$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z8C5ySGib81X21QxDvArPyCBq5g.roa File: z8C5ySGib81X21QxDvArPyCBq5g.roa (raw, json) Hash identifier: iZP3e96p9HkqtDhbogWY9Tosii5xwVnv3raAmYS6ekQ= Subject key identifier: CF:C0:B9:C9:21:A2:6F:CD:57:DB:54:31:0E:F0:2B:3F:20:81:AB:98 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3378 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z8C5ySGib81X21QxDvArPyCBq5g.roa Signing time: Mon 10 Feb 2025 13:51:27 +0000 ROA not before: Mon 10 Feb 2025 13:51:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13176 (0x3378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CFC0B9C921A26FCD57DB54310EF02B3F2081AB98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:1e:8d:3d:ad:70:de:be:f4:01:9e:2e:a6: 0d:bd:83:1b:cd:bc:b0:06:41:ab:28:94:43:d9:52: 8a:e0:50:34:d9:0b:1d:dd:60:ec:66:11:7e:4f:c9: c6:08:08:19:e2:ba:c5:3f:eb:f4:77:20:e0:c3:8d: 3f:3a:49:3f:d1:57:c0:74:c4:f4:5d:3a:0d:6c:8f: 1a:18:98:c1:30:a0:40:d8:17:c1:98:4b:41:1c:e6: b8:83:7f:98:a2:17:ad:e4:8d:34:88:56:00:0b:fa: f8:4d:36:0c:44:9f:b3:9e:87:35:06:76:b3:78:9c: 6c:5c:e9:a2:d6:d6:8a:4d:a0:92:b4:f6:fd:83:ee: e4:5e:66:55:52:52:6b:60:10:3e:ae:6f:67:44:23: 05:11:7c:4d:f5:9d:ee:96:17:b0:9e:42:77:94:8a: c9:b8:7f:40:2e:0b:91:e0:1d:b4:92:df:12:09:39: 82:64:9f:eb:5e:c5:10:8e:c1:78:cc:c5:54:b2:6a: ef:29:91:28:c6:d4:de:4b:4d:50:26:08:a9:4e:54: 44:7c:a5:72:c6:c4:69:02:58:3c:7a:6b:eb:a4:1e: 43:b0:7f:46:a5:cf:0d:89:20:47:54:ff:7f:69:e2: 3e:3d:44:96:b9:21:75:5b:26:3b:f4:3c:fb:6d:e3: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C0:B9:C9:21:A2:6F:CD:57:DB:54:31:0E:F0:2B:3F:20:81:AB:98 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z8C5ySGib81X21QxDvArPyCBq5g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.200.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:6f:b5:5c:3d:6c:bc:4c:97:60:71:4f:fc:9d:bb:c5:9e:ee: ad:ab:16:19:9b:68:fb:50:cf:bf:a6:8d:3d:56:38:5f:b5:18: 9e:b2:85:f7:1f:84:26:1a:8d:af:f2:54:15:3a:b1:55:37:95: af:9e:80:b4:3c:fb:ce:51:2c:3e:ad:a9:36:23:94:4a:ec:4c: c6:08:bd:55:81:6c:31:69:d6:02:be:c0:04:11:96:f7:16:cb: 41:a8:46:fa:57:80:37:e8:f1:22:86:64:1a:29:70:a6:27:b9: d9:62:59:4b:70:bd:ea:37:af:c5:3c:5a:c6:ea:96:7b:e8:2a: eb:62:b2:8b:fc:3f:da:3b:3e:74:dd:47:17:84:2b:85:3b:f4: 1e:d6:a8:9e:53:3a:7f:f3:b8:27:e8:fa:c0:9a:1b:36:7f:e2: e4:ca:82:f9:ed:8c:2e:67:aa:b3:01:50:4a:2f:cc:9e:db:10: a8:35:bb:aa:1f:b9:95:a1:b4:53:44:63:fe:ee:f4:25:b9:b7: 30:86:b7:65:d3:ec:5c:69:2f:ff:bb:9d:f2:ca:b9:ac:91:de: 1c:4a:bf:57:33:99:1e:a0:95:2d:0f:5e:47:1a:29:ef:a1:97: d3:af:f8:6b:51:8f:c3:c1:2c:62:16:1a:93:34:c6:94:a5:f8: d9:29:93:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGQzBCOUM5MjFBMjZG Q0Q1N0RCNTQzMTBFRjAyQjNGMjA4MUFCOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDJB6NPa1w3r70AZ4upg29gxvNvLAGQasolEPZUorgUDTZCx3d YOxmEX5PycYICBniusU/6/R3IODDjT86ST/RV8B0xPRdOg1sjxoYmMEwoEDYF8GY S0Ec5riDf5iiF63kjTSIVgAL+vhNNgxEn7OehzUGdrN4nGxc6aLW1opNoJK09v2D 7uReZlVSUmtgED6ub2dEIwURfE31ne6WF7CeQneUism4f0AuC5HgHbSS3xIJOYJk n+texRCOwXjMxVSyau8pkSjG1N5LTVAmCKlOVER8pXLGxGkCWDx6a+ukHkOwf0al zw2JIEdU/39p4j49RJa5IXVbJjv0PPtt45htAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUz8C5ySGib81X21QxDvArPyCBq5gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3o4QzV5U0dpYjgxWDIxUXhE dkFyUHlDQnE1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w8gwDQYJKoZIhvcNAQELBQADggEBAE9vtVw9bLxMl2BxT/ydu8We7q2rFhmbaPtQ z7+mjT1WOF+1GJ6yhfcfhCYaja/yVBU6sVU3la+egLQ8+85RLD6tqTYjlErsTMYI vVWBbDFp1gK+wAQRlvcWy0GoRvpXgDfo8SKGZBopcKYnudliWUtwveo3r8U8Wsbq lnvoKutisov8P9o7PnTdRxeEK4U79B7WqJ5TOn/zuCfo+sCaGzZ/4uTKgvntjC5n qrMBUEovzJ7bEKg1u6ofuZWhtFNEY/7u9CW5tzCGt2XT7FxpL/+7nfLKuayR3hxK v1czmR6glS0PXkcaKe+hl9Ov+GtRj8PBLGIWGpM0xpSl+Nkpk7k= -----END CERTIFICATE-----Generated at Fri Apr 18 22:39:26 2025 by rpki-client