$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B3mg6i44vEB83Jk94r9Y6t67-FI.roa File: B3mg6i44vEB83Jk94r9Y6t67-FI.roa (raw, json) Hash identifier: c9krhnRspLuDntowa9hdVsmEcMBkW0bPCPOKTJRuLa0= Subject key identifier: 07:79:A0:EA:2E:38:BC:40:7C:DC:99:3D:E2:BF:58:EA:DE:BB:F8:52 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33F0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B3mg6i44vEB83Jk94r9Y6t67-FI.roa Signing time: Mon 10 Feb 2025 13:51:55 +0000 ROA not before: Mon 10 Feb 2025 13:51:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13296 (0x33f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0779A0EA2E38BC407CDC993DE2BF58EADEBBF852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:68:de:be:1b:fc:06:5c:e6:a2:53:bf:b1: 3f:dc:77:15:8a:59:40:92:70:11:2f:dc:63:57:6a: 1d:01:49:eb:d6:24:30:8e:86:a2:21:83:aa:8a:35: 0b:12:a2:af:0d:21:ee:b4:9e:1c:dd:d7:d1:7c:97: 00:10:80:48:d9:e6:7f:ca:1c:b6:30:15:20:40:1f: 21:9e:60:c2:16:9c:49:11:f7:80:07:2e:e0:c1:ff: 71:70:e4:43:f8:04:0e:d4:ae:dd:a2:5b:39:eb:c5: 22:3d:5c:63:f5:4a:5c:cf:e8:b4:29:8b:36:35:e3: c2:08:dd:90:c2:d9:30:2d:79:5b:04:9d:2e:0e:f2: b5:dc:cb:71:cf:1b:7a:09:de:0d:28:59:54:fd:33: 0d:b5:a4:d9:ef:88:cb:29:4d:ce:57:59:0a:a3:a2: 74:e9:6a:97:47:e2:af:b3:db:e9:bd:95:b0:54:3c: 62:cf:e2:c1:25:6c:6a:96:f6:72:34:f2:32:fc:ba: d7:83:23:42:82:ee:e5:af:c9:6f:46:bf:be:2b:56: b0:6e:cf:c5:f5:95:63:59:7e:95:38:dd:60:88:6d: 39:f9:b4:7b:6a:90:ad:bc:e0:23:bc:40:20:c1:4e: 5b:f1:35:a6:98:d5:c9:8b:00:bf:63:1c:63:3c:7d: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:79:A0:EA:2E:38:BC:40:7C:DC:99:3D:E2:BF:58:EA:DE:BB:F8:52 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B3mg6i44vEB83Jk94r9Y6t67-FI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.64.0/21 Signature Algorithm: sha256WithRSAEncryption b6:a5:1c:7a:c5:53:81:ba:cf:84:08:d5:e5:e7:a0:e3:02:06: 2f:a0:63:e3:5e:e9:80:97:5e:7a:c3:4a:4c:bf:a4:4c:d3:dd: fc:d9:9c:fc:bf:7f:de:4c:42:2f:e4:7a:13:97:9d:b3:ae:22: 89:31:66:e8:c8:25:83:ca:78:01:d2:36:48:2e:3b:35:43:4a: 70:45:57:03:04:b2:fa:b3:d6:39:7c:31:e2:e0:c6:15:01:ed: 4f:4c:57:44:e4:84:f2:b7:a7:48:21:45:34:c0:5d:e9:0c:33: e0:d7:e1:ee:90:32:22:a1:d0:42:07:c5:93:7e:37:b8:25:b7: 8c:56:c0:89:47:46:9e:ae:bc:43:67:9e:22:f0:fe:33:98:fb: a1:00:06:aa:f3:1c:c5:04:5e:b6:57:91:e7:9c:9f:1d:cc:b8: 4d:af:8a:dc:1b:40:2f:2f:f0:fa:56:cd:ac:da:17:4e:a7:88: e8:cd:8d:c3:b2:9d:96:26:ee:2f:83:f4:67:c8:09:a0:08:52: 57:6b:b2:cc:72:f1:c7:7c:ee:a2:60:56:66:39:f9:ae:64:98: bb:5d:fb:af:5c:2d:e1:28:36:dd:3e:ca:5b:f8:3b:a2:b2:1b: 3f:e5:95:86:b3:b9:56:7e:b2:19:bf:8f:ef:ec:3d:1b:bf:ec: b5:d0:a2:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM/AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3NzlBMEVBMkUzOEJD NDA3Q0RDOTkzREUyQkY1OEVBREVCQkY4NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGcGjevhv8BlzmolO/sT/cdxWKWUCScBEv3GNXah0BSevWJDCO hqIhg6qKNQsSoq8NIe60nhzd19F8lwAQgEjZ5n/KHLYwFSBAHyGeYMIWnEkR94AH LuDB/3Fw5EP4BA7Urt2iWznrxSI9XGP1SlzP6LQpizY148II3ZDC2TAteVsEnS4O 8rXcy3HPG3oJ3g0oWVT9Mw21pNnviMspTc5XWQqjonTpapdH4q+z2+m9lbBUPGLP 4sElbGqW9nI08jL8uteDI0KC7uWvyW9Gv74rVrBuz8X1lWNZfpU43WCIbTn5tHtq kK284CO8QCDBTlvxNaaY1cmLAL9jHGM8fc2RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUB3mg6i44vEB83Jk94r9Y6t67+FIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0IzbWc2aTQ0dkVCODNKazk0 cjlZNnQ2Ny1GSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wkAwDQYJKoZIhvcNAQELBQADggEBALalHHrFU4G6z4QI1eXnoOMCBi+gY+Ne6YCX XnrDSky/pEzT3fzZnPy/f95MQi/kehOXnbOuIokxZujIJYPKeAHSNkguOzVDSnBF VwMEsvqz1jl8MeLgxhUB7U9MV0TkhPK3p0ghRTTAXekMM+DX4e6QMiKh0EIHxZN+ N7glt4xWwIlHRp6uvENnniLw/jOY+6EABqrzHMUEXrZXkeecnx3MuE2vitwbQC8v 8PpWzazaF06niOjNjcOynZYm7i+D9GfICaAIUldrssxy8cd87qJgVmY5+a5kmLtd +69cLeEoNt0+ylv4O6KyGz/llYazuVZ+shm/j+/sPRu/7LXQovQ= -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:08 2025 by rpki-client