$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4AfT6Do191iX2OulMRDDeAPsOt8.roa File: 4AfT6Do191iX2OulMRDDeAPsOt8.roa (raw, json) Hash identifier: 3hNAjSAXhwASpNQ7YP+Q75SChRPRb0Imz+3byI/e6MU= Subject key identifier: E0:07:D3:E8:3A:35:F7:58:97:D8:EB:A5:31:10:C3:78:03:EC:3A:DF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36A9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4AfT6Do191iX2OulMRDDeAPsOt8.roa Signing time: Mon 10 Feb 2025 13:54:33 +0000 ROA not before: Mon 10 Feb 2025 13:54:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13993 (0x36a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E007D3E83A35F75897D8EBA53110C37803EC3ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:a9:08:43:5c:a1:85:3d:10:e8:ce:2c:df: 9c:4c:e0:6b:13:67:e2:ad:87:06:e4:53:15:4f:08: e7:8c:c3:e7:14:04:f8:30:b4:50:ee:dd:4e:74:e8: 20:87:b6:54:5f:28:40:fd:b3:05:b8:21:42:fc:ce: 31:51:94:7d:52:cf:e4:c4:c6:ec:83:7b:c5:bd:4a: 3f:d8:f2:4d:93:db:5c:3c:71:6f:2c:26:cb:9d:3c: de:42:48:45:d0:43:40:c4:cc:a1:b4:d2:a7:b5:e5: 68:26:63:76:6f:19:d0:08:9d:80:57:21:64:a1:87: 9b:57:f0:ce:d1:61:cd:4c:61:bc:3f:df:15:8f:62: 57:73:dc:3f:41:7b:f1:3b:7b:2a:48:d1:ad:74:08: b4:ab:79:ec:af:6a:06:12:98:f7:b2:62:fa:63:97: d9:65:24:61:25:a5:5a:52:e8:7a:cc:55:25:79:1a: 30:b4:77:9f:34:3c:6f:6a:01:09:44:80:2f:c3:e3: 05:9d:5f:85:24:26:a8:34:fc:05:b0:1a:cb:33:3e: 7e:07:f3:65:37:e0:82:d0:ac:0a:7a:68:18:25:db: d5:ba:64:2c:52:87:7a:eb:af:99:f2:59:76:12:96: ba:35:b8:d8:7e:36:7b:92:f8:6e:31:9d:3b:e4:47: 25:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:07:D3:E8:3A:35:F7:58:97:D8:EB:A5:31:10:C3:78:03:EC:3A:DF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4AfT6Do191iX2OulMRDDeAPsOt8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.216.0/22 Signature Algorithm: sha256WithRSAEncryption 58:3d:4e:77:81:c4:d0:45:8a:6e:51:c2:6f:97:31:f9:24:fe: b5:84:e4:14:61:e1:a5:ad:88:a6:f2:ed:77:39:36:02:53:90: ba:f2:7e:0c:d3:eb:8b:ca:3a:8c:04:62:23:2c:42:47:9e:0b: 33:4b:6b:4e:bc:b6:c5:10:4d:82:90:79:94:df:8c:bd:ba:02: 42:77:13:64:b2:4c:2b:fc:ff:7e:33:04:c7:48:3d:3e:b5:20: f6:25:c0:38:94:d7:53:80:0e:33:2e:61:52:e4:81:39:22:5f: 8f:16:d8:b3:9f:ef:c4:f6:86:8a:22:d3:7b:50:a3:b2:52:c6: db:a1:70:e5:99:8b:92:e4:f5:ec:3b:5c:0b:b5:d7:04:be:3d: 71:49:57:17:33:ed:50:5e:e4:5b:cd:72:64:b1:51:48:ba:20: e6:17:76:21:78:f4:f7:81:23:11:49:99:a7:c9:4f:04:49:9c: d9:07:e2:8c:bd:f2:a8:a8:a7:e0:24:72:4c:af:42:3a:37:2f: 22:25:06:ed:57:10:54:2d:00:da:3a:5b:9f:87:00:d3:33:95: 32:d7:f6:3f:15:5d:3b:3f:0c:bb:5b:ba:3b:ac:ca:b9:d1:3e: 0a:78:66:62:01:02:bc:ee:cb:c8:b8:34:e6:85:78:ee:e9:32: 2d:7d:a8:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUwMDdEM0U4M0EzNUY3 NTg5N0Q4RUJBNTMxMTBDMzc4MDNFQzNBREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQGqkIQ1yhhT0Q6M4s35xM4GsTZ+KthwbkUxVPCOeMw+cUBPgw tFDu3U506CCHtlRfKED9swW4IUL8zjFRlH1Sz+TExuyDe8W9Sj/Y8k2T21w8cW8s JsudPN5CSEXQQ0DEzKG00qe15WgmY3ZvGdAInYBXIWShh5tX8M7RYc1MYbw/3xWP Yldz3D9Be/E7eypI0a10CLSreeyvagYSmPeyYvpjl9llJGElpVpS6HrMVSV5GjC0 d580PG9qAQlEgC/D4wWdX4UkJqg0/AWwGsszPn4H82U34ILQrAp6aBgl29W6ZCxS h3rrr5nyWXYSlro1uNh+NnuS+G4xnTvkRyU9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4AfT6Do191iX2OulMRDDeAPsOt8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRBZlQ2RG8xOTFpWDJPdWxN UkREZUFQc090OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wNgwDQYJKoZIhvcNAQELBQADggEBAFg9TneBxNBFim5Rwm+XMfkk/rWE5BRh4aWt iKby7Xc5NgJTkLryfgzT64vKOowEYiMsQkeeCzNLa068tsUQTYKQeZTfjL26AkJ3 E2SyTCv8/34zBMdIPT61IPYlwDiU11OADjMuYVLkgTkiX48W2LOf78T2hooi03tQ o7JSxtuhcOWZi5Lk9ew7XAu11wS+PXFJVxcz7VBe5FvNcmSxUUi6IOYXdiF49PeB IxFJmafJTwRJnNkH4oy98qiop+AkckyvQjo3LyIlBu1XEFQtANo6W5+HANMzlTLX 9j8VXTs/DLtbujusyrnRPgp4ZmIBArzuy8i4NOaFeO7pMi19qFs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:41 2025 by rpki-client