$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CBBp-cFyI7P9RnP7rIiKuwkTKbA.roa File: CBBp-cFyI7P9RnP7rIiKuwkTKbA.roa (raw, json) Hash identifier: fWDwyJHWNiLGxP95tnGvKN/gDpnOBAybtdCVQ+VEz2w= Subject key identifier: 08:10:69:F9:C1:72:23:B3:FD:46:73:FB:AC:88:8A:BB:09:13:29:B0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3418 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CBBp-cFyI7P9RnP7rIiKuwkTKbA.roa Signing time: Mon 10 Feb 2025 13:52:04 +0000 ROA not before: Mon 10 Feb 2025 13:52:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13336 (0x3418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=081069F9C17223B3FD4673FBAC888ABB091329B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:60:5b:51:35:4c:5c:a8:c0:47:d3:41:db: 5d:4b:9c:df:43:45:52:7e:1f:a9:5b:b4:05:aa:db: 2b:cf:60:8f:f5:2d:e1:fe:72:f1:92:41:90:2b:e7: e3:74:f5:f8:1e:ac:e9:4f:87:59:84:29:50:e9:35: ab:be:0d:98:c9:42:56:88:24:67:d3:08:cf:be:60: ce:4f:90:89:0e:40:49:b4:23:b5:11:2c:34:a9:94: e8:18:6d:b1:e1:1b:0f:f1:f2:da:4f:c2:de:53:39: 28:20:0b:6f:7e:ea:68:4f:3e:52:75:e5:3d:30:89: 8f:0e:59:4e:fc:91:71:79:de:08:be:88:f4:a0:40: 7e:f7:1d:12:29:29:52:1a:d7:2b:1f:19:d5:36:4b: aa:41:a7:c0:de:56:5a:a2:1c:2b:83:f2:c4:74:47: 5c:ba:d4:05:10:c4:9e:04:ac:d2:2d:67:9e:e7:b3: eb:5b:e2:7c:5b:a7:82:49:e8:b0:a3:d7:2f:51:cd: 18:47:db:78:65:9a:83:45:a0:e1:91:4a:ae:32:6e: f5:29:6f:0b:a5:b8:77:cb:36:9e:d9:bf:66:01:f7: b2:7c:eb:13:df:7d:56:8f:58:3e:e0:06:04:17:39: 44:46:17:6f:9e:3e:4e:31:de:dd:6a:40:64:0f:28: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:10:69:F9:C1:72:23:B3:FD:46:73:FB:AC:88:8A:BB:09:13:29:B0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CBBp-cFyI7P9RnP7rIiKuwkTKbA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.96.0/20 Signature Algorithm: sha256WithRSAEncryption 38:b0:b1:43:22:2d:a7:ec:5a:09:72:a6:68:f5:9f:89:55:9e: 15:11:02:19:c3:b4:27:3c:ff:b9:fd:9c:7a:d7:0f:2d:db:88: ac:82:ba:70:55:63:e7:ee:24:97:fe:4f:31:b3:fc:90:e0:f8: f3:2a:8a:8c:21:32:67:20:f9:e5:f9:f7:14:ea:5f:99:85:15: 5c:c4:fc:9e:e3:63:08:44:17:83:ff:10:7f:f6:3b:d1:b7:de: 4a:c0:08:db:87:5e:f1:a1:24:08:e4:f1:44:1d:97:ec:6e:99: ac:3e:ed:dd:de:97:04:87:68:f5:42:d3:f9:43:98:69:fd:73: 60:44:2a:f7:46:8f:18:87:c4:d3:a4:89:3c:00:45:de:35:8e: 9e:5b:00:8e:23:05:92:4d:89:1b:03:c4:7c:8e:54:e2:73:c7: 01:98:ba:54:c1:f0:9e:c8:d9:fc:d4:3e:24:d9:9e:f8:f7:9c: d0:a4:13:ae:f5:7a:e1:ef:e8:46:b9:fe:4d:d4:90:37:72:c0: 82:21:cd:6c:19:3d:12:17:52:e4:1f:29:2f:9a:ac:83:83:01: 57:4e:0f:bf:97:c0:7f:8c:16:52:52:fc:d9:40:66:f7:31:5f: b3:61:ed:ae:ea:24:4d:b7:83:c6:88:09:8a:dc:7b:22:6e:1b: 3c:9a:00:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4MTA2OUY5QzE3MjIz QjNGRDQ2NzNGQkFDODg4QUJCMDkxMzI5QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAeGBbUTVMXKjAR9NB211LnN9DRVJ+H6lbtAWq2yvPYI/1LeH+ cvGSQZAr5+N09fgerOlPh1mEKVDpNau+DZjJQlaIJGfTCM++YM5PkIkOQEm0I7UR LDSplOgYbbHhGw/x8tpPwt5TOSggC29+6mhPPlJ15T0wiY8OWU78kXF53gi+iPSg QH73HRIpKVIa1ysfGdU2S6pBp8DeVlqiHCuD8sR0R1y61AUQxJ4ErNItZ57ns+tb 4nxbp4JJ6LCj1y9RzRhH23hlmoNFoOGRSq4ybvUpbwuluHfLNp7Zv2YB97J86xPf fVaPWD7gBgQXOURGF2+ePk4x3t1qQGQPKE7nAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCBBp+cFyI7P9RnP7rIiKuwkTKbAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NCQnAtY0Z5STdQOVJuUDdy SWlLdXdrVEtiQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wGAwDQYJKoZIhvcNAQELBQADggEBADiwsUMiLafsWglypmj1n4lVnhURAhnDtCc8 /7n9nHrXDy3biKyCunBVY+fuJJf+TzGz/JDg+PMqiowhMmcg+eX59xTqX5mFFVzE /J7jYwhEF4P/EH/2O9G33krACNuHXvGhJAjk8UQdl+xumaw+7d3elwSHaPVC0/lD mGn9c2BEKvdGjxiHxNOkiTwARd41jp5bAI4jBZJNiRsDxHyOVOJzxwGYulTB8J7I 2fzUPiTZnvj3nNCkE671euHv6Ea5/k3UkDdywIIhzWwZPRIXUuQfKS+arIODAVdO D7+XwH+MFlJS/NlAZvcxX7Nh7a7qJE23g8aICYrceyJuGzyaAEg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:04 2025 by rpki-client