$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0ckzJyItKjy8KG1ILkDQWjhtw_E.roa File: 0ckzJyItKjy8KG1ILkDQWjhtw_E.roa (raw, json) Hash identifier: VlukQaGPPD6TuuVUqfZNtomJmkSBaxLzMY/CKToF3ZA= Subject key identifier: D1:C9:33:27:22:2D:2A:3C:BC:28:6D:48:2E:40:D0:5A:38:6D:C3:F1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34C6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0ckzJyItKjy8KG1ILkDQWjhtw_E.roa Signing time: Mon 10 Feb 2025 13:52:41 +0000 ROA not before: Mon 10 Feb 2025 13:52:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13510 (0x34c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D1C93327222D2A3CBC286D482E40D05A386DC3F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:c0:30:b7:6d:60:51:f3:31:bf:c2:4a:f6: c0:00:fb:71:a7:ba:ef:37:b0:b2:3e:8a:ac:44:c1: b5:fb:bb:ff:6e:9d:55:71:cb:44:5c:24:d1:58:6d: 97:9d:ea:38:2e:60:ef:03:55:d3:b4:b5:96:40:aa: 9f:1b:ca:97:34:34:2c:b9:d7:70:e7:79:2e:8f:e7: cf:72:62:a3:5b:49:d4:ad:7a:fe:08:1a:a1:9c:4d: a3:7a:30:0e:3d:a1:05:ab:c2:16:f5:05:c6:9f:fd: ac:32:f2:23:c3:73:b0:25:8a:c3:91:a2:83:ed:86: 77:ef:d5:e9:18:28:01:bb:ce:23:36:2d:1d:34:d2: 8a:6f:4b:a2:43:6c:c1:aa:b7:da:8a:6c:be:2c:37: 4a:78:e8:a4:8f:06:61:29:70:36:9f:33:d6:84:f3: 47:af:ae:73:30:65:0f:e9:74:89:0c:ba:9e:e0:3e: 4d:b7:dc:76:cc:26:a4:3c:f4:38:bb:5c:f0:f1:a3: 7b:5b:2c:90:cb:43:5f:39:b0:50:09:41:e6:df:92: c5:11:ba:20:86:65:84:4a:dc:4c:ca:88:be:52:86: a3:5c:05:04:ac:54:c0:2e:13:6e:82:07:85:35:91: 3c:d7:15:89:b2:ac:25:9b:d6:9e:ed:65:0d:39:6b: c7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C9:33:27:22:2D:2A:3C:BC:28:6D:48:2E:40:D0:5A:38:6D:C3:F1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0ckzJyItKjy8KG1ILkDQWjhtw_E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.240.0/21 Signature Algorithm: sha256WithRSAEncryption b2:31:6d:4f:b5:b6:0c:13:d7:9c:95:41:a6:7b:1b:bf:87:51: e9:cd:46:8c:00:8f:fc:97:bf:28:4d:7b:8c:46:e9:82:3d:cb: 35:06:1a:63:06:dc:d4:be:80:5f:05:cd:18:22:fa:03:fe:3a: e8:68:14:f7:96:f4:92:67:6e:6c:a8:d3:40:a0:7b:c2:46:20: 28:3b:c2:20:61:6f:40:17:e1:b9:76:ca:4f:91:c0:a8:7c:7d: 90:f7:9d:8b:ba:83:f3:e4:47:4c:4c:33:81:d6:14:8c:7c:b2: 4d:f3:41:1b:4a:1e:5d:20:d8:7c:a5:90:3e:81:38:b0:8b:67: b6:ed:43:a4:0e:d9:f0:85:47:00:a6:78:bd:72:12:7c:c2:55: 82:3f:a4:d4:da:56:8c:6f:dc:a0:5a:b2:1d:2e:5f:3c:0d:fb: 21:6b:5c:18:17:f1:7d:4c:62:7b:f4:76:6d:90:aa:ad:0b:f9: d3:00:b8:45:78:1f:03:7b:64:32:e9:9d:26:94:46:4e:0e:a2: 06:f1:85:a1:04:c6:8e:a0:1a:96:2a:83:86:b8:a9:36:c5:2f: 97:88:39:f2:e1:46:c9:d7:4f:a6:8a:6b:10:24:76:68:2e:85: c3:54:68:3d:9c:33:0a:79:3d:5a:99:18:d6:df:88:c5:d8:fb: 32:ff:4f:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxQzkzMzI3MjIyRDJB M0NCQzI4NkQ0ODJFNDBEMDVBMzg2REMzRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCms8Awt21gUfMxv8JK9sAA+3Gnuu83sLI+iqxEwbX7u/9unVVx y0RcJNFYbZed6jguYO8DVdO0tZZAqp8bypc0NCy513DneS6P589yYqNbSdStev4I GqGcTaN6MA49oQWrwhb1Bcaf/awy8iPDc7AlisORooPthnfv1ekYKAG7ziM2LR00 0opvS6JDbMGqt9qKbL4sN0p46KSPBmEpcDafM9aE80evrnMwZQ/pdIkMup7gPk23 3HbMJqQ89Di7XPDxo3tbLJDLQ185sFAJQebfksURuiCGZYRK3EzKiL5ShqNcBQSs VMAuE26CB4U1kTzXFYmyrCWb1p7tZQ05a8dBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0ckzJyItKjy8KG1ILkDQWjhtw/EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBja3pKeUl0S2p5OEtHMUlM a0RRV2podHdfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wvAwDQYJKoZIhvcNAQELBQADggEBALIxbU+1tgwT15yVQaZ7G7+HUenNRowAj/yX vyhNe4xG6YI9yzUGGmMG3NS+gF8FzRgi+gP+OuhoFPeW9JJnbmyo00Cge8JGICg7 wiBhb0AX4bl2yk+RwKh8fZD3nYu6g/PkR0xMM4HWFIx8sk3zQRtKHl0g2HylkD6B OLCLZ7btQ6QO2fCFRwCmeL1yEnzCVYI/pNTaVoxv3KBash0uXzwN+yFrXBgX8X1M Ynv0dm2Qqq0L+dMAuEV4HwN7ZDLpnSaURk4OogbxhaEExo6gGpYqg4a4qTbFL5eI OfLhRsnXT6aKaxAkdmguhcNUaD2cMwp5PVqZGNbfiMXY+zL/T5U= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:34 2025 by rpki-client