$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vhHsCS7AP4qM6wVWnQ7JMwkxoBM.roa File: vhHsCS7AP4qM6wVWnQ7JMwkxoBM.roa (raw, json) Hash identifier: qnqV7egwQ1MHpP75xhj84o8cjMuGCmJ09Dfe3ZPHWTs= Subject key identifier: BE:11:EC:09:2E:C0:3F:8A:8C:EB:05:56:9D:0E:C9:33:09:31:A0:13 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3464 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vhHsCS7AP4qM6wVWnQ7JMwkxoBM.roa Signing time: Mon 10 Feb 2025 13:52:20 +0000 ROA not before: Mon 10 Feb 2025 13:52:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13412 (0x3464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BE11EC092EC03F8A8CEB05569D0EC9330931A013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:9f:56:df:37:d0:da:21:f8:9a:6e:4d:f4: 42:1d:ce:66:37:cc:6d:81:e0:65:8f:a1:41:14:de: 3e:2f:f5:b9:b5:0b:70:19:0a:4d:a5:8a:72:92:29: 37:35:16:d2:82:af:de:f2:e6:12:75:01:0c:07:05: ef:f2:cc:78:1c:61:ac:c2:9f:1e:4e:6a:1e:56:21: ab:7e:e5:e2:f8:c3:7d:1b:0d:53:cb:64:73:34:27: 0e:fb:f9:65:09:ed:7a:86:54:e9:ab:96:45:b7:6c: c8:5c:05:c8:76:69:ac:a9:f4:5b:db:fe:2d:68:6b: f7:e5:27:0f:c6:64:3f:d0:81:a6:68:b7:6d:df:d3: e4:7d:cd:27:04:a8:0e:b3:67:08:05:b7:2e:5b:bc: a0:38:71:fa:3e:0e:5c:5c:e6:c1:43:6b:9a:36:58: b7:34:88:93:4c:70:12:de:cb:ef:72:66:f9:51:67: a7:be:98:60:d9:e7:40:c1:68:ca:ec:1e:17:2b:9f: a7:42:c8:2e:d3:ae:ad:97:9f:f4:67:67:0e:17:49: c1:8b:95:d6:9f:10:cb:19:0c:30:73:e7:06:fd:8f: 52:5b:7a:7f:7c:f9:cd:2c:0c:80:6e:d1:5c:81:91: e7:de:f2:9e:c6:98:88:be:a1:01:8f:13:ab:cf:c6: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:11:EC:09:2E:C0:3F:8A:8C:EB:05:56:9D:0E:C9:33:09:31:A0:13 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vhHsCS7AP4qM6wVWnQ7JMwkxoBM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.132.0/22 Signature Algorithm: sha256WithRSAEncryption 16:81:3c:51:7f:07:c7:92:ed:14:23:6e:f3:ad:16:a5:70:b4: 14:bc:5a:cd:45:77:b8:58:da:8f:af:44:b3:dd:97:4e:72:f5: 64:aa:99:5a:b4:33:40:4e:49:8c:53:86:aa:42:15:28:c8:f6: 5b:51:3e:84:52:c9:d7:1e:0f:95:9a:c7:86:2b:ab:10:e4:e3: b2:08:3d:46:b2:3a:77:77:e2:6e:d8:6b:c4:8c:aa:21:09:34: 39:18:be:92:05:ae:19:59:a4:7e:16:07:1e:37:74:8a:8b:fc: e4:34:6b:53:77:1c:50:46:f2:ca:c0:6c:15:4b:03:2a:d6:2d: 70:6a:76:0d:32:1f:a8:a0:4d:76:3c:ca:46:bb:75:e5:69:61: af:47:79:43:05:97:5b:a3:2f:00:66:77:86:7d:ae:30:8f:26: 81:cf:5e:3c:ad:e8:15:07:f3:d1:7b:18:83:1f:09:97:6b:c2: bd:df:3a:03:ef:3a:1e:4c:a9:4d:53:43:57:fa:b9:b0:41:04: 3b:9b:5c:5a:bc:c7:21:1a:96:8e:d9:80:45:a0:bb:98:4e:de: 0e:50:af:d5:1f:25:5a:b1:76:6f:aa:e6:e9:fc:85:fa:1a:9a: 39:7b:ca:7a:5f:4d:cb:12:1f:47:70:85:53:ae:5b:0e:5b:94: 82:12:c5:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJFMTFFQzA5MkVDMDNG OEE4Q0VCMDU1NjlEMEVDOTMzMDkzMUEwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaD59W3zfQ2iH4mm5N9EIdzmY3zG2B4GWPoUEU3j4v9bm1C3AZ Ck2linKSKTc1FtKCr97y5hJ1AQwHBe/yzHgcYazCnx5Oah5WIat+5eL4w30bDVPL ZHM0Jw77+WUJ7XqGVOmrlkW3bMhcBch2aayp9Fvb/i1oa/flJw/GZD/QgaZot23f 0+R9zScEqA6zZwgFty5bvKA4cfo+Dlxc5sFDa5o2WLc0iJNMcBLey+9yZvlRZ6e+ mGDZ50DBaMrsHhcrn6dCyC7Trq2Xn/RnZw4XScGLldafEMsZDDBz5wb9j1Jben98 +c0sDIBu0VyBkefe8p7GmIi+oQGPE6vPxqF9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvhHsCS7AP4qM6wVWnQ7JMwkxoBMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZoSHNDUzdBUDRxTTZ3Vldu UTdKTXdreG9CTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w4QwDQYJKoZIhvcNAQELBQADggEBABaBPFF/B8eS7RQjbvOtFqVwtBS8Ws1Fd7hY 2o+vRLPdl05y9WSqmVq0M0BOSYxThqpCFSjI9ltRPoRSydceD5Wax4YrqxDk47II PUayOnd34m7Ya8SMqiEJNDkYvpIFrhlZpH4WBx43dIqL/OQ0a1N3HFBG8srAbBVL AyrWLXBqdg0yH6igTXY8yka7deVpYa9HeUMFl1ujLwBmd4Z9rjCPJoHPXjyt6BUH 89F7GIMfCZdrwr3fOgPvOh5MqU1TQ1f6ubBBBDubXFq8xyEalo7ZgEWgu5hO3g5Q r9UfJVqxdm+q5un8hfoamjl7ynpfTcsSH0dwhVOuWw5blIISxXo= -----END CERTIFICATE-----Generated at Fri Apr 18 23:04:53 2025 by rpki-client