$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B8aASUrR0mTkEVl1JxU55H4RNcY.roa File: B8aASUrR0mTkEVl1JxU55H4RNcY.roa (raw, json) Hash identifier: RRfLX50bOfiEIUHYMzUWldmghAN4Xt5YVUp7QUatLh4= Subject key identifier: 07:C6:80:49:4A:D1:D2:64:E4:11:59:75:27:15:39:E4:7E:11:35:C6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35CD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B8aASUrR0mTkEVl1JxU55H4RNcY.roa Signing time: Mon 10 Feb 2025 13:53:42 +0000 ROA not before: Mon 10 Feb 2025 13:53:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13773 (0x35cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=07C680494AD1D264E4115975271539E47E1135C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:71:ad:03:fa:e1:d4:29:ed:dd:4f:f1:7d: c9:5d:97:9f:63:59:3b:66:39:16:c6:72:32:d0:22: 68:59:f1:46:4e:b0:2e:56:68:f1:d5:94:fb:50:9f: 04:96:ba:34:d4:5c:6e:ea:c1:2d:7c:85:7d:46:89: a3:f4:ce:c5:0e:6a:d2:41:c5:34:ef:e3:31:19:5f: 51:48:43:fa:48:5f:05:45:0c:e0:da:3c:bc:3d:e6: ed:32:0b:d0:ac:43:13:a1:2d:56:8e:c2:46:47:28: ba:99:a2:d0:c1:f4:88:5f:38:5e:a1:f1:2f:4a:14: b5:d0:6e:b4:66:7e:ca:46:18:be:22:6d:46:23:10: b6:c9:f9:69:52:5c:19:38:3b:03:fd:87:84:d3:4e: fe:4c:02:ff:1e:20:d7:15:17:b9:aa:96:ae:57:0f: 3b:10:83:3f:91:98:9c:b2:e1:dc:9e:0b:36:c2:58: 75:41:1a:8f:68:3c:71:2b:ac:2a:b1:57:41:79:cd: 22:3d:a1:e6:b6:e7:e3:53:5d:cb:88:29:60:46:58: ce:ff:15:59:0d:33:09:c8:48:b5:6f:d7:a8:44:b0: 14:b1:f0:4b:17:2b:40:4d:b3:d3:11:89:71:b6:95: d5:3c:bf:e4:96:61:17:ff:49:e2:19:ab:57:1c:51: e6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C6:80:49:4A:D1:D2:64:E4:11:59:75:27:15:39:E4:7E:11:35:C6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B8aASUrR0mTkEVl1JxU55H4RNcY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.96.0/22 Signature Algorithm: sha256WithRSAEncryption b3:d3:fb:5c:8b:45:02:4e:b9:a3:ac:3b:23:39:10:e7:5d:31: 45:da:0d:df:36:65:e9:8f:9c:f0:0f:43:4a:9b:40:99:e5:c5: b6:13:91:2b:61:5b:75:04:73:b2:02:b5:a5:73:04:88:18:52: a2:cb:b2:4a:12:1b:eb:61:53:1e:1d:05:6b:44:b3:a7:b9:b1: b2:4b:ad:65:18:36:03:ce:1d:62:82:25:39:55:f6:12:6a:b3: da:de:c9:d0:2c:fd:85:29:dc:b9:a8:ee:67:e4:72:33:9a:29: be:e1:a5:0c:55:78:9a:8d:d8:ad:02:fb:f1:a8:16:2e:43:ea: f7:db:d5:14:94:20:72:25:08:63:58:d6:98:ee:77:04:d4:b7: 9b:fc:6f:f7:1c:69:e7:7d:85:31:c3:46:e0:7e:9a:ea:39:ac: c1:5c:53:76:7a:25:df:d4:09:78:12:67:80:c7:d7:b3:0d:c1: 70:f9:f1:5f:64:09:30:ac:19:95:5f:66:00:50:4e:37:18:b5: 99:34:ee:8d:38:71:8e:3a:db:90:12:84:bf:ba:1d:b4:1b:2c: 5b:b2:a7:ef:0d:a5:44:eb:54:bd:73:f5:6b:7d:c6:9d:45:ad: 66:77:fa:b1:9e:5d:1f:19:39:2d:fc:18:19:f6:eb:85:2e:dd: 11:1c:32:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3QzY4MDQ5NEFEMUQy NjRFNDExNTk3NTI3MTUzOUU0N0UxMTM1QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBhXGtA/rh1Cnt3U/xfcldl59jWTtmORbGcjLQImhZ8UZOsC5W aPHVlPtQnwSWujTUXG7qwS18hX1GiaP0zsUOatJBxTTv4zEZX1FIQ/pIXwVFDODa PLw95u0yC9CsQxOhLVaOwkZHKLqZotDB9IhfOF6h8S9KFLXQbrRmfspGGL4ibUYj ELbJ+WlSXBk4OwP9h4TTTv5MAv8eINcVF7mqlq5XDzsQgz+RmJyy4dyeCzbCWHVB Go9oPHErrCqxV0F5zSI9oea25+NTXcuIKWBGWM7/FVkNMwnISLVv16hEsBSx8EsX K0BNs9MRiXG2ldU8v+SWYRf/SeIZq1ccUeYhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUB8aASUrR0mTkEVl1JxU55H4RNcYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0I4YUFTVXJSMG1Ua0VWbDFK eFU1NUg0Uk5jWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wGAwDQYJKoZIhvcNAQELBQADggEBALPT+1yLRQJOuaOsOyM5EOddMUXaDd82ZemP nPAPQ0qbQJnlxbYTkSthW3UEc7ICtaVzBIgYUqLLskoSG+thUx4dBWtEs6e5sbJL rWUYNgPOHWKCJTlV9hJqs9reydAs/YUp3Lmo7mfkcjOaKb7hpQxVeJqN2K0C+/Go Fi5D6vfb1RSUIHIlCGNY1pjudwTUt5v8b/ccaed9hTHDRuB+muo5rMFcU3Z6Jd/U CXgSZ4DH17MNwXD58V9kCTCsGZVfZgBQTjcYtZk07o04cY4625AShL+6HbQbLFuy p+8NpUTrVL1z9Wt9xp1FrWZ3+rGeXR8ZOS38GBn264Uu3REcMrg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:47 2025 by rpki-client