$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ryPALS5Rm_tNRlTnG5O0kOnWFTo.roa File: ryPALS5Rm_tNRlTnG5O0kOnWFTo.roa (raw, json) Hash identifier: GCVrzXlYQOlUqlYk5wrplQUwvp/828URo3mQMCFNnEk= Subject key identifier: AF:23:C0:2D:2E:51:9B:FB:4D:46:54:E7:1B:93:B4:90:E9:D6:15:3A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 369A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ryPALS5Rm_tNRlTnG5O0kOnWFTo.roa Signing time: Mon 10 Feb 2025 13:54:29 +0000 ROA not before: Mon 10 Feb 2025 13:54:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13978 (0x369a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AF23C02D2E519BFB4D4654E71B93B490E9D6153A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b2:5b:8d:c1:33:62:e0:6e:01:ae:cc:21:7a: cc:5f:c0:b3:72:c9:ea:13:dd:2e:3d:94:18:7d:c4: 07:42:06:e5:ec:46:20:6f:48:eb:83:75:3b:b5:ef: 74:49:ed:c0:f3:9f:40:5c:38:bc:e4:28:6d:52:80: 77:0f:28:89:df:8f:cd:01:72:b9:ce:93:07:3d:c1: 83:4c:2c:17:2b:8b:79:f4:c7:8d:f9:16:9d:7b:b4: 26:84:cf:e0:40:02:c1:4e:6d:b0:8b:e5:7c:7c:69: 60:08:17:02:c1:31:65:27:41:bb:bf:24:44:3a:a1: 46:a1:1b:4f:2b:ca:97:ff:36:d6:da:f8:27:2d:6c: b1:49:3c:71:30:99:59:39:26:a8:f4:56:d1:13:a9: 51:9e:37:80:c2:e3:86:6e:02:a7:84:36:6a:86:c9: 67:7a:8e:74:d6:15:55:84:35:aa:03:7d:1c:dc:8d: c2:de:e3:78:2b:6c:02:ef:cd:af:41:c3:df:62:27: 21:f0:26:e6:cf:14:64:34:89:9e:c8:a9:3c:cf:94: 0e:52:d1:6c:91:57:73:97:43:8b:7d:54:9e:49:3d: b2:cd:21:f6:bc:5c:38:d5:c4:1a:46:a4:3e:87:aa: 7e:ef:12:d3:88:98:67:cf:45:4e:c8:e4:50:4b:32: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:23:C0:2D:2E:51:9B:FB:4D:46:54:E7:1B:93:B4:90:E9:D6:15:3A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ryPALS5Rm_tNRlTnG5O0kOnWFTo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.76.0/22 Signature Algorithm: sha256WithRSAEncryption 82:ce:fc:59:16:d5:66:bc:42:66:1f:4a:73:5e:6b:96:b7:5f: 8b:f5:ec:e8:3c:0f:e8:d6:01:fc:69:91:13:0e:af:4a:14:97: 90:4e:09:7c:fd:74:15:7e:b5:e0:81:70:75:d2:a2:ae:a9:06: 10:4a:88:b0:36:d2:ea:e4:0f:d9:e2:d9:cc:ff:38:76:4b:2d: 76:dc:3b:12:68:d9:be:55:63:9b:4f:8b:9d:b0:f5:81:fc:5b: 1a:bf:c9:5a:d3:73:fd:c1:82:fe:2b:84:ea:d8:c2:bd:64:f3: a5:3f:46:68:d8:cb:06:fb:1e:b0:75:a3:20:56:56:ac:0d:3a: c3:94:9d:60:25:02:32:25:cc:71:12:74:a8:ce:98:a1:f3:f6: f5:68:05:da:4e:c9:47:c8:cf:c2:ab:46:ac:6d:d0:3d:27:bd: 7b:86:ab:0e:10:d0:6b:f4:d9:b0:58:bd:1f:ba:41:41:ee:45: 21:82:bf:1e:9a:eb:a0:23:72:6b:63:51:b0:cc:55:03:7a:01: e8:dc:03:24:f2:3b:a7:3d:63:5d:e3:72:1c:f7:1a:35:c9:39: d5:c0:23:9f:99:f2:15:d2:ff:7e:76:6b:e1:e5:8a:a2:25:d5: ed:e2:99:49:c5:0a:09:c0:e7:b1:e3:c1:bc:82:7a:8d:1e:b8: e0:59:8f:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFGMjNDMDJEMkU1MTlC RkI0RDQ2NTRFNzFCOTNCNDkwRTlENjE1M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDesluNwTNi4G4BrswhesxfwLNyyeoT3S49lBh9xAdCBuXsRiBv SOuDdTu173RJ7cDzn0BcOLzkKG1SgHcPKInfj80BcrnOkwc9wYNMLBcri3n0x435 Fp17tCaEz+BAAsFObbCL5Xx8aWAIFwLBMWUnQbu/JEQ6oUahG08rypf/Ntba+Cct bLFJPHEwmVk5Jqj0VtETqVGeN4DC44ZuAqeENmqGyWd6jnTWFVWENaoDfRzcjcLe 43grbALvza9Bw99iJyHwJubPFGQ0iZ7IqTzPlA5S0WyRV3OXQ4t9VJ5JPbLNIfa8 XDjVxBpGpD6Hqn7vEtOImGfPRU7I5FBLMrr/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUryPALS5Rm/tNRlTnG5O0kOnWFTowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3J5UEFMUzVSbV90TlJsVG5H NU8wa09uV0ZUby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wkwwDQYJKoZIhvcNAQELBQADggEBAILO/FkW1Wa8QmYfSnNea5a3X4v17Og8D+jW AfxpkRMOr0oUl5BOCXz9dBV+teCBcHXSoq6pBhBKiLA20urkD9ni2cz/OHZLLXbc OxJo2b5VY5tPi52w9YH8Wxq/yVrTc/3Bgv4rhOrYwr1k86U/RmjYywb7HrB1oyBW VqwNOsOUnWAlAjIlzHESdKjOmKHz9vVoBdpOyUfIz8KrRqxt0D0nvXuGqw4Q0Gv0 2bBYvR+6QUHuRSGCvx6a66AjcmtjUbDMVQN6AejcAyTyO6c9Y13jchz3GjXJOdXA I5+Z8hXS/352a+HliqIl1e3imUnFCgnA57HjwbyCeo0euOBZj7E= -----END CERTIFICATE-----Generated at Fri Apr 18 22:34:14 2025 by rpki-client