$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oVqhEsRIJxZ5Xf46P3-wkn4WRaI.roa File: oVqhEsRIJxZ5Xf46P3-wkn4WRaI.roa (raw, json) Hash identifier: fYzGBsy5DhcW93uGhCjoojoz9jzwNaIEdF5iDg9K8sU= Subject key identifier: A1:5A:A1:12:C4:48:27:16:79:5D:FE:3A:3F:7F:B0:92:7E:16:45:A2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34BA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oVqhEsRIJxZ5Xf46P3-wkn4WRaI.roa Signing time: Mon 10 Feb 2025 13:52:38 +0000 ROA not before: Mon 10 Feb 2025 13:52:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A15AA112C4482716795DFE3A3F7FB0927E1645A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:83:56:57:19:79:55:17:22:9a:cd:31:45: 06:16:76:e4:ee:f9:73:0e:da:0c:6a:f6:14:21:26: fc:c4:3d:9a:4a:b3:b9:51:76:cb:16:16:1b:84:8b: f0:48:24:70:fc:ae:4b:bd:2d:ca:ef:5e:8d:65:b9: 02:b2:a8:2d:42:53:47:87:88:b5:e5:e3:f3:6f:13: f1:55:3d:bc:1a:34:7b:b1:cb:80:04:36:8b:d8:19: b7:c6:27:25:7e:e9:e1:18:34:da:0e:bc:f2:73:0c: 77:9b:09:88:62:b0:4c:73:5e:31:c2:53:0d:e0:01: 23:59:11:af:4b:fc:a8:3b:3e:8b:6c:5c:b0:ca:28: 3a:af:6d:52:6c:55:2e:ce:02:a9:be:1e:16:34:6a: be:f3:0e:8c:a8:05:ed:5d:2b:1b:19:30:b1:84:44: 67:ea:54:95:b8:95:80:56:13:f6:ef:08:ab:3f:02: a2:30:84:60:e1:f2:d4:d3:17:00:a3:6e:3b:5a:ad: 24:40:1d:98:34:5f:ea:28:01:66:ba:03:e4:e9:a2: 93:a1:05:c0:03:ad:b9:67:1f:3f:1b:b1:54:df:1e: de:cf:34:41:1d:8b:7c:e7:5c:d4:e2:e0:eb:80:23: 40:e2:2a:a5:a8:95:9f:30:63:fc:a7:eb:7e:15:5a: d7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5A:A1:12:C4:48:27:16:79:5D:FE:3A:3F:7F:B0:92:7E:16:45:A2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oVqhEsRIJxZ5Xf46P3-wkn4WRaI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.80.0/21 Signature Algorithm: sha256WithRSAEncryption 30:73:f7:bc:49:3a:3d:54:3a:f2:cb:d3:6a:30:43:09:ab:d2: 53:9c:ac:4d:1c:1e:6d:73:aa:68:1e:91:bd:cb:31:e4:b3:49: 22:46:15:fa:c7:83:45:7a:fb:1a:b8:d4:87:00:83:a0:bb:c3: c6:3c:15:60:59:aa:f1:ba:b4:76:4e:e6:67:0f:48:7b:b5:cc: 0d:67:c8:f4:12:d2:94:a1:d8:64:ff:3d:57:0f:cf:e7:d5:1a: 30:57:16:c7:8c:22:9a:7f:55:d2:cc:d1:63:0c:21:d5:75:75: ff:f7:67:a5:a3:32:60:6f:2d:1a:dc:d1:3e:f2:bd:eb:3e:3a: f3:81:fc:22:74:9d:2d:7d:5d:7b:fe:9d:1a:c6:6a:7d:a2:4f: b0:ab:98:fd:35:56:fa:5c:2c:33:d7:0d:bb:74:3e:b4:02:f2: 26:93:88:2d:69:37:90:48:2c:2e:7a:59:1a:83:3a:5a:55:6d: 0a:77:b5:f6:d4:37:14:25:e4:d6:74:91:27:ed:8a:02:dc:0c: ea:6b:e7:40:4b:05:7b:83:84:a5:2d:28:d2:77:8e:2a:62:a8: 03:7f:58:29:c5:b4:82:f0:dc:26:e7:5c:c1:de:de:58:4f:20: e4:69:ba:4c:27:12:dc:83:e7:89:e8:30:f0:ed:dc:e3:e3:22: 2d:cc:6e:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEExNUFBMTEyQzQ0ODI3 MTY3OTVERkUzQTNGN0ZCMDkyN0UxNjQ1QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5PYNWVxl5VRcims0xRQYWduTu+XMO2gxq9hQhJvzEPZpKs7lR dssWFhuEi/BIJHD8rku9LcrvXo1luQKyqC1CU0eHiLXl4/NvE/FVPbwaNHuxy4AE NovYGbfGJyV+6eEYNNoOvPJzDHebCYhisExzXjHCUw3gASNZEa9L/Kg7PotsXLDK KDqvbVJsVS7OAqm+HhY0ar7zDoyoBe1dKxsZMLGERGfqVJW4lYBWE/bvCKs/AqIw hGDh8tTTFwCjbjtarSRAHZg0X+ooAWa6A+TpopOhBcADrblnHz8bsVTfHt7PNEEd i3znXNTi4OuAI0DiKqWolZ8wY/yn634VWtdXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoVqhEsRIJxZ5Xf46P3+wkn4WRaIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29WcWhFc1JJSnhaNVhmNDZQ My13a240V1JhSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wVAwDQYJKoZIhvcNAQELBQADggEBADBz97xJOj1UOvLL02owQwmr0lOcrE0cHm1z qmgekb3LMeSzSSJGFfrHg0V6+xq41IcAg6C7w8Y8FWBZqvG6tHZO5mcPSHu1zA1n yPQS0pSh2GT/PVcPz+fVGjBXFseMIpp/VdLM0WMMIdV1df/3Z6WjMmBvLRrc0T7y ves+OvOB/CJ0nS19XXv+nRrGan2iT7CrmP01VvpcLDPXDbt0PrQC8iaTiC1pN5BI LC56WRqDOlpVbQp3tfbUNxQl5NZ0kSftigLcDOpr50BLBXuDhKUtKNJ3jipiqAN/ WCnFtILw3CbnXMHe3lhPIORpukwnEtyD54noMPDt3OPjIi3Mbkw= -----END CERTIFICATE-----Generated at Fri Apr 18 23:02:16 2025 by rpki-client