$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WxrHm1QZ8wgBuhM9giEE3RwCzY.roa File: -WxrHm1QZ8wgBuhM9giEE3RwCzY.roa (raw, json) Hash identifier: /6dZoScHQ8jwm+nyD4l+ybiSPo7GuX3SqdxBbZNK1a4= Subject key identifier: F9:6C:6B:1E:6D:50:67:CC:20:06:E8:4C:F6:08:84:13:74:70:0B:36 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36A5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WxrHm1QZ8wgBuhM9giEE3RwCzY.roa Signing time: Mon 10 Feb 2025 13:54:32 +0000 ROA not before: Mon 10 Feb 2025 13:54:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.238.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13989 (0x36a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F96C6B1E6D5067CC2006E84CF608841374700B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:ea:48:5b:95:14:8b:ff:20:72:ea:e6:33: 8e:2c:d7:03:e1:28:9b:39:1d:0b:60:07:3f:24:bd: 84:01:44:fc:06:b3:84:07:96:fc:57:a2:19:21:c6: ef:88:a4:74:3f:a4:83:42:36:a2:52:9b:e0:ea:af: f5:ac:ff:e5:f4:d5:ab:77:68:9a:df:24:ce:0e:a9: 4f:9a:ab:4f:5d:e6:66:da:3c:1f:12:5b:10:4a:00: f6:25:b4:92:35:3e:1f:15:9f:56:bc:c6:49:4e:a6: 7d:a1:b0:be:b1:a8:3a:c0:3a:62:52:0e:f0:85:0b: b4:04:66:b7:3f:2d:ae:a8:ad:b4:52:78:a0:73:79: 6d:01:b0:66:8b:a9:76:f8:b3:c4:e5:b5:47:f6:1d: 6a:cc:2f:22:5c:9f:9d:4e:04:60:17:68:c9:51:9d: a3:b4:e2:01:60:42:58:df:18:2a:48:89:22:44:58: 34:7c:9d:c4:3a:61:1d:18:2d:f3:ec:4e:d2:95:87: ed:52:e2:a8:a6:49:ef:35:ef:e2:df:ed:ea:9c:0e: 71:8d:09:e9:74:e9:58:ef:37:bb:a8:29:14:25:b5: 78:12:e1:b9:83:24:b5:15:1e:10:12:98:84:4c:98: fc:3b:04:20:c9:b1:86:3a:c1:8b:52:12:83:79:51: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6C:6B:1E:6D:50:67:CC:20:06:E8:4C:F6:08:84:13:74:70:0B:36 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WxrHm1QZ8wgBuhM9giEE3RwCzY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.128/25 Signature Algorithm: sha256WithRSAEncryption 1a:39:5e:42:e1:db:6c:2e:f6:d1:ee:38:c0:5a:40:0d:41:44: d6:13:68:b0:95:61:1a:0c:b0:49:7a:8a:50:f7:ae:fc:51:85: 11:c1:3d:56:31:2f:39:6e:09:aa:a6:66:07:77:50:49:fe:6d: ee:3a:59:9e:66:41:5a:73:c0:f3:c9:23:30:29:05:a9:9e:1e: b6:d1:11:40:e8:14:73:4c:2c:dd:c5:ff:7c:0b:81:9b:89:16: e9:89:8e:cf:fa:34:a5:c0:75:93:14:05:77:8a:a0:0a:da:e1: 1e:c7:54:01:96:d2:ee:8a:4c:fa:6f:70:e5:fe:c9:50:26:5f: 0a:98:89:e3:33:d4:0a:8c:4a:1a:c3:92:c1:d9:1b:68:d1:18: 74:65:fa:63:ec:90:3e:fc:1a:f2:5f:e2:e4:52:20:25:7a:d0: 80:61:05:db:6a:da:a5:48:19:71:c0:62:76:3a:b2:d6:33:ec: e6:0b:7c:6e:c4:c8:a3:10:3b:4e:a4:f9:55:33:a8:cc:47:86: 17:5c:65:a0:7c:11:62:f4:02:ce:37:b7:4f:74:c1:87:e2:af: 1f:d1:8a:f0:0d:95:be:dc:2b:19:04:d5:52:c1:2e:e9:b2:81: e6:66:64:15:d2:b1:78:5e:ac:6f:87:b4:5b:3b:57:42:23:8b: ce:d8:a3:a7 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY5NkM2QjFFNkQ1MDY3 Q0MyMDA2RTg0Q0Y2MDg4NDEzNzQ3MDBCMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfn+pIW5UUi/8gcurmM44s1wPhKJs5HQtgBz8kvYQBRPwGs4QH lvxXohkhxu+IpHQ/pINCNqJSm+Dqr/Ws/+X01at3aJrfJM4OqU+aq09d5mbaPB8S WxBKAPYltJI1Ph8Vn1a8xklOpn2hsL6xqDrAOmJSDvCFC7QEZrc/La6orbRSeKBz eW0BsGaLqXb4s8TltUf2HWrMLyJcn51OBGAXaMlRnaO04gFgQljfGCpIiSJEWDR8 ncQ6YR0YLfPsTtKVh+1S4qimSe817+Lf7eqcDnGNCel06VjvN7uoKRQltXgS4bmD JLUVHhASmIRMmPw7BCDJsYY6wYtSEoN5UUCtAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU+WxrHm1QZ8wgBuhM9giEE3RwCzYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1XeHJIbTFRWjh3Z0J1aE05 Z2lFRTNSd0N6WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+6AMA0GCSqGSIb3DQEBCwUAA4IBAQAaOV5C4dtsLvbR7jjAWkANQUTWE2iwlWEa DLBJeopQ9678UYURwT1WMS85bgmqpmYHd1BJ/m3uOlmeZkFac8DzySMwKQWpnh62 0RFA6BRzTCzdxf98C4GbiRbpiY7P+jSlwHWTFAV3iqAK2uEex1QBltLuikz6b3Dl /slQJl8KmInjM9QKjEoaw5LB2Rto0Rh0Zfpj7JA+/BryX+LkUiAletCAYQXbatql SBlxwGJ2OrLWM+zmC3xuxMijEDtOpPlVM6jMR4YXXGWgfBFi9ALON7dPdMGH4q8f 0YrwDZW+3CsZBNVSwS7psoHmZmQV0rF4Xqxvh7RbO1dCI4vO2KOn -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:07 2025 by rpki-client