$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m2aeu7Yel10zxkiaErQWZFDelGc.roa File: m2aeu7Yel10zxkiaErQWZFDelGc.roa (raw, json) Hash identifier: H0TXTW08cCYWJJNhsLZcdbsk6YmOykbJHQcmuNsSEsg= Subject key identifier: 9B:66:9E:BB:B6:1E:97:5D:33:C6:48:9A:12:B4:16:64:50:DE:94:67 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34ED Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m2aeu7Yel10zxkiaErQWZFDelGc.roa Signing time: Mon 10 Feb 2025 13:52:50 +0000 ROA not before: Mon 10 Feb 2025 13:52:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9B669EBBB61E975D33C6489A12B4166450DE9467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:56:f5:08:fd:d3:32:06:02:76:a8:bc:c8: f9:a7:c9:dd:9b:ed:39:dd:82:22:f5:2f:49:9f:fd: 2f:ed:33:2c:e0:05:9b:43:35:0b:05:af:d6:66:9e: 51:2b:8b:e8:08:51:b7:8b:1a:6e:dd:c2:22:02:6a: 6a:85:ee:15:66:11:87:50:80:ed:2a:0d:64:13:5a: 59:07:5d:62:71:2e:bc:05:34:49:f3:b2:b1:f6:ba: fe:44:5b:e2:10:62:53:e0:e2:eb:3f:fe:e3:79:4c: f3:03:d3:7b:aa:74:99:38:0f:3e:70:20:7b:9d:83: 44:41:31:f1:3c:56:be:51:08:20:d7:9b:93:2a:3a: ab:b9:fc:e0:83:8e:9e:79:76:d8:52:2d:23:d0:2b: a2:25:7e:b4:cc:e6:69:76:27:84:de:c6:2a:e1:7d: 32:62:a7:b8:e6:6c:c0:8a:51:bd:d7:8e:f0:0f:6e: 00:cd:56:86:91:07:9f:d7:b4:c7:ce:a8:3d:b2:4b: a5:9c:40:0d:58:0a:bf:5c:48:bf:36:7f:97:bb:03: 47:d4:0c:c1:a0:f4:b8:2d:08:49:f8:14:8c:02:9e: 1b:32:61:64:7b:f7:e6:14:41:b1:ad:3f:ad:0f:41: ca:12:f7:fe:ef:bb:3d:f5:5b:7f:d5:6a:3c:49:0f: 3b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:66:9E:BB:B6:1E:97:5D:33:C6:48:9A:12:B4:16:64:50:DE:94:67 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m2aeu7Yel10zxkiaErQWZFDelGc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.174.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:75:13:8f:b1:5c:5f:1d:d9:cd:c3:b5:02:7b:5d:c0:0b:ea: 14:2e:52:80:9e:da:dd:a1:e0:41:a1:ae:65:f6:f9:e1:70:97: 7d:0f:a3:1f:33:67:44:03:64:f6:75:c5:ca:d0:4a:c6:c1:37: bd:8f:55:5c:9d:a6:c8:49:21:89:1e:94:12:ae:fb:86:0c:ef: df:32:a6:cb:4b:7d:30:93:8c:35:99:a4:c3:89:47:99:a2:af: 4b:52:f3:60:95:20:3b:ec:a5:6d:9b:a5:2d:60:e6:dd:2f:b7: f5:39:23:ee:bb:33:9a:ce:b4:59:79:d0:42:96:f4:d0:a3:66: 72:53:7e:d8:6a:81:c5:ed:09:f8:0f:57:29:77:25:58:0c:f1: 05:75:f1:ef:ac:44:19:52:a1:07:19:5d:f4:6e:c9:1f:64:6b: f3:80:f7:95:43:72:e9:cf:b1:06:f7:ba:04:35:5e:55:98:42: 27:dc:2c:fc:7d:53:16:c0:76:98:7a:f6:c9:25:ba:bb:08:3a: ca:cc:a4:3e:99:fe:3d:65:8e:dc:95:c5:f8:6a:1b:60:28:da: 01:fa:ec:0d:87:13:8e:c7:38:5c:bf:a1:41:f7:05:9b:92:b6: 00:2f:fa:4c:2a:7e:65:d9:b0:73:64:ad:01:f9:07:45:d0:4a: da:10:88:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCNjY5RUJCQjYxRTk3 NUQzM0M2NDg5QTEyQjQxNjY0NTBERTk0NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCve1b1CP3TMgYCdqi8yPmnyd2b7TndgiL1L0mf/S/tMyzgBZtD NQsFr9ZmnlEri+gIUbeLGm7dwiICamqF7hVmEYdQgO0qDWQTWlkHXWJxLrwFNEnz srH2uv5EW+IQYlPg4us//uN5TPMD03uqdJk4Dz5wIHudg0RBMfE8Vr5RCCDXm5Mq Oqu5/OCDjp55dthSLSPQK6IlfrTM5ml2J4TexirhfTJip7jmbMCKUb3XjvAPbgDN VoaRB5/XtMfOqD2yS6WcQA1YCr9cSL82f5e7A0fUDMGg9LgtCEn4FIwCnhsyYWR7 9+YUQbGtP60PQcoS9/7vuz31W3/VajxJDzuxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUm2aeu7Yel10zxkiaErQWZFDelGcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL20yYWV1N1llbDEwenhraWFF clFXWkZEZWxHYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 w64wDQYJKoZIhvcNAQELBQADggEBAIx1E4+xXF8d2c3DtQJ7XcAL6hQuUoCe2t2h 4EGhrmX2+eFwl30Pox8zZ0QDZPZ1xcrQSsbBN72PVVydpshJIYkelBKu+4YM798y pstLfTCTjDWZpMOJR5mir0tS82CVIDvspW2bpS1g5t0vt/U5I+67M5rOtFl50EKW 9NCjZnJTfthqgcXtCfgPVyl3JVgM8QV18e+sRBlSoQcZXfRuyR9ka/OA95VDcunP sQb3ugQ1XlWYQifcLPx9UxbAdph69sklursIOsrMpD6Z/j1ljtyVxfhqG2Ao2gH6 7A2HE47HOFy/oUH3BZuStgAv+kwqfmXZsHNkrQH5B0XQStoQiAs= -----END CERTIFICATE-----Generated at Wed Apr 23 04:44:01 2025 by rpki-client