$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yAbp_qLiuIdvzohLC2XyqamNORw.roa File: yAbp_qLiuIdvzohLC2XyqamNORw.roa (raw, json) Hash identifier: 3CSCXvm/VZDPkum/ey94InvBLS/y33GhyJBk4o77sgQ= Subject key identifier: C8:06:E9:FE:A2:E2:B8:87:6F:CE:88:4B:0B:65:F2:A9:A9:8D:39:1C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36DC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yAbp_qLiuIdvzohLC2XyqamNORw.roa Signing time: Mon 10 Feb 2025 13:54:45 +0000 ROA not before: Mon 10 Feb 2025 13:54:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14044 (0x36dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C806E9FEA2E2B8876FCE884B0B65F2A9A98D391C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:32:00:c2:68:c7:fd:dc:e6:64:83:0f:43: 1d:14:bc:e8:14:c7:47:30:b6:e4:17:8a:44:34:4d: e7:03:e5:e7:67:66:96:b8:e9:9d:29:11:f1:b1:9f: e6:91:2b:c5:dc:3b:9a:3e:2c:ee:1f:05:78:28:47: 28:d9:03:62:ea:90:b8:13:5e:91:26:b0:1a:3a:79: 2d:df:9f:86:a8:ee:08:f8:dd:5a:8a:a0:4c:e0:9d: e0:ad:71:cc:f4:4f:89:ce:0a:dc:cc:f5:74:fe:22: e3:4d:13:24:4b:73:3e:fc:72:8b:d6:60:16:2e:95: ee:13:01:55:ca:39:fe:05:a3:15:6a:d6:40:2f:0e: b0:21:71:c4:5c:76:21:b8:d0:14:1e:92:fd:83:41: a6:ea:84:8e:f3:27:80:36:16:d1:7d:eb:a8:7d:b9: 83:fd:cc:bb:a4:10:4c:a7:35:5b:cd:29:b5:ff:c4: 79:b3:e7:70:22:03:c4:d4:ab:6e:58:f1:aa:23:29: 00:14:7b:18:d3:70:31:30:60:41:f6:a4:d4:76:6b: c4:0f:c0:3b:b7:a7:50:6b:62:01:56:a9:5c:11:a6: 9d:d2:74:6c:cf:73:07:03:b5:b1:44:1e:45:96:d5: 30:ac:3f:33:43:d1:b9:90:3d:c6:43:54:ad:63:61: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:06:E9:FE:A2:E2:B8:87:6F:CE:88:4B:0B:65:F2:A9:A9:8D:39:1C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yAbp_qLiuIdvzohLC2XyqamNORw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.196.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:f9:84:bd:7c:7c:1a:89:cc:5b:f9:cd:20:b7:a0:d5:7b:f3: 5f:54:d4:9a:0e:e7:6e:6e:6f:6a:eb:3a:48:4c:52:57:23:d5: 88:b1:a3:26:9c:f5:bb:de:26:a6:bc:48:4b:4f:11:6b:dc:53: 3e:5c:d8:b9:e2:34:c4:5c:38:c5:a1:cf:67:f2:ab:b0:27:42: fc:33:c9:7a:4d:03:0d:e4:8f:a6:f8:f1:fc:18:68:62:c7:b1: 38:f8:98:74:1a:94:1f:e9:61:0c:57:85:e2:03:26:47:10:e8: fe:e9:e5:cf:07:4b:b9:b1:38:fe:4f:c4:8a:00:6f:50:b7:e1: fb:01:bf:41:8a:49:67:3a:e1:43:25:17:35:03:75:8b:9a:81: f9:09:b9:62:d4:f2:62:32:86:46:e3:5e:7d:dc:14:38:cf:80: 8e:26:92:f0:3a:cd:43:b6:47:e2:e7:13:a5:89:ac:11:d9:91: fd:af:70:f7:27:b9:7b:90:3d:7e:4a:70:34:79:ad:83:88:4e: 83:2f:30:d3:6d:ab:0e:9e:88:ef:c5:19:19:be:1e:69:3e:68: e9:b5:cc:d5:f4:86:bd:dd:87:c2:b2:4e:d1:96:19:54:45:9d: bc:5e:7d:2c:be:4a:2b:81:68:1a:5b:ab:48:09:b2:e4:db:f0: 3b:a1:40:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4MDZFOUZFQTJFMkI4 ODc2RkNFODg0QjBCNjVGMkE5QTk4RDM5MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+kzIAwmjH/dzmZIMPQx0UvOgUx0cwtuQXikQ0TecD5ednZpa4 6Z0pEfGxn+aRK8XcO5o+LO4fBXgoRyjZA2LqkLgTXpEmsBo6eS3fn4ao7gj43VqK oEzgneCtccz0T4nOCtzM9XT+IuNNEyRLcz78covWYBYule4TAVXKOf4FoxVq1kAv DrAhccRcdiG40BQekv2DQabqhI7zJ4A2FtF966h9uYP9zLukEEynNVvNKbX/xHmz 53AiA8TUq25Y8aojKQAUexjTcDEwYEH2pNR2a8QPwDu3p1BrYgFWqVwRpp3SdGzP cwcDtbFEHkWW1TCsPzND0bmQPcZDVK1jYf/PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyAbp/qLiuIdvzohLC2XyqamNORwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lBYnBfcUxpdUlkdnpvaExD Mlh5cWFtTk9Sdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wcQwDQYJKoZIhvcNAQELBQADggEBAE75hL18fBqJzFv5zSC3oNV7819U1JoO525u b2rrOkhMUlcj1Yixoyac9bveJqa8SEtPEWvcUz5c2LniNMRcOMWhz2fyq7AnQvwz yXpNAw3kj6b48fwYaGLHsTj4mHQalB/pYQxXheIDJkcQ6P7p5c8HS7mxOP5PxIoA b1C34fsBv0GKSWc64UMlFzUDdYuagfkJuWLU8mIyhkbjXn3cFDjPgI4mkvA6zUO2 R+LnE6WJrBHZkf2vcPcnuXuQPX5KcDR5rYOIToMvMNNtqw6eiO/FGRm+Hmk+aOm1 zNX0hr3dh8KyTtGWGVRFnbxefSy+SiuBaBpbq0gJsuTb8DuhQFk= -----END CERTIFICATE-----Generated at Fri Apr 18 22:23:37 2025 by rpki-client