa (raw, json) Hash identifier: b4O4tFl7aoTdWbbOc+rrRMoi2t0qKThki3PjVTZIdHY= Subject key identifier: 97:34:4A:5C:73:1E:FA:1C:34:9A:02:07:86:E3:FA:7A:91:AD:C6:78 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3415 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzRKXHMe-hw0mgIHhuP6epGtxng.roa Signing time: Mon 10 Feb 2025 13:52:04 +0000 ROA not before: Mon 10 Feb 2025 13:52:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13333 (0x3415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=97344A5C731EFA1C349A020786E3FA7A91ADC678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f3:a2:cf:7b:7c:2e:3f:db:09:2c:e7:53:32: 58:27:b0:c7:03:1c:0d:57:cf:71:ff:af:f9:11:ff: 48:63:eb:e4:fa:ca:38:eb:15:f9:aa:e5:b2:f4:63: 28:48:4f:7b:ce:46:0f:85:a9:6b:cb:3f:6b:0c:a1: 7a:10:de:e8:9f:48:4e:1b:94:6d:47:e3:4f:f2:78: 0c:37:f8:08:fb:10:c2:de:bd:46:e1:9a:64:e4:3a: 98:44:b1:19:0b:3e:66:dd:b9:80:a6:62:cf:a5:b4: 64:f6:1a:8c:42:55:03:f5:f0:f0:86:3f:f8:c3:c9: fe:ad:52:7e:32:fb:b1:d3:a8:7f:f2:49:2f:59:cf: 8e:33:ff:24:3e:71:47:99:c8:e8:85:36:2b:3b:65: cd:68:85:a8:b9:88:7a:42:be:c9:6b:21:29:9e:d1: 74:bc:b5:2e:30:91:dd:f6:16:df:a0:1d:97:a6:43: b3:14:35:23:e8:fa:0f:42:8a:fc:b8:54:45:46:b9: ab:09:85:c6:98:55:10:a9:f0:91:e7:ad:67:76:29: fb:8e:eb:5e:ca:58:f6:70:32:ff:fa:7b:83:6d:c3: 60:39:42:a8:1f:e9:60:8a:bf:ef:c7:4c:a7:55:de: 25:28:b3:77:61:e8:f3:e6:72:72:83:d7:bd:d7:fc: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:34:4A:5C:73:1E:FA:1C:34:9A:02:07:86:E3:FA:7A:91:AD:C6:78 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzRKXHMe-hw0mgIHhuP6epGtxng.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.56.0/21 Signature Algorithm: sha256WithRSAEncryption 54:bb:ed:7b:bd:56:f4:36:13:19:31:96:85:21:2d:18:49:26: c5:0b:a5:2b:2f:e4:84:d9:2e:0f:7d:6c:62:f6:54:43:1b:4f: f6:e3:2f:71:13:c2:d3:a5:aa:31:a4:6a:66:a5:d7:80:e3:b5: 31:55:d0:5f:31:14:b7:65:a5:07:c9:c7:c4:c1:ed:ff:6b:05: 2e:1f:95:23:7d:fb:e2:de:fc:22:7f:27:2b:db:1a:38:6c:6e: a1:d2:4c:2a:eb:8d:3e:4b:1e:b9:17:fe:ab:ed:f0:71:8b:3e: da:11:6e:8c:1a:39:51:6e:b2:9a:99:a5:32:2f:66:53:94:c9: 3f:1c:f9:a9:69:43:8d:82:7c:19:a3:95:44:29:fd:37:8c:3a: a6:b3:fa:b4:ec:72:20:f1:39:96:f8:6d:f6:e6:76:5b:0f:57: 59:9e:ba:2e:8e:59:be:32:c9:33:1d:49:8c:d0:5e:68:ec:24: c7:4d:d2:34:29:a6:8a:09:4f:4f:4a:19:b3:23:eb:17:1e:c3: 75:a5:14:69:a1:d6:7f:61:36:d6:75:44:4c:35:b0:b9:6b:08: 3d:b9:e6:2e:1f:bf:b8:2a:c5:58:32:bb:13:8f:31:19:f7:b6: 35:3b:50:d5:d4:28:a4:f4:20:4c:c9:13:94:6b:77:4a:a8:b0: bb:16:84:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3MzQ0QTVDNzMxRUZB MUMzNDlBMDIwNzg2RTNGQTdBOTFBREM2NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD486LPe3wuP9sJLOdTMlgnsMcDHA1Xz3H/r/kR/0hj6+T6yjjr Ffmq5bL0YyhIT3vORg+FqWvLP2sMoXoQ3uifSE4blG1H40/yeAw3+Aj7EMLevUbh mmTkOphEsRkLPmbduYCmYs+ltGT2GoxCVQP18PCGP/jDyf6tUn4y+7HTqH/ySS9Z z44z/yQ+cUeZyOiFNis7Zc1ohai5iHpCvslrISme0XS8tS4wkd32Ft+gHZemQ7MU NSPo+g9Civy4VEVGuasJhcaYVRCp8JHnrWd2KfuO617KWPZwMv/6e4Ntw2A5Qqgf 6WCKv+/HTKdV3iUos3dh6PPmcnKD173X/J/RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlzRKXHMe+hw0mgIHhuP6epGtxngwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2x6UktYSE1lLWh3MG1nSUho dVA2ZXBHdHhuZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wzgwDQYJKoZIhvcNAQELBQADggEBAFS77Xu9VvQ2ExkxloUhLRhJJsULpSsv5ITZ Lg99bGL2VEMbT/bjL3ETwtOlqjGkamal14DjtTFV0F8xFLdlpQfJx8TB7f9rBS4f lSN9++Le/CJ/JyvbGjhsbqHSTCrrjT5LHrkX/qvt8HGLPtoRbowaOVFuspqZpTIv ZlOUyT8c+alpQ42CfBmjlUQp/TeMOqaz+rTsciDxOZb4bfbmdlsPV1meui6OWb4y yTMdSYzQXmjsJMdN0jQppooJT09KGbMj6xcew3WlFGmh1n9hNtZ1REw1sLlrCD25 5i4fv7gqxVgyuxOPMRn3tjU7UNXUKKT0IEzJE5Rrd0qosLsWhJ0= -----END CERTIFICATE-----Generated at Fri Apr 18 22:37:02 2025 by rpki-client