$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulHcTMK-EgLFeWlkRsw2DMiGXEA.roa File: ulHcTMK-EgLFeWlkRsw2DMiGXEA.roa (raw, json) Hash identifier: Y9dtjxjzsL5FrP4NizPHTQy4uIjzcvcLJi8RluNw2gs= Subject key identifier: BA:51:DC:4C:C2:BE:12:02:C5:79:69:64:46:CC:36:0C:C8:86:5C:40 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3589 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulHcTMK-EgLFeWlkRsw2DMiGXEA.roa Signing time: Mon 10 Feb 2025 13:53:27 +0000 ROA not before: Mon 10 Feb 2025 13:53:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.238.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13705 (0x3589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BA51DC4CC2BE1202C579696446CC360CC8865C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:fc:0c:95:a5:20:24:4d:45:bf:17:d4:f4: ed:44:a0:9d:9a:0b:46:d6:fa:d6:1c:95:2b:79:bd: 24:19:d5:4e:fe:8a:49:db:6e:93:48:e1:c0:28:15: 8f:10:c3:37:1a:c2:fb:25:c5:56:aa:52:b5:c5:cc: 84:85:3e:e7:b5:f9:f3:ba:bb:9c:3d:99:03:08:ef: e3:cf:ca:2c:4d:5d:5d:3a:b8:52:7a:e7:cf:bc:df: b0:52:16:73:3f:13:7f:1f:66:98:a6:a5:09:3f:86: d9:a8:d7:ff:bf:c4:28:8f:be:0d:8e:d8:b2:5e:ab: 77:82:70:70:2d:71:33:a9:c1:db:37:62:31:92:0f: ff:a0:4a:b9:9d:76:41:6d:17:f7:8d:8f:a6:30:a2: 05:64:e3:8c:1d:fc:d8:8a:fb:2c:c6:be:31:84:7b: 42:69:d3:17:aa:63:6d:42:60:33:fd:c9:fa:2b:f3: 57:ab:09:94:ec:25:44:40:62:ed:c1:64:9e:3d:d2: 15:7b:e5:54:d0:05:46:60:5b:32:6b:09:f4:4b:5f: 2e:0c:22:cb:5a:51:84:a3:16:14:71:73:60:73:2d: c7:a4:b4:1a:4b:ff:c3:f0:1b:a8:24:17:8f:d7:25: b2:4a:eb:b8:e6:db:c0:db:0c:8d:af:69:d8:e6:ac: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:DC:4C:C2:BE:12:02:C5:79:69:64:46:CC:36:0C:C8:86:5C:40 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulHcTMK-EgLFeWlkRsw2DMiGXEA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.0/25 Signature Algorithm: sha256WithRSAEncryption 19:b9:b4:ed:92:dd:84:78:f7:4f:22:c0:2b:83:8d:87:7d:9c: 45:0a:3f:98:83:b0:13:eb:d6:a0:32:81:a0:70:c2:b7:1f:40: 1a:62:5d:cc:5d:f8:d8:96:2a:02:05:4b:31:30:a0:2f:21:92: 36:4a:d4:fd:a0:32:df:9c:a3:bb:c1:91:b8:4a:2b:aa:8a:9b: e5:a8:d3:e7:cd:a8:c7:be:55:4c:ef:b8:a4:a1:95:ab:42:f5: 21:06:3f:9f:f9:51:c4:b9:08:0b:f5:6e:d3:a7:2b:9c:4f:f0: 8f:cb:51:e6:c7:69:6f:e0:4a:de:2f:2e:75:1e:e7:ef:aa:b7: 4c:e6:8e:d8:be:a7:51:59:2b:05:55:ff:4d:1a:77:1f:1c:eb: 3f:73:68:b6:26:6e:14:61:ab:f3:4e:6d:b7:78:be:46:79:9a: 83:fc:6c:6d:e2:cc:d8:96:94:c1:a8:39:b3:91:cf:df:14:b6: 6b:6b:6a:80:cd:b2:fb:2c:49:f3:92:54:49:31:a1:f9:21:e4: 9a:07:8e:64:32:28:5b:d4:42:56:6c:ce:6b:0b:87:2b:a0:75: 59:60:c2:b8:cb:c7:6c:64:4a:fd:72:b0:59:3d:51:ad:05:92: 08:4d:72:48:9b:eb:3f:03:a0:0a:37:7e:bf:b9:84:1d:c9:d3: 0f:fa:2c:fd -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJBNTFEQzRDQzJCRTEy MDJDNTc5Njk2NDQ2Q0MzNjBDQzg4NjVDNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDFfwMlaUgJE1FvxfU9O1EoJ2aC0bW+tYclSt5vSQZ1U7+iknb bpNI4cAoFY8QwzcawvslxVaqUrXFzISFPue1+fO6u5w9mQMI7+PPyixNXV06uFJ6 58+837BSFnM/E38fZpimpQk/htmo1/+/xCiPvg2O2LJeq3eCcHAtcTOpwds3YjGS D/+gSrmddkFtF/eNj6YwogVk44wd/NiK+yzGvjGEe0Jp0xeqY21CYDP9yfor81er CZTsJURAYu3BZJ490hV75VTQBUZgWzJrCfRLXy4MIstaUYSjFhRxc2BzLcektBpL /8PwG6gkF4/XJbJK67jm28DbDI2vadjmrLpjAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUulHcTMK+EgLFeWlkRsw2DMiGXEAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VsSGNUTUstRWdMRmVXbGtS c3cyRE1pR1hFQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+4AMA0GCSqGSIb3DQEBCwUAA4IBAQAZubTtkt2EePdPIsArg42HfZxFCj+Yg7AT 69agMoGgcMK3H0AaYl3MXfjYlioCBUsxMKAvIZI2StT9oDLfnKO7wZG4Siuqipvl qNPnzajHvlVM77ikoZWrQvUhBj+f+VHEuQgL9W7TpyucT/CPy1Hmx2lv4EreLy51 HufvqrdM5o7YvqdRWSsFVf9NGncfHOs/c2i2Jm4UYavzTm23eL5GeZqD/Gxt4szY lpTBqDmzkc/fFLZra2qAzbL7LEnzklRJMaH5IeSaB45kMihb1EJWbM5rC4croHVZ YMK4y8dsZEr9crBZPVGtBZIITXJIm+s/A6AKN36/uYQdydMP+iz9 -----END CERTIFICATE-----Generated at Fri Apr 18 23:02:05 2025 by rpki-client