$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6gNsgWj6K3tqXTOyACH-yby1O5E.roa File: 6gNsgWj6K3tqXTOyACH-yby1O5E.roa (raw, json) Hash identifier: uUAmS9BuKbaOb5edWhbQt3n+CyDlxXJbHGXrWsRdfGg= Subject key identifier: EA:03:6C:81:68:FA:2B:7B:6A:5D:33:B2:00:21:FE:C9:BC:B5:3B:91 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 367B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6gNsgWj6K3tqXTOyACH-yby1O5E.roa Signing time: Mon 10 Feb 2025 13:54:21 +0000 ROA not before: Mon 10 Feb 2025 13:54:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13947 (0x367b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EA036C8168FA2B7B6A5D33B20021FEC9BCB53B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:9d:9c:0c:75:da:6f:2c:66:90:6b:fa:d6: 88:d3:4f:dc:14:2e:54:ad:2a:92:2d:8f:8b:da:f6: 35:6f:0d:44:bb:17:78:77:42:8a:a2:80:53:cd:1b: 6e:08:f0:54:b6:75:dc:6c:d5:61:08:87:d8:57:e2: 66:f9:14:d6:52:f3:f1:b9:df:90:26:6e:28:95:e3: 7b:5f:b7:ae:46:4e:4d:91:e6:2f:95:cf:ae:ac:9f: e9:2f:50:0d:75:00:91:21:d8:ca:40:9e:a5:2a:ac: a5:ae:d7:4d:65:b9:d1:f8:46:1a:57:01:81:7d:75: 30:32:98:ce:6b:a6:26:f8:89:60:49:c7:03:8a:b1: e2:7b:6e:b2:e7:98:5f:31:a0:56:c5:42:57:f7:ac: 8b:d4:74:53:e1:bb:ae:bd:c1:a8:bf:0a:0d:56:8e: e2:90:7a:e0:35:8e:89:de:d1:66:cc:cf:d6:ff:e2: 95:b1:f8:33:96:1f:4c:e5:cf:d0:80:3d:40:ac:e9: 4b:7c:32:b6:b6:8e:b2:65:d7:22:a0:57:9a:5f:f5: e6:f3:30:1c:bb:cc:52:5e:4c:a6:cd:b4:a2:b1:f3: c3:db:19:b5:cf:3e:e7:21:aa:cd:a0:82:2e:02:32: 8f:8a:23:65:06:06:4b:2e:b4:51:12:30:d7:d8:4f: 54:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:03:6C:81:68:FA:2B:7B:6A:5D:33:B2:00:21:FE:C9:BC:B5:3B:91 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6gNsgWj6K3tqXTOyACH-yby1O5E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.172.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:3c:f4:ae:b0:f8:fa:c8:f4:c0:24:87:83:2b:f1:ba:c2:44: ad:13:d2:34:17:d3:89:1c:0c:c9:15:f9:90:2a:99:63:4e:50: a3:40:31:ff:94:a3:9c:5e:64:dd:a3:f7:3f:45:d9:38:6a:ba: 13:ba:6b:50:8d:57:82:91:d4:e9:f0:4e:f6:fd:bd:f2:f4:00: 10:1c:f2:83:d2:1a:f4:d2:51:6a:17:a6:18:d5:a9:52:1b:39: 2e:90:f4:81:9e:81:20:5e:0d:4c:d6:64:44:ca:23:eb:50:67: ee:1e:df:f1:a1:b7:0b:24:a7:c5:dd:37:ab:6a:0a:fb:77:4d: 52:d3:f1:bb:db:98:1a:48:4f:8b:d8:81:12:43:2c:0b:04:14: 48:b8:79:96:8b:30:b7:c5:ea:a9:08:35:6d:b7:50:90:ae:0a: ac:97:70:b3:ee:be:c2:a0:e3:f4:ae:a1:90:9e:9f:14:a1:49: 90:a0:06:73:94:fd:18:c1:24:5c:79:e2:57:99:f9:38:63:ea: 5e:73:b3:dc:4f:f8:1f:89:64:34:67:35:54:ed:68:ce:bf:a4: ef:a3:81:02:51:cc:b7:04:77:1f:26:0f:57:b1:27:e3:92:d1: 6a:2f:0f:49:d4:58:24:33:d1:31:8a:79:6b:98:0b:ae:b7:75: d0:b5:bc:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVBMDM2QzgxNjhGQTJC N0I2QTVEMzNCMjAwMjFGRUM5QkNCNTNCOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxA52cDHXabyxmkGv61ojTT9wULlStKpItj4va9jVvDUS7F3h3 QoqigFPNG24I8FS2ddxs1WEIh9hX4mb5FNZS8/G535AmbiiV43tft65GTk2R5i+V z66sn+kvUA11AJEh2MpAnqUqrKWu101ludH4RhpXAYF9dTAymM5rpib4iWBJxwOK seJ7brLnmF8xoFbFQlf3rIvUdFPhu669wai/Cg1WjuKQeuA1jone0WbMz9b/4pWx +DOWH0zlz9CAPUCs6Ut8Mra2jrJl1yKgV5pf9ebzMBy7zFJeTKbNtKKx88PbGbXP Puchqs2ggi4CMo+KI2UGBksutFESMNfYT1QBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6gNsgWj6K3tqXTOyACH+yby1O5EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZnTnNnV2o2SzN0cVhUT3lB Q0gteWJ5MU81RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w6wwDQYJKoZIhvcNAQELBQADggEBAJ489K6w+PrI9MAkh4Mr8brCRK0T0jQX04kc DMkV+ZAqmWNOUKNAMf+Uo5xeZN2j9z9F2ThquhO6a1CNV4KR1OnwTvb9vfL0ABAc 8oPSGvTSUWoXphjVqVIbOS6Q9IGegSBeDUzWZETKI+tQZ+4e3/Ghtwskp8XdN6tq Cvt3TVLT8bvbmBpIT4vYgRJDLAsEFEi4eZaLMLfF6qkINW23UJCuCqyXcLPuvsKg 4/SuoZCenxShSZCgBnOU/RjBJFx54leZ+Thj6l5zs9xP+B+JZDRnNVTtaM6/pO+j gQJRzLcEdx8mD1exJ+OS0WovD0nUWCQz0TGKeWuYC663ddC1vO4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:11 2025 by rpki-client