$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C8d9CXGkHhH4nXPkodJddespFwU.roa File: C8d9CXGkHhH4nXPkodJddespFwU.roa (raw, json) Hash identifier: fusQiWUlFlzMDqfCyLKQSHyoQ4fAJG72BgARzQ8nbK4= Subject key identifier: 0B:C7:7D:09:71:A4:1E:11:F8:9D:73:E4:A1:D2:5D:75:EB:29:17:05 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3678 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C8d9CXGkHhH4nXPkodJddespFwU.roa Signing time: Mon 10 Feb 2025 13:54:21 +0000 ROA not before: Mon 10 Feb 2025 13:54:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.236.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13944 (0x3678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0BC77D0971A41E11F89D73E4A1D25D75EB291705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:a9:d3:29:f6:f1:81:4e:fc:eb:4e:b1:ab: 2c:80:7e:87:68:6b:f3:d2:76:c5:94:be:35:92:9f: df:de:d9:f9:f0:99:32:e8:6d:35:55:be:8d:a4:b8: 25:05:cb:64:c1:55:01:1a:a2:c3:31:e6:3b:6e:52: 4c:bc:ea:78:dd:cf:46:16:af:90:00:d0:03:d2:ac: 07:0a:f3:b9:36:2e:64:a5:05:a0:68:b9:00:67:3d: ac:73:aa:a2:bb:dd:e4:82:60:79:c7:58:08:24:36: 31:eb:7f:18:28:8e:a1:94:f2:a9:c5:dc:3e:68:73: 09:ec:fb:97:f5:ee:5f:bd:18:13:e9:c1:06:30:a8: 31:82:5c:87:0e:7f:5d:30:2a:e7:18:78:94:b6:8d: 36:df:9e:77:48:eb:0a:d6:12:53:a0:4b:61:66:58: 65:63:30:e0:93:47:0c:68:47:de:38:81:91:6b:25: 5f:fe:09:88:98:72:84:e8:15:a4:62:df:12:58:26: 31:b7:b8:97:c1:1c:bb:36:78:d0:b0:ec:22:a1:e4: 9e:71:8f:34:6a:08:0f:66:b4:11:a4:88:cf:10:1f: 8d:df:ac:97:d7:6e:57:1d:e1:ef:d2:51:cf:7a:da: 11:d6:06:df:25:bb:49:f6:23:88:63:8c:68:99:d8: ca:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C7:7D:09:71:A4:1E:11:F8:9D:73:E4:A1:D2:5D:75:EB:29:17:05 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C8d9CXGkHhH4nXPkodJddespFwU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.236.0/25 Signature Algorithm: sha256WithRSAEncryption ac:9c:06:06:64:37:8d:79:1b:cc:6e:34:82:28:6a:f2:c0:45: ec:69:dc:16:72:c2:09:bd:12:85:c5:94:35:59:8c:13:ed:d8: 05:7f:35:b5:75:cc:98:c5:70:37:a4:68:72:05:17:f3:79:1b: da:78:22:ee:83:bb:8b:fb:d4:27:7e:2f:2e:15:fb:75:69:6f: 8a:02:aa:3a:85:42:2c:dc:a3:7b:0f:02:4a:db:c2:06:ef:ae: 1b:33:49:55:a7:53:5e:d5:3f:e7:63:c3:f9:6b:2b:01:9d:a1: c6:df:02:e6:f0:df:9e:f5:51:2c:a7:1c:d8:87:48:6a:0a:9f: 12:08:f8:35:60:9f:b1:1b:77:7d:ac:84:70:92:07:49:ae:4e: 91:d6:9f:a3:6f:fa:70:9c:7d:0c:89:9c:1a:ab:3e:f9:fb:86: 33:e0:00:67:ee:e1:45:cb:9b:8f:de:2c:62:d9:5a:83:c7:3d: 01:c2:bd:4d:8d:d3:60:45:c3:ca:0c:fb:c3:8a:04:ee:0e:a2: 48:7a:55:5e:9c:44:14:c5:d9:16:f5:44:1b:9d:09:3c:1b:b7: bf:ce:b2:2e:b0:6b:5a:a7:30:82:24:83:e4:f0:da:d4:98:b3: 6a:1d:ce:13:35:40:c3:cc:c2:1f:ee:17:b2:8d:f4:47:36:46: 2f:d1:e3:ea -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCQzc3RDA5NzFBNDFF MTFGODlENzNFNEExRDI1RDc1RUIyOTE3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCef6nTKfbxgU78606xqyyAfodoa/PSdsWUvjWSn9/e2fnwmTLo bTVVvo2kuCUFy2TBVQEaosMx5jtuUky86njdz0YWr5AA0APSrAcK87k2LmSlBaBo uQBnPaxzqqK73eSCYHnHWAgkNjHrfxgojqGU8qnF3D5ocwns+5f17l+9GBPpwQYw qDGCXIcOf10wKucYeJS2jTbfnndI6wrWElOgS2FmWGVjMOCTRwxoR944gZFrJV/+ CYiYcoToFaRi3xJYJjG3uJfBHLs2eNCw7CKh5J5xjzRqCA9mtBGkiM8QH43frJfX blcd4e/SUc962hHWBt8lu0n2I4hjjGiZ2MoFAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUC8d9CXGkHhH4nXPkodJddespFwUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0M4ZDlDWEdrSGhING5YUGtv ZEpkZGVzcEZ3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+wAMA0GCSqGSIb3DQEBCwUAA4IBAQCsnAYGZDeNeRvMbjSCKGrywEXsadwWcsIJ vRKFxZQ1WYwT7dgFfzW1dcyYxXA3pGhyBRfzeRvaeCLug7uL+9Qnfi8uFft1aW+K Aqo6hUIs3KN7DwJK28IG764bM0lVp1Ne1T/nY8P5aysBnaHG3wLm8N+e9VEspxzY h0hqCp8SCPg1YJ+xG3d9rIRwkgdJrk6R1p+jb/pwnH0MiZwaqz75+4Yz4ABn7uFF y5uP3ixi2VqDxz0Bwr1NjdNgRcPKDPvDigTuDqJIelVenEQUxdkW9UQbnQk8G7e/ zrIusGtapzCCJIPk8NrUmLNqHc4TNUDDzMIf7heyjfRHNkYv0ePq -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:02 2025 by rpki-client