$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qI7vtct5VVkdMj3cKBcLGWb9dIE.roa File: qI7vtct5VVkdMj3cKBcLGWb9dIE.roa (raw, json) Hash identifier: xr8cc+9vp1J4DLXWlnF+XPQGWMIy56HObXbcLo6utek= Subject key identifier: A8:8E:EF:B5:CB:79:55:59:1D:32:3D:DC:28:17:0B:19:66:FD:74:81 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33CA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qI7vtct5VVkdMj3cKBcLGWb9dIE.roa Signing time: Mon 10 Feb 2025 13:51:46 +0000 ROA not before: Mon 10 Feb 2025 13:51:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13258 (0x33ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A88EEFB5CB7955591D323DDC28170B1966FD7481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:3b:3a:64:f7:b1:8a:8c:81:20:cf:3c:25: a9:ed:f2:67:04:a1:9c:01:ce:cb:b7:dd:60:64:ea: c0:06:15:af:78:66:ec:6d:fb:c5:30:a6:e0:41:22: b3:ad:f8:f0:7b:93:b3:9f:c3:80:9c:49:92:02:17: 47:05:d0:a2:9f:62:46:63:37:28:d1:69:af:23:b3: fc:c3:f4:6c:d6:6a:a9:25:2e:d5:b5:3d:a1:45:58: 3f:3d:a1:97:4f:08:e9:e6:66:78:a0:67:24:37:26: b9:81:8f:a3:65:1f:82:f9:2b:da:1b:9b:51:ad:64: 7f:d3:9d:d7:76:58:15:ae:65:0e:f6:4e:79:4e:de: 5b:e8:cb:8b:10:c1:59:14:17:41:73:53:cd:d2:82: be:ca:98:a6:d0:31:a1:13:45:c6:c6:d3:a0:d7:95: 3c:ac:b0:81:72:60:5a:28:10:be:7b:3b:f9:5e:6d: 18:33:3c:67:3a:c9:21:0e:8e:0b:f5:88:8d:f2:81: 9d:27:12:60:9e:af:ea:7a:88:ba:bc:1d:32:7f:2d: ef:70:3b:bd:0b:dd:65:9a:55:02:d8:f3:df:b4:fb: c2:d4:53:d3:fd:95:ab:3a:b2:c7:ae:49:df:22:7b: 1d:3c:b9:81:3a:1c:39:d4:b1:07:de:f6:a1:71:28: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8E:EF:B5:CB:79:55:59:1D:32:3D:DC:28:17:0B:19:66:FD:74:81 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qI7vtct5VVkdMj3cKBcLGWb9dIE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.180.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:b8:2f:9e:6a:1a:c3:45:2b:83:a0:e8:7a:a8:60:bf:e7:80: 87:83:7c:1e:2b:49:6f:ab:a6:6b:8a:e5:aa:87:6e:56:bd:67: 49:96:0c:45:a7:15:b8:54:a1:c5:f3:1e:19:6b:8c:a4:0b:33: 14:e9:07:c0:83:fe:c4:45:1b:9a:b7:bf:30:2a:92:80:aa:41: 26:da:28:4e:f5:9d:09:ee:0c:52:66:b2:61:b9:62:a9:e8:cb: 0d:6e:24:0e:59:69:6e:ae:c7:52:06:1f:6b:e1:48:f4:e8:53: 6e:fb:c9:3b:ae:68:d2:3f:08:4e:35:f4:b5:c7:27:61:9e:9b: 9d:c3:37:c5:4f:1e:2b:e7:dc:ed:83:5e:7d:b1:a2:0e:3e:6c: 7b:4c:27:34:fa:ae:eb:f2:cd:a9:da:c8:1e:b2:bf:0b:bc:b5: a5:f8:f4:ce:f4:f3:4d:0e:12:f8:87:e0:b2:05:fe:af:3b:89: d7:5a:9f:af:2d:58:2e:f4:b4:26:84:ed:bc:16:ff:a4:3a:bd: b6:7e:54:7c:a8:a0:ed:d0:e0:6a:f7:3d:e0:da:a4:04:cd:5a: c8:9f:0a:59:b1:6f:af:64:fd:14:49:42:65:5c:b6:d6:52:34: 39:f7:ba:bf:ac:34:24:a0:11:9f:0c:da:c2:a8:ef:60:bd:6a: c8:85:25:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE4OEVFRkI1Q0I3OTU1 NTkxRDMyM0REQzI4MTcwQjE5NjZGRDc0ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG9Ds6ZPexioyBIM88Jant8mcEoZwBzsu33WBk6sAGFa94Zuxt +8UwpuBBIrOt+PB7k7Ofw4CcSZICF0cF0KKfYkZjNyjRaa8js/zD9GzWaqklLtW1 PaFFWD89oZdPCOnmZnigZyQ3JrmBj6NlH4L5K9obm1GtZH/Tndd2WBWuZQ72TnlO 3lvoy4sQwVkUF0FzU83Sgr7KmKbQMaETRcbG06DXlTyssIFyYFooEL57O/lebRgz PGc6ySEOjgv1iI3ygZ0nEmCer+p6iLq8HTJ/Le9wO70L3WWaVQLY89+0+8LUU9P9 las6sseuSd8iex08uYE6HDnUsQfe9qFxKL5ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqI7vtct5VVkdMj3cKBcLGWb9dIEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FJN3Z0Y3Q1VlZrZE1qM2NL QmNMR1diOWRJRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 w7QwDQYJKoZIhvcNAQELBQADggEBAH24L55qGsNFK4Og6HqoYL/ngIeDfB4rSW+r pmuK5aqHbla9Z0mWDEWnFbhUocXzHhlrjKQLMxTpB8CD/sRFG5q3vzAqkoCqQSba KE71nQnuDFJmsmG5Yqnoyw1uJA5ZaW6ux1IGH2vhSPToU277yTuuaNI/CE419LXH J2Gem53DN8VPHivn3O2DXn2xog4+bHtMJzT6ruvyzanayB6yvwu8taX49M70800O EviH4LIF/q87iddan68tWC70tCaE7bwW/6Q6vbZ+VHyooO3Q4Gr3PeDapATNWsif Clmxb69k/RRJQmVcttZSNDn3ur+sNCSgEZ8M2sKo72C9asiFJWM= -----END CERTIFICATE-----Generated at Fri Apr 18 22:34:30 2025 by rpki-client