$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yCDossabrgskHluEMyAY-wRev5c.roa File: yCDossabrgskHluEMyAY-wRev5c.roa (raw, json) Hash identifier: 3kYd/DLLULM2b4eaWvcs0NcQZQGzvKVtJyofTviNIzo= Subject key identifier: C8:20:E8:B2:C6:9B:AE:0B:24:1E:5B:84:33:20:18:FB:04:5E:BF:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 356F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yCDossabrgskHluEMyAY-wRev5c.roa Signing time: Mon 10 Feb 2025 13:53:20 +0000 ROA not before: Mon 10 Feb 2025 13:53:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13679 (0x356f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C820E8B2C69BAE0B241E5B84332018FB045EBF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:32:c2:b2:56:d7:c0:8c:9d:f3:8b:9c:98:9c: 48:47:62:f6:a2:e1:c2:52:1f:d6:2f:38:86:8b:8b: 4b:a5:6e:ac:e9:f4:ff:0a:91:7b:61:91:2c:02:34: 39:ae:1d:b6:cf:c1:6f:23:fc:64:04:43:1f:4a:9b: 33:de:e7:28:80:fe:1c:be:f1:cc:b0:f8:b7:82:10: ff:be:5b:c4:8c:84:48:a9:f3:31:ec:b4:49:a0:15: d7:29:18:07:87:77:97:02:18:c3:9c:ba:47:e2:18: 11:ed:fd:ec:08:af:e4:82:c0:c7:2a:30:56:ea:d8: fc:f1:25:36:8b:92:ce:cb:72:f7:b7:b8:cd:55:21: 9d:e7:3d:e1:ae:cc:e0:01:f3:cd:bb:e4:f2:bd:45: 28:ac:b1:99:c1:aa:0c:38:5f:f6:e6:22:5a:ce:2c: a5:38:8a:ab:c9:22:21:b1:a2:51:a8:71:98:c0:68: b7:40:a1:75:c5:28:e2:42:72:fe:d6:c4:17:45:a7: 8a:a9:99:a7:5c:b1:16:69:4c:ae:1f:d7:96:9c:73: 08:9e:d8:9e:a4:97:d2:78:e5:6a:ac:b9:11:62:08: 20:ca:af:d5:aa:24:8f:32:9f:e2:6f:fa:97:fa:31: ac:84:b0:69:17:98:7f:ce:64:9f:03:cd:e5:85:04: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:20:E8:B2:C6:9B:AE:0B:24:1E:5B:84:33:20:18:FB:04:5E:BF:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yCDossabrgskHluEMyAY-wRev5c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.178.0/24 Signature Algorithm: sha256WithRSAEncryption 76:bc:63:f7:35:40:79:8c:5b:0f:85:a9:83:9c:38:ab:84:5e: a6:a7:28:36:06:28:45:d0:de:16:a0:57:45:fb:ba:31:d9:9d: 2d:e1:4e:68:e7:5c:f4:33:81:a5:eb:e7:49:4a:16:6b:c4:6c: ff:e5:39:99:8d:5c:92:5b:e3:77:e0:a0:11:64:6f:b4:14:f3: 7e:b1:d7:70:a7:35:c9:d0:44:65:7c:63:f8:8f:f9:89:97:d5: 8a:1f:98:ae:3a:f1:0e:8f:bf:1f:24:9a:3e:76:d8:a2:4c:45: f4:66:b3:22:91:cc:d4:8d:f5:72:32:e3:f3:72:46:9d:49:46: 25:95:29:5a:15:a2:1a:e1:c5:f3:77:8a:da:58:f8:11:51:ab: 37:58:be:90:c5:5c:8a:4c:2e:4f:82:02:76:6c:4f:5f:a3:7e: ba:ff:c6:66:d6:a7:c7:fb:69:b0:8b:2f:aa:e3:ca:39:7a:57: 28:d2:1f:70:8a:02:8f:44:1f:c0:87:1d:72:a4:f9:ed:e2:8b: d1:47:e8:5e:d3:2b:37:1a:26:c1:ef:27:74:f1:3c:a8:51:02: 1e:9f:8f:e8:4b:17:ff:cc:4d:a6:f7:7f:fd:a2:c4:2c:49:0c: 14:c2:a4:f1:25:ec:03:65:b0:e4:79:98:7b:3c:c3:68:30:ac: ae:2d:e2:2c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4MjBFOEIyQzY5QkFF MEIyNDFFNUI4NDMzMjAxOEZCMDQ1RUJGOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwMsKyVtfAjJ3zi5yYnEhHYvai4cJSH9YvOIaLi0ulbqzp9P8K kXthkSwCNDmuHbbPwW8j/GQEQx9KmzPe5yiA/hy+8cyw+LeCEP++W8SMhEip8zHs tEmgFdcpGAeHd5cCGMOcukfiGBHt/ewIr+SCwMcqMFbq2PzxJTaLks7Lcve3uM1V IZ3nPeGuzOAB88275PK9RSissZnBqgw4X/bmIlrOLKU4iqvJIiGxolGocZjAaLdA oXXFKOJCcv7WxBdFp4qpmadcsRZpTK4f15accwie2J6kl9J45WqsuRFiCCDKr9Wq JI8yn+Jv+pf6MayEsGkXmH/OZJ8DzeWFBG+xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyCDossabrgskHluEMyAY+wRev5cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lDRG9zc2Ficmdza0hsdUVN eUFZLXdSZXY1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w7IwDQYJKoZIhvcNAQELBQADggEBAHa8Y/c1QHmMWw+FqYOcOKuEXqanKDYGKEXQ 3hagV0X7ujHZnS3hTmjnXPQzgaXr50lKFmvEbP/lOZmNXJJb43fgoBFkb7QU836x 13CnNcnQRGV8Y/iP+YmX1YofmK468Q6Pvx8kmj522KJMRfRmsyKRzNSN9XIy4/Ny Rp1JRiWVKVoVohrhxfN3itpY+BFRqzdYvpDFXIpMLk+CAnZsT1+jfrr/xmbWp8f7 abCLL6rjyjl6VyjSH3CKAo9EH8CHHXKk+e3ii9FH6F7TKzcaJsHvJ3TxPKhRAh6f j+hLF//MTab3f/2ixCxJDBTCpPEl7ANlsOR5mHs8w2gwrK4t4iw= -----END CERTIFICATE-----Generated at Fri Apr 18 22:43:50 2025 by rpki-client