$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ythVEEQhP0kTJ9xBxbv16-OOeE8.roa File: ythVEEQhP0kTJ9xBxbv16-OOeE8.roa (raw, json) Hash identifier: gPTyzw/ef0OrHrKunFDQw76nCWutolQw5NVNsUJgEvo= Subject key identifier: CA:D8:55:10:44:21:3F:49:13:27:DC:41:C5:BB:F5:EB:E3:8E:78:4F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34AA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ythVEEQhP0kTJ9xBxbv16-OOeE8.roa Signing time: Mon 10 Feb 2025 13:52:36 +0000 ROA not before: Mon 10 Feb 2025 13:52:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CAD8551044213F491327DC41C5BBF5EBE38E784F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:bf:4b:9f:6e:55:6c:da:52:7b:94:3e:31: b8:37:8b:b3:bb:ea:87:db:0a:90:f4:20:9a:e8:e2: 12:9c:ee:3c:81:3c:f3:58:39:02:ab:c4:d9:66:09: c1:8e:7b:e7:29:d3:cb:53:27:26:df:9d:09:82:81: fc:a1:3b:40:b0:13:de:af:dd:b1:f0:1e:49:56:91: 8f:8e:da:9f:3e:c7:e8:e4:51:61:31:95:8d:44:85: 74:c9:42:69:8e:ab:9e:54:ca:76:bc:cd:8a:bd:a0: 34:ab:74:4c:92:23:1e:72:5c:b3:b9:b2:54:63:22: e3:57:53:5d:07:bb:51:a2:1f:da:6b:8b:78:78:03: 03:0d:98:95:9c:ba:5d:ba:d3:99:32:75:be:07:93: 63:46:27:60:5e:7d:96:ae:18:3c:62:12:43:4e:9e: ee:02:76:85:0e:a4:7e:01:a3:7a:85:6d:17:ba:87: 9a:ae:53:84:77:95:bb:32:98:8b:d0:6d:3a:2c:92: af:6b:ff:01:7a:34:eb:8b:9e:bf:bd:c8:e1:dd:9a: a5:52:3a:e2:c4:96:28:17:c6:e4:72:a5:3c:e7:b0: 2d:bf:c1:b7:e7:8e:3c:f4:35:c6:e6:3f:4e:1f:d8: 1d:45:69:87:a5:c5:ec:91:a1:0b:e0:c3:ca:33:28: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D8:55:10:44:21:3F:49:13:27:DC:41:C5:BB:F5:EB:E3:8E:78:4F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ythVEEQhP0kTJ9xBxbv16-OOeE8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.252.0/22 Signature Algorithm: sha256WithRSAEncryption 52:a7:a3:77:f8:5a:71:22:b5:12:89:1f:ec:23:19:e0:30:83: 0f:c2:2d:4a:6a:4a:ed:89:f2:91:4a:f2:3a:de:fe:33:2e:88: 6f:05:51:86:c2:c1:33:5c:dc:4f:93:d8:6e:dd:a2:64:86:eb: 43:03:84:af:7a:eb:ef:4c:5c:de:3a:2c:dc:36:27:71:e9:bc: cd:c2:be:f2:99:50:c4:47:38:9d:14:6e:fe:df:16:de:27:f4: 84:7f:d1:de:4d:6b:f3:60:12:23:83:96:ec:87:d7:e1:3c:f4: 87:55:26:1b:10:f4:be:c9:99:88:ad:de:fa:6f:33:9d:bb:24: 28:d7:33:bc:fe:80:32:57:87:eb:19:fc:41:79:35:12:96:06: e4:ad:f9:70:fd:cc:eb:13:ce:38:e3:cd:c1:5d:d4:f0:94:ba: b3:45:d3:28:93:15:12:d4:cc:f9:9b:7c:a0:fa:47:d7:c6:ce: 92:3b:5d:a8:f0:c7:be:9a:25:f2:f6:b6:95:6b:13:f3:3e:f1: 33:f1:32:57:d2:13:9a:c4:46:22:dd:9d:75:a4:50:94:e4:31: ba:2b:f6:17:c7:81:91:29:b1:e4:d3:de:68:08:95:67:ef:47: 07:35:b0:f5:8e:b4:57:40:5e:96:d8:92:03:4f:35:5e:40:74: 6e:3d:d5:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENBRDg1NTEwNDQyMTNG NDkxMzI3REM0MUM1QkJGNUVCRTM4RTc4NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz1L9Ln25VbNpSe5Q+Mbg3i7O76ofbCpD0IJro4hKc7jyBPPNY OQKrxNlmCcGOe+cp08tTJybfnQmCgfyhO0CwE96v3bHwHklWkY+O2p8+x+jkUWEx lY1EhXTJQmmOq55Uyna8zYq9oDSrdEySIx5yXLO5slRjIuNXU10Hu1GiH9pri3h4 AwMNmJWcul2605kydb4Hk2NGJ2BefZauGDxiEkNOnu4CdoUOpH4Bo3qFbRe6h5qu U4R3lbsymIvQbToskq9r/wF6NOuLnr+9yOHdmqVSOuLEligXxuRypTznsC2/wbfn jjz0NcbmP04f2B1FaYelxeyRoQvgw8ozKC2DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUythVEEQhP0kTJ9xBxbv16+OOeE8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3l0aFZFRVFoUDBrVEo5eEJ4 YnYxNi1PT2VFOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wvwwDQYJKoZIhvcNAQELBQADggEBAFKno3f4WnEitRKJH+wjGeAwgw/CLUpqSu2J 8pFK8jre/jMuiG8FUYbCwTNc3E+T2G7domSG60MDhK966+9MXN46LNw2J3HpvM3C vvKZUMRHOJ0Ubv7fFt4n9IR/0d5Na/NgEiODluyH1+E89IdVJhsQ9L7JmYit3vpv M527JCjXM7z+gDJXh+sZ/EF5NRKWBuSt+XD9zOsTzjjjzcFd1PCUurNF0yiTFRLU zPmbfKD6R9fGzpI7Xajwx76aJfL2tpVrE/M+8TPxMlfSE5rERiLdnXWkUJTkMbor 9hfHgZEpseTT3mgIlWfvRwc1sPWOtFdAXpbYkgNPNV5AdG491eI= -----END CERTIFICATE-----Generated at Fri Apr 18 23:15:53 2025 by rpki-client