$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Irgpx46yxBLzUvOn7LWDJkPEkE.roa File: 1Irgpx46yxBLzUvOn7LWDJkPEkE.roa (raw, json) Hash identifier: PvjgRwIA/isySbt1gMJ7Ndz9r1OEp3Wz4P/NJFGlcUY= Subject key identifier: D4:8A:E0:A7:1E:3A:CB:10:4B:CD:4B:CE:9F:B2:D6:0C:99:0F:12:41 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 362E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Irgpx46yxBLzUvOn7LWDJkPEkE.roa Signing time: Mon 10 Feb 2025 13:54:04 +0000 ROA not before: Mon 10 Feb 2025 13:54:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13870 (0x362e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D48AE0A71E3ACB104BCD4BCE9FB2D60C990F1241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:be:01:3c:88:5a:ee:6b:e4:d9:0c:75:fe: 50:07:3e:30:53:aa:a3:f7:12:ac:bf:7c:cd:3d:4a: f3:1a:ce:12:7a:e3:cc:c5:9a:ad:0a:73:99:56:6a: bb:c0:2a:1c:00:0e:27:76:30:11:d3:34:7f:84:29: ed:c4:fb:2b:c0:18:58:06:99:17:f7:18:cf:c2:ab: c9:c4:f5:75:82:d8:1a:28:e0:6e:8c:fc:ab:9a:41: b0:f0:71:7b:ca:79:d8:6e:a2:06:75:76:85:b2:32: b2:14:9c:06:56:d6:38:03:16:1c:c7:2b:54:16:b7: cf:80:8f:4d:99:57:52:b8:cb:4f:64:70:bb:a8:31: 2b:69:62:6a:bf:59:bb:88:7a:39:65:d5:49:f2:f2: 9c:e1:28:a2:08:39:96:f9:19:a4:8f:71:6f:b3:5b: f8:ec:3b:9c:1a:75:db:be:02:af:df:ae:0a:97:11: cc:1d:10:35:cb:f2:70:2d:34:72:59:e1:1f:3d:8f: ac:48:e8:76:e1:aa:41:f4:3d:cb:43:2f:ae:f8:91: 6a:59:7e:17:c5:82:db:65:33:40:55:a3:a4:1d:a0: 22:62:13:a5:e2:08:e5:2c:b4:3f:0e:8f:9b:c6:bc: 75:f2:c5:03:b8:7f:68:29:7e:e6:39:69:1f:16:b6: 3c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8A:E0:A7:1E:3A:CB:10:4B:CD:4B:CE:9F:B2:D6:0C:99:0F:12:41 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Irgpx46yxBLzUvOn7LWDJkPEkE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.96.0/21 Signature Algorithm: sha256WithRSAEncryption a5:75:67:69:29:f1:12:c8:fb:18:8e:5e:52:bf:98:68:c0:89: 23:86:dc:8d:4e:22:5f:51:a8:77:a0:8b:9d:71:5b:53:72:4d: 7f:52:d8:15:54:2b:ec:62:db:ea:ab:d0:ec:95:e1:45:d7:60: d9:8b:67:a8:af:ef:01:71:fc:25:cc:13:48:e4:74:e4:9f:2f: a5:7b:56:27:07:60:2d:e9:39:53:cf:fe:89:d3:93:89:16:9c: bb:37:29:17:32:5e:57:5f:2d:2f:fa:98:a0:f3:48:82:ee:99: c5:ec:8d:a7:dd:9a:3e:ef:ea:38:16:bc:b5:89:24:7f:20:92: 0d:63:51:50:27:85:87:8b:fb:f8:12:04:a3:41:42:d6:b0:6c: 40:20:2f:aa:05:f0:ef:ed:2a:b7:72:38:34:b4:8d:68:cb:22: e6:15:03:ef:4a:70:ab:4e:cc:f1:d7:e2:b9:7e:6c:f8:e9:db: a4:9a:f9:d3:e0:b9:bd:d8:fc:d9:96:ae:3d:26:9a:83:05:97: af:c9:a2:6e:c4:3e:89:50:d5:21:51:c7:fa:cf:35:63:fa:db: d3:77:ae:8e:4f:ec:c9:49:61:f9:93:36:60:cb:c5:0d:44:6f: bc:08:f8:cf:e3:ea:57:8c:8d:0f:7e:47:dd:a1:a8:1e:2a:70: 10:61:8a:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ0OEFFMEE3MUUzQUNC MTA0QkNENEJDRTlGQjJENjBDOTkwRjEyNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQB74BPIha7mvk2Qx1/lAHPjBTqqP3Eqy/fM09SvMazhJ648zF mq0Kc5lWarvAKhwADid2MBHTNH+EKe3E+yvAGFgGmRf3GM/Cq8nE9XWC2Boo4G6M /KuaQbDwcXvKedhuogZ1doWyMrIUnAZW1jgDFhzHK1QWt8+Aj02ZV1K4y09kcLuo MStpYmq/WbuIejll1Uny8pzhKKIIOZb5GaSPcW+zW/jsO5waddu+Aq/frgqXEcwd EDXL8nAtNHJZ4R89j6xI6HbhqkH0PctDL674kWpZfhfFgttlM0BVo6QdoCJiE6Xi COUstD8Oj5vGvHXyxQO4f2gpfuY5aR8WtjzDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1Irgpx46yxBLzUvOn7LWDJkPEkEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFJcmdweDQ2eXhCTHpVdk9u N0xXREprUEVrRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wWAwDQYJKoZIhvcNAQELBQADggEBAKV1Z2kp8RLI+xiOXlK/mGjAiSOG3I1OIl9R qHegi51xW1NyTX9S2BVUK+xi2+qr0OyV4UXXYNmLZ6iv7wFx/CXME0jkdOSfL6V7 VicHYC3pOVPP/onTk4kWnLs3KRcyXldfLS/6mKDzSILumcXsjafdmj7v6jgWvLWJ JH8gkg1jUVAnhYeL+/gSBKNBQtawbEAgL6oF8O/tKrdyODS0jWjLIuYVA+9KcKtO zPHX4rl+bPjp26Sa+dPgub3Y/NmWrj0mmoMFl6/Jom7EPolQ1SFRx/rPNWP629N3 ro5P7MlJYfmTNmDLxQ1Eb7wI+M/j6leMjQ9+R92hqB4qcBBhiog= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:07 2025 by rpki-client