$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yMXpKgmTxDGYTA6aqPbTtqS0rx4.roa File: yMXpKgmTxDGYTA6aqPbTtqS0rx4.roa (raw, json) Hash identifier: veCKcMCd+Xv8hJvE+h4kXE2HVQlpfNoWgzMGvngI5TU= Subject key identifier: C8:C5:E9:2A:09:93:C4:31:98:4C:0E:9A:A8:F6:D3:B6:A4:B4:AF:1E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34F8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yMXpKgmTxDGYTA6aqPbTtqS0rx4.roa Signing time: Mon 10 Feb 2025 13:52:52 +0000 ROA not before: Mon 10 Feb 2025 13:52:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.204.96/29 maxlen: 29 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13560 (0x34f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C8C5E92A0993C431984C0E9AA8F6D3B6A4B4AF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:37:f1:2d:c5:7e:d5:1c:3a:51:98:a8:b4: 53:0f:6a:a8:76:7b:59:60:ab:9d:9b:a0:06:0e:aa: ac:77:b9:c2:bd:f5:91:92:dd:29:06:76:57:8e:54: fd:0f:ea:73:f5:97:fd:2f:82:94:be:85:09:bf:04: d1:f2:7e:c7:e5:93:a5:3c:50:04:f7:f5:b6:2b:0c: 31:f0:bf:fa:a0:10:93:b9:d1:09:df:d6:fc:a0:e7: c0:d3:18:31:19:d4:39:fd:ec:3d:c8:9a:c9:99:89: 3e:fd:9d:6f:7b:5b:85:3b:99:6d:7c:31:ae:e9:da: 54:15:ac:b1:92:ce:fb:db:43:0d:58:ed:c5:fa:5b: 7c:53:37:0c:d3:49:d4:a7:a7:0b:82:88:49:a0:ea: e0:82:b5:0d:bd:f6:c3:b4:f4:01:d5:3e:0a:f8:1d: d6:0f:cd:79:a6:5a:4f:2d:38:a8:fa:dd:69:45:d3: 5c:2f:71:59:e6:46:c2:6e:8e:9f:f3:d6:6b:f4:54: 27:82:79:08:63:01:fe:89:7b:42:3c:d8:83:4c:6c: 4f:94:11:2d:db:ae:eb:20:c6:32:0d:21:f9:37:14: 50:d8:54:f8:d3:ee:6d:bd:97:0d:19:a0:82:4a:ee: a0:eb:c8:4a:00:ff:1c:43:58:7c:99:53:a2:8e:f8: f3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C5:E9:2A:09:93:C4:31:98:4C:0E:9A:A8:F6:D3:B6:A4:B4:AF:1E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yMXpKgmTxDGYTA6aqPbTtqS0rx4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.204.96/29 Signature Algorithm: sha256WithRSAEncryption 02:e9:48:27:1f:a8:6d:63:72:59:6d:70:ef:e0:52:d0:98:0d: 17:45:d9:23:ee:0d:d1:a9:4c:b2:38:7e:cb:d6:1a:37:86:57: cd:64:7a:55:5b:67:15:fd:91:0d:24:de:99:d7:b8:11:20:92: c4:05:25:36:e2:f3:62:ca:d3:ad:f6:7e:9f:30:52:49:da:ad: 34:42:ca:f1:0c:53:e1:1d:ba:3f:ff:5d:10:00:1a:de:02:2e: 33:60:1c:91:82:0d:d0:1e:59:09:cc:d3:7f:c9:10:1b:e7:78: c4:52:c4:0e:d7:f4:b8:88:98:61:12:40:9e:7d:fa:84:e0:df: 57:01:79:06:08:78:60:8c:04:82:21:36:ed:15:2a:a5:1e:da: 02:63:e8:4a:7c:c9:0c:0a:56:f9:6b:f3:c4:b1:54:1e:c0:d4: e6:54:52:bb:e4:b6:b5:b8:5c:23:3a:b6:f7:22:91:51:f6:52: 5f:a1:ac:df:13:1e:37:ff:c7:f4:17:1d:81:7e:fc:01:a9:93: 1c:28:dd:81:49:bb:b8:b8:2e:4c:39:11:6f:50:c1:b6:e7:42: b8:c6:11:76:84:16:a2:2f:22:f2:6b:65:f1:b9:36:32:01:46: fb:80:94:28:97:f8:f9:ca:ab:d6:74:4b:df:95:86:39:f2:f7: 04:7d:2b:81 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4QzVFOTJBMDk5M0M0 MzE5ODRDMEU5QUE4RjZEM0I2QTRCNEFGMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3GjfxLcV+1Rw6UZiotFMPaqh2e1lgq52boAYOqqx3ucK99ZGS 3SkGdleOVP0P6nP1l/0vgpS+hQm/BNHyfsflk6U8UAT39bYrDDHwv/qgEJO50Qnf 1vyg58DTGDEZ1Dn97D3ImsmZiT79nW97W4U7mW18Ma7p2lQVrLGSzvvbQw1Y7cX6 W3xTNwzTSdSnpwuCiEmg6uCCtQ299sO09AHVPgr4HdYPzXmmWk8tOKj63WlF01wv cVnmRsJujp/z1mv0VCeCeQhjAf6Je0I82INMbE+UES3brusgxjINIfk3FFDYVPjT 7m29lw0ZoIJK7qDryEoA/xxDWHyZU6KO+PO1AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUyMXpKgmTxDGYTA6aqPbTtqS0rx4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lNWHBLZ21UeERHWVRBNmFx UGJUdHFTMHJ4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQN7 wsxgMA0GCSqGSIb3DQEBCwUAA4IBAQAC6UgnH6htY3JZbXDv4FLQmA0XRdkj7g3R qUyyOH7L1ho3hlfNZHpVW2cV/ZENJN6Z17gRIJLEBSU24vNiytOt9n6fMFJJ2q00 QsrxDFPhHbo//10QABreAi4zYByRgg3QHlkJzNN/yRAb53jEUsQO1/S4iJhhEkCe ffqE4N9XAXkGCHhgjASCITbtFSqlHtoCY+hKfMkMClb5a/PEsVQewNTmVFK75La1 uFwjOrb3IpFR9lJfoazfEx43/8f0Fx2BfvwBqZMcKN2BSbu4uC5MORFvUMG250K4 xhF2hBaiLyLya2XxuTYyAUb7gJQol/j5yqvWdEvflYY58vcEfSuB -----END CERTIFICATE-----Generated at Tue Apr 22 15:13:58 2025 by rpki-client