$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bn1747xvNJ8LT6imI1uu9UUXXoI.roa File: Bn1747xvNJ8LT6imI1uu9UUXXoI.roa (raw, json) Hash identifier: cFlHTvnRow/fgo360baqW7hUY/5E/+BuplPZVR4Z1pA= Subject key identifier: 06:7D:7B:E3:BC:6F:34:9F:0B:4F:A8:A6:23:5B:AE:F5:45:17:5E:82 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3556 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bn1747xvNJ8LT6imI1uu9UUXXoI.roa Signing time: Mon 10 Feb 2025 13:53:15 +0000 ROA not before: Mon 10 Feb 2025 13:53:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13654 (0x3556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=067D7BE3BC6F349F0B4FA8A6235BAEF545175E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:cc:8e:b3:1c:91:49:53:37:e5:b7:6a:06: d9:70:0c:08:aa:3e:d2:c6:dc:48:c4:4a:f1:ab:c1: ba:a2:87:31:de:32:cb:08:80:87:79:a7:2f:6d:1e: 29:cb:e1:e2:14:f6:fd:f8:88:8b:79:bf:42:74:f4: 7c:c3:fd:9c:1a:4f:11:65:25:94:fc:14:8d:63:98: 12:ba:68:02:8a:8d:84:14:29:4d:76:8a:5e:e8:ad: dc:be:59:c5:c2:48:c9:a6:44:cb:61:fa:02:a2:1a: 24:d5:7e:db:a2:a5:ed:ca:8b:3e:ba:8f:2b:75:7d: a1:22:06:65:85:1a:74:e3:18:c8:a4:c4:5d:38:81: 30:00:89:81:cc:3f:af:10:6b:c4:f9:97:b4:3f:fd: f7:d1:97:7a:8b:5c:7b:76:42:3b:ac:27:ae:ad:7b: a4:25:d5:c8:7c:6a:66:c1:64:91:2e:75:22:21:ec: 43:b0:58:fd:f5:b3:01:c5:87:4d:c6:7e:90:59:ae: b3:c7:83:38:2c:8b:32:a7:d5:d0:ea:f1:2a:96:6c: 47:14:0e:c0:50:7c:99:37:09:4f:50:58:66:95:a2: b4:10:4d:63:8a:b1:37:91:7c:e9:d9:90:ae:66:75: 71:b8:df:e1:d8:dd:49:d8:eb:0c:bd:28:b4:d6:e6: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7D:7B:E3:BC:6F:34:9F:0B:4F:A8:A6:23:5B:AE:F5:45:17:5E:82 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bn1747xvNJ8LT6imI1uu9UUXXoI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.120.0/21 Signature Algorithm: sha256WithRSAEncryption 51:c8:bf:dc:49:9e:3e:59:49:83:b1:d4:11:88:65:25:9c:0d: 85:e9:92:8a:b0:ec:5f:68:29:3b:7b:35:b0:fd:e5:eb:48:d4: c3:94:e0:71:c5:15:87:d0:38:a5:6c:55:02:87:e1:f7:be:65: 3e:3b:45:5c:b7:45:55:67:c2:5d:76:07:9a:17:7c:66:fc:cb: 77:2d:47:11:64:f8:b9:fe:45:cc:b8:62:18:8a:09:4b:70:93: d9:dd:a5:55:8e:80:ea:84:52:84:19:13:33:9b:ed:42:a7:47: 89:1f:48:db:1e:02:10:b1:dc:e3:ab:43:88:85:5b:3c:86:6e: 92:f8:11:b3:da:0e:15:f7:6c:11:39:aa:37:50:65:b6:3b:80: 22:77:4e:ff:08:7f:d5:2e:e4:0a:5f:27:aa:df:19:3d:0f:d9: 62:56:f3:45:cb:15:ba:da:fa:89:e0:27:6b:3e:47:c9:df:e2: 65:2c:5d:a5:63:c8:2f:7f:27:9b:42:23:8f:62:f2:bd:91:a6: e4:81:67:03:20:63:a7:ac:82:7c:1f:e4:dc:21:4c:cf:0b:f3: 01:4c:d7:4a:fe:b8:4d:bc:6a:3b:6f:c2:4f:ec:37:8d:32:7b: 66:d4:51:2d:4d:12:dc:2e:41:cc:de:a8:77:9a:7d:38:a6:a9: 79:4f:97:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA2N0Q3QkUzQkM2RjM0 OUYwQjRGQThBNjIzNUJBRUY1NDUxNzVFODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNXsyOsxyRSVM35bdqBtlwDAiqPtLG3EjESvGrwbqihzHeMssI gId5py9tHinL4eIU9v34iIt5v0J09HzD/ZwaTxFlJZT8FI1jmBK6aAKKjYQUKU12 il7ordy+WcXCSMmmRMth+gKiGiTVftuipe3Kiz66jyt1faEiBmWFGnTjGMikxF04 gTAAiYHMP68Qa8T5l7Q//ffRl3qLXHt2QjusJ66te6Ql1ch8ambBZJEudSIh7EOw WP31swHFh03GfpBZrrPHgzgsizKn1dDq8SqWbEcUDsBQfJk3CU9QWGaVorQQTWOK sTeRfOnZkK5mdXG43+HY3UnY6wy9KLTW5n6fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBn1747xvNJ8LT6imI1uu9UUXXoIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JuMTc0N3h2Tko4TFQ2aW1J MXV1OVVVWFhvSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wHgwDQYJKoZIhvcNAQELBQADggEBAFHIv9xJnj5ZSYOx1BGIZSWcDYXpkoqw7F9o KTt7NbD95etI1MOU4HHFFYfQOKVsVQKH4fe+ZT47RVy3RVVnwl12B5oXfGb8y3ct RxFk+Ln+Rcy4YhiKCUtwk9ndpVWOgOqEUoQZEzOb7UKnR4kfSNseAhCx3OOrQ4iF WzyGbpL4EbPaDhX3bBE5qjdQZbY7gCJ3Tv8If9Uu5ApfJ6rfGT0P2WJW80XLFbra +ongJ2s+R8nf4mUsXaVjyC9/J5tCI49i8r2RpuSBZwMgY6esgnwf5NwhTM8L8wFM 10r+uE28ajtvwk/sN40ye2bUUS1NEtwuQczeqHeafTimqXlPlx4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:54 2025 by rpki-client