$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9BB94CRu7TgEIAmopXvmNDUOaQc.roa File: 9BB94CRu7TgEIAmopXvmNDUOaQc.roa (raw, json) Hash identifier: 1+2o0U7UXs9xJ3yP0EiK7E+DhPjoVmxsqZYm35N6NQU= Subject key identifier: F4:10:7D:E0:24:6E:ED:38:04:20:09:A8:A5:7B:E6:34:35:0E:69:07 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 368C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9BB94CRu7TgEIAmopXvmNDUOaQc.roa Signing time: Mon 10 Feb 2025 13:54:25 +0000 ROA not before: Mon 10 Feb 2025 13:54:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.144.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13964 (0x368c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F4107DE0246EED38042009A8A57BE634350E6907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:f9:80:75:74:73:dd:71:b2:77:67:11:65: 47:6f:fa:1c:fa:5e:75:29:20:77:10:63:7b:bc:c3: 1d:0a:50:eb:ce:25:10:a0:9a:ff:05:82:79:10:0c: 3d:b6:6b:f3:13:44:0f:bb:41:a6:3b:fe:fc:b6:52: 98:a3:01:79:e0:f0:0a:95:ae:77:d9:0d:84:35:75: 99:67:ef:74:37:b2:bb:9c:10:0d:90:28:cd:84:8d: cd:f2:4a:1f:64:65:58:a6:9a:a1:7d:d0:7a:db:ca: 40:10:56:16:9b:3f:cd:20:3d:76:a3:01:b2:f6:a8: a6:a3:e3:1b:8f:46:c4:99:dd:c2:ac:b9:ae:cc:3b: 1d:e1:ce:5b:92:62:6d:50:91:ea:90:7e:5c:09:e2: 21:f4:f6:92:4c:98:47:1a:a8:87:43:89:e2:06:9e: b9:74:a0:38:97:78:25:d0:e1:56:bc:29:fa:03:d4: 4c:ba:fe:2d:f5:46:44:ba:8d:16:c7:38:1e:ae:45: bf:ee:6e:7a:33:6d:8a:88:9a:c0:81:38:8e:fd:3f: 00:4c:86:d2:d2:38:72:a8:e3:e1:b3:13:d7:2e:82: d9:59:fe:f3:23:d2:61:e5:4c:c8:86:53:b8:7b:79: 8e:f8:6c:e1:4d:2b:db:ba:77:04:28:9c:8c:c7:bc: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:10:7D:E0:24:6E:ED:38:04:20:09:A8:A5:7B:E6:34:35:0E:69:07 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9BB94CRu7TgEIAmopXvmNDUOaQc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.0/26 Signature Algorithm: sha256WithRSAEncryption b5:17:71:a7:59:cf:65:79:fb:85:c0:88:16:e0:01:0d:c0:2a: 7a:09:87:c8:6a:c5:d2:b7:9b:16:a2:43:30:f8:09:53:c9:b3: 6e:aa:49:43:fd:d2:e1:88:8e:8d:dc:47:bb:35:e2:59:c2:99: 16:bf:20:d3:3c:59:ca:1b:d9:3a:73:c3:50:02:2f:db:39:fb: ff:24:d4:c5:a2:97:02:d2:d5:10:23:79:86:9d:10:c8:b4:c5: 22:1f:30:f2:c9:87:89:46:49:82:dd:dd:34:7a:30:39:c2:0d: d2:e2:0d:30:0c:12:41:e6:b7:ba:96:3f:c8:ab:e9:74:aa:c4: 38:a3:e4:1e:7e:13:96:59:e3:76:3b:38:39:e3:9a:b0:29:ef: 3f:52:7c:f1:46:7e:5f:5d:76:bc:47:c9:6a:58:74:d3:be:c5: f5:cc:11:bf:ca:12:94:a4:24:24:4d:a3:65:72:2d:1c:d7:f4: 92:d1:f5:b6:21:58:c2:96:ff:81:61:35:7e:12:44:5b:fe:cc: c6:fa:ee:cc:32:10:f3:81:9c:f1:74:1b:6f:50:79:f8:7d:05: 9b:24:db:a7:26:63:12:7d:be:98:2a:0f:cf:0a:9d:50:cf:a6: 5a:8e:50:50:cd:a1:73:60:2c:73:43:d9:3f:a7:f0:36:4f:94: 53:12:f0:c1 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY0MTA3REUwMjQ2RUVE MzgwNDIwMDlBOEE1N0JFNjM0MzUwRTY5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCTfmAdXRz3XGyd2cRZUdv+hz6XnUpIHcQY3u8wx0KUOvOJRCg mv8FgnkQDD22a/MTRA+7QaY7/vy2UpijAXng8AqVrnfZDYQ1dZln73Q3srucEA2Q KM2Ejc3ySh9kZVimmqF90HrbykAQVhabP80gPXajAbL2qKaj4xuPRsSZ3cKsua7M Ox3hzluSYm1QkeqQflwJ4iH09pJMmEcaqIdDieIGnrl0oDiXeCXQ4Va8KfoD1Ey6 /i31RkS6jRbHOB6uRb/ubnozbYqImsCBOI79PwBMhtLSOHKo4+GzE9cugtlZ/vMj 0mHlTMiGU7h7eY74bOFNK9u6dwQonIzHvKLHAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU9BB94CRu7TgEIAmopXvmNDUOaQcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlCQjk0Q1J1N1RnRUlBbW9w WHZtTkRVT2FRYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wJAAMA0GCSqGSIb3DQEBCwUAA4IBAQC1F3GnWc9lefuFwIgW4AENwCp6CYfIasXS t5sWokMw+AlTybNuqklD/dLhiI6N3Ee7NeJZwpkWvyDTPFnKG9k6c8NQAi/bOfv/ JNTFopcC0tUQI3mGnRDItMUiHzDyyYeJRkmC3d00ejA5wg3S4g0wDBJB5re6lj/I q+l0qsQ4o+QefhOWWeN2Ozg545qwKe8/UnzxRn5fXXa8R8lqWHTTvsX1zBG/yhKU pCQkTaNlci0c1/SS0fW2IVjClv+BYTV+EkRb/szG+u7MMhDzgZzxdBtvUHn4fQWb JNunJmMSfb6YKg/PCp1Qz6ZajlBQzaFzYCxzQ9k/p/A2T5RTEvDB -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:47 2025 by rpki-client