$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BZ-IsKaeg2P__vIhkx2X4I091Z0.roa File: BZ-IsKaeg2P__vIhkx2X4I091Z0.roa (raw, json) Hash identifier: o4aXucwmsuYEbj0mWyrtdKDa4M/SAxfGSzomndTLQx8= Subject key identifier: 05:9F:88:B0:A6:9E:83:63:FF:FE:F2:21:93:1D:97:E0:8D:3D:D5:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34F2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BZ-IsKaeg2P__vIhkx2X4I091Z0.roa Signing time: Mon 10 Feb 2025 13:52:51 +0000 ROA not before: Mon 10 Feb 2025 13:52:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=059F88B0A69E8363FFFEF221931D97E08D3DD59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:3b:64:a6:86:11:b3:e3:71:23:01:09:8c: 4a:b2:c9:46:ae:78:39:91:43:d5:54:97:cd:3c:40: f8:f5:34:4c:f5:11:23:12:f6:a4:4b:e0:9a:58:32: d9:ae:ab:39:1d:6f:e2:5b:ac:aa:e3:75:4b:f9:54: 44:89:ce:76:2d:b9:89:c3:6d:14:b4:56:d6:b7:9b: de:d9:ea:27:ef:db:73:4e:83:d6:c2:b4:06:d6:26: f8:2f:96:8b:5a:3b:e9:56:b9:87:d7:09:7b:76:10: 2c:18:97:db:41:42:06:97:9b:d9:dd:89:35:71:35: 6b:6b:6b:a9:3f:5d:19:89:7d:a6:f6:6d:55:c2:36: 8f:3a:7e:a1:0a:9e:e8:2c:a1:58:cd:e1:ed:08:4f: 39:4f:03:f2:78:5e:d6:4f:0d:b8:22:5f:5b:7f:79: 22:7c:01:98:82:18:53:e6:bd:fc:a5:4f:1e:3d:00: 1b:80:97:16:fe:4f:09:e9:03:9a:38:ae:1e:d0:10: 80:29:80:62:50:3d:80:a0:4a:6c:f7:3f:96:0a:81: 6f:f6:a4:06:13:25:8b:cf:79:3d:21:46:52:d5:29: 83:18:78:6c:5a:72:73:c3:cb:44:16:07:19:a9:75: db:a0:1c:9c:9e:25:aa:36:25:36:f3:22:b4:87:17: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9F:88:B0:A6:9E:83:63:FF:FE:F2:21:93:1D:97:E0:8D:3D:D5:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BZ-IsKaeg2P__vIhkx2X4I091Z0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.204.0/22 Signature Algorithm: sha256WithRSAEncryption 43:62:54:e1:3e:a7:58:30:7e:3d:41:11:cd:ba:e6:cf:30:a6: 5e:62:d0:04:65:09:2e:9f:c5:ce:f5:af:e8:c0:b2:a3:72:1e: 7d:a4:34:68:93:e3:cb:2c:55:8a:80:d6:d3:e6:1c:2b:a9:ed: 6b:55:3d:ef:78:3f:45:c2:fd:09:db:25:64:a1:ce:b4:d4:c9: 56:19:36:f1:23:3f:d3:67:f9:3f:63:e5:9a:33:13:1e:21:25: 3b:ff:23:c2:cc:0e:22:48:7b:60:33:bb:50:bb:ae:ea:68:3b: 4a:2c:05:e4:89:d4:12:e9:04:60:bf:bd:27:35:6b:e7:90:99: 76:af:b9:b8:c0:71:fb:e0:a1:ca:f7:b2:a5:66:45:18:f9:3e: f5:26:17:4c:ab:82:9f:82:d0:85:25:82:83:f5:78:74:bd:16: 16:a7:c4:f8:58:69:f4:35:09:ba:a9:22:42:91:b7:f3:70:7d: a9:4b:25:dc:65:d8:33:03:c9:95:fa:1a:c6:cf:10:7b:59:9b: a6:1c:80:2e:0e:af:c8:61:08:e2:11:3f:55:e8:25:aa:5a:6d: 7a:01:b9:f1:5d:f9:6f:bd:dc:88:0b:1c:93:a6:74:5e:a2:6d: 28:60:75:04:e9:1a:7b:7c:38:1d:fb:75:fc:e4:38:1a:fb:c9: f9:a0:df:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1OUY4OEIwQTY5RTgz NjNGRkZFRjIyMTkzMUQ5N0UwOEQzREQ1OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9SztkpoYRs+NxIwEJjEqyyUaueDmRQ9VUl808QPj1NEz1ESMS 9qRL4JpYMtmuqzkdb+JbrKrjdUv5VESJznYtuYnDbRS0Vta3m97Z6ifv23NOg9bC tAbWJvgvlotaO+lWuYfXCXt2ECwYl9tBQgaXm9ndiTVxNWtra6k/XRmJfab2bVXC No86fqEKnugsoVjN4e0ITzlPA/J4XtZPDbgiX1t/eSJ8AZiCGFPmvfylTx49ABuA lxb+TwnpA5o4rh7QEIApgGJQPYCgSmz3P5YKgW/2pAYTJYvPeT0hRlLVKYMYeGxa cnPDy0QWBxmpddugHJyeJao2JTbzIrSHFyQdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBZ+IsKaeg2P//vIhkx2X4I091Z0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JaLUlzS2FlZzJQX192SWhr eDJYNEkwOTFaMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wMwwDQYJKoZIhvcNAQELBQADggEBAENiVOE+p1gwfj1BEc265s8wpl5i0ARlCS6f xc71r+jAsqNyHn2kNGiT48ssVYqA1tPmHCup7WtVPe94P0XC/QnbJWShzrTUyVYZ NvEjP9Nn+T9j5ZozEx4hJTv/I8LMDiJIe2Azu1C7rupoO0osBeSJ1BLpBGC/vSc1 a+eQmXavubjAcfvgocr3sqVmRRj5PvUmF0yrgp+C0IUlgoP1eHS9FhanxPhYafQ1 CbqpIkKRt/NwfalLJdxl2DMDyZX6GsbPEHtZm6YcgC4Or8hhCOIRP1XoJapabXoB ufFd+W+93IgLHJOmdF6ibShgdQTpGnt8OB37dfzkOBr7yfmg3xQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:06 2025 by rpki-client