$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AAQXOPTpqILpGLtt-pi1GbvT648.roa File: AAQXOPTpqILpGLtt-pi1GbvT648.roa (raw, json) Hash identifier: RkkKnXmUjPT2q76kX8YtVV/T1HlaAM8s/OwzeGS5nV4= Subject key identifier: 00:04:17:38:F4:E9:A8:82:E9:18:BB:6D:FA:98:B5:19:BB:D3:EB:8F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33E4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AAQXOPTpqILpGLtt-pi1GbvT648.roa Signing time: Mon 10 Feb 2025 13:51:52 +0000 ROA not before: Mon 10 Feb 2025 13:51:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.193.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13284 (0x33e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=00041738F4E9A882E918BB6DFA98B519BBD3EB8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:a5:90:cf:e1:be:00:42:8f:46:ef:12:ab: 8b:ab:52:64:c6:ee:b0:91:e5:76:54:22:85:c9:85: 14:8b:d6:a5:a1:2c:08:5f:52:d5:80:83:fa:d7:c5: ff:6a:9f:8e:ff:7c:ac:d7:8e:77:2c:35:4e:79:db: cf:de:d8:43:b5:92:1d:67:ca:de:58:1c:1b:60:7f: fa:fb:6d:bf:84:0a:bf:2f:dd:7c:d5:8c:8b:e0:e5: e0:b4:10:7d:cd:df:56:c6:43:f2:95:54:9f:87:7f: 4e:d2:25:55:6c:bd:a6:78:df:92:70:35:fb:35:40: e7:4f:70:d2:b6:32:5a:08:3f:c9:f4:65:07:a1:3a: 95:c6:90:0a:d0:1d:f8:1b:5b:4f:28:b1:86:00:f3: 78:e5:64:71:9f:c4:88:68:77:c9:65:c3:01:28:4e: 15:23:60:6b:02:b0:b5:3e:80:db:03:95:e2:76:95: ec:2e:eb:56:a2:42:0b:18:83:ea:a5:ed:55:d8:61: 08:cd:af:6a:8d:6a:c5:c9:04:4f:44:c9:eb:4b:69: 18:99:31:65:a1:7c:c8:48:53:2a:cf:6c:81:62:e0: 1e:51:d9:de:93:2d:aa:04:ea:40:06:90:25:ec:72: 3e:f9:67:08:5a:b4:dd:f6:06:2c:77:36:60:e4:fd: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:04:17:38:F4:E9:A8:82:E9:18:BB:6D:FA:98:B5:19:BB:D3:EB:8F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AAQXOPTpqILpGLtt-pi1GbvT648.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.80.0/20 Signature Algorithm: sha256WithRSAEncryption 7f:de:06:b8:dd:52:c2:dd:2f:af:77:51:e2:0c:bb:dd:53:09: 21:80:a4:6c:c4:64:61:c9:ae:43:a6:b8:8c:c0:a8:41:a4:9a: 25:f7:1f:d5:51:d8:0f:e8:ac:88:f5:14:99:35:e5:ec:e5:dc: 75:f3:89:67:ae:0b:bf:3d:1a:0c:56:9c:a2:8b:32:1d:8d:37: b8:8a:51:3f:83:b4:b3:95:c8:01:65:0f:85:90:29:e6:6f:69: 16:fd:ba:e6:8e:40:2f:81:ba:f9:cd:11:25:ad:1a:93:5d:7f: 2f:7a:ae:78:3f:aa:e2:8e:ba:d8:6f:32:09:ab:1c:f9:18:f8: ef:50:9a:2e:01:d0:a8:e9:ea:db:94:85:ca:90:fe:10:69:53: bc:68:2a:39:b0:9d:59:08:2a:1a:3f:22:4a:d0:e1:70:9d:fe: 9c:76:65:99:a1:f3:f5:c4:1b:27:a2:01:12:5b:da:8f:f4:db: 94:fb:54:5f:41:ef:30:d7:fa:5b:1a:49:98:06:2d:1d:64:95: 21:ea:64:44:79:4e:e9:a2:38:29:38:8b:0f:d2:3a:7e:98:7d: cd:61:e5:08:00:95:80:f5:1e:1f:d5:3a:55:74:e3:59:17:bf: 6d:9c:86:fb:79:56:59:21:8c:06:98:15:ee:06:e5:82:a0:60: fc:3a:9f:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAwMDQxNzM4RjRFOUE4 ODJFOTE4QkI2REZBOThCNTE5QkJEM0VCOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjOqWQz+G+AEKPRu8Sq4urUmTG7rCR5XZUIoXJhRSL1qWhLAhf UtWAg/rXxf9qn47/fKzXjncsNU5528/e2EO1kh1nyt5YHBtgf/r7bb+ECr8v3XzV jIvg5eC0EH3N31bGQ/KVVJ+Hf07SJVVsvaZ435JwNfs1QOdPcNK2MloIP8n0ZQeh OpXGkArQHfgbW08osYYA83jlZHGfxIhod8llwwEoThUjYGsCsLU+gNsDleJ2lewu 61aiQgsYg+ql7VXYYQjNr2qNasXJBE9EyetLaRiZMWWhfMhIUyrPbIFi4B5R2d6T LaoE6kAGkCXscj75ZwhatN32Bix3NmDk/YgTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAAQXOPTpqILpGLtt+pi1GbvT648wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FBUVhPUFRwcUlMcEdMdHQt cGkxR2J2VDY0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wVAwDQYJKoZIhvcNAQELBQADggEBAH/eBrjdUsLdL693UeIMu91TCSGApGzEZGHJ rkOmuIzAqEGkmiX3H9VR2A/orIj1FJk15ezl3HXziWeuC789GgxWnKKLMh2NN7iK UT+DtLOVyAFlD4WQKeZvaRb9uuaOQC+BuvnNESWtGpNdfy96rng/quKOuthvMgmr HPkY+O9Qmi4B0Kjp6tuUhcqQ/hBpU7xoKjmwnVkIKho/IkrQ4XCd/px2ZZmh8/XE GyeiARJb2o/025T7VF9B7zDX+lsaSZgGLR1klSHqZER5TumiOCk4iw/SOn6Yfc1h 5QgAlYD1Hh/VOlV041kXv22chvt5VlkhjAaYFe4G5YKgYPw6n0Q= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:11 2025 by rpki-client