$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CCYPfjUVLqJmNRi0m1rDdLSrF1A.roa File: CCYPfjUVLqJmNRi0m1rDdLSrF1A.roa (raw, json) Hash identifier: FylQW+TDCw7Bpkq1NxTgd1kmoo+6xF8Nue6lbKdFIxQ= Subject key identifier: 08:26:0F:7E:35:15:2E:A2:66:35:18:B4:9B:5A:C3:74:B4:AB:17:50 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35CC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CCYPfjUVLqJmNRi0m1rDdLSrF1A.roa Signing time: Mon 10 Feb 2025 13:53:42 +0000 ROA not before: Mon 10 Feb 2025 13:53:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13772 (0x35cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=08260F7E35152EA2663518B49B5AC374B4AB1750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:fd:7a:48:c4:b8:b1:68:da:dd:0e:f7:12: de:63:63:e7:e8:a5:09:14:8d:ce:8a:23:82:bb:6d: e4:b3:44:a7:7c:26:8d:ba:b8:2a:38:7c:a0:29:95: 97:32:a4:2b:cf:38:f2:24:6b:9b:6d:b2:de:ea:f8: b3:02:c6:cc:1f:cb:9f:0d:dd:f6:0a:26:b3:a9:b4: a1:94:c4:c2:4e:7e:1e:f1:2a:8e:c0:19:a1:cc:de: e4:62:15:d6:ea:d9:ce:7f:a3:bf:2b:dd:7b:57:9a: ec:e0:6e:eb:a2:e6:8f:1e:2d:f9:70:1d:97:8e:00: 7e:47:5d:ce:ac:2e:ac:75:28:23:18:ba:af:aa:e3: b3:fb:95:fa:44:3c:b9:3a:fd:dc:7e:ef:20:3a:64: 40:99:d1:86:de:4e:27:be:82:67:51:f4:1a:b4:01: 15:25:35:a7:bc:c2:b6:35:79:94:b1:4f:a9:1c:f8: 00:ef:81:1c:8c:ac:01:2b:05:f1:68:5f:4a:cf:cf: e9:a1:fb:8d:e8:07:df:d9:ef:1c:1b:1f:5e:61:8c: 4d:69:2d:81:fd:16:17:db:3b:25:6c:4b:78:b9:d0: a6:e9:97:c3:b4:2c:fb:d0:51:21:fc:90:d6:96:57: 14:80:b3:fa:82:95:54:ae:60:8e:07:a1:87:46:4f: c1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:26:0F:7E:35:15:2E:A2:66:35:18:B4:9B:5A:C3:74:B4:AB:17:50 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CCYPfjUVLqJmNRi0m1rDdLSrF1A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.84.0/22 Signature Algorithm: sha256WithRSAEncryption 29:61:9d:f8:ce:54:98:86:61:96:6f:d1:ac:85:ee:35:9f:f1: 91:74:e8:69:7d:c3:7c:f1:de:26:1b:a8:ec:46:ea:8e:b8:67: ca:a0:dc:cd:42:ef:5f:3d:6d:7d:33:ae:1e:c4:1f:2b:a9:ca: f4:c8:80:42:e8:8d:51:a2:c7:f7:74:4e:c9:f4:c5:0a:14:91: d8:5e:86:f2:5d:24:06:4f:18:32:d2:10:fc:96:87:5f:e3:ad: b1:83:7a:e6:b6:9d:64:72:d9:23:c0:d8:71:e7:1d:7a:98:ab: 98:6f:1a:bb:90:77:49:a9:12:e9:d7:04:ac:24:a4:ca:35:75: 56:7c:51:28:07:e6:4a:0d:cf:b6:a4:03:9b:12:1d:19:67:fb: 24:5d:c6:43:83:81:c8:6a:0d:57:19:ff:b3:29:37:43:35:1f: ad:00:e2:3a:e8:a1:2a:82:0e:b8:b8:6f:e3:64:29:d1:2c:98: 55:8b:21:33:3e:66:c0:61:ab:5c:1f:b9:68:d9:e9:22:2c:e5: df:9f:45:bf:19:11:38:15:3b:4e:b4:2b:11:3f:da:00:48:f1: 4b:1b:61:84:3b:b7:4b:8a:c8:e9:ca:df:e1:df:35:c1:dd:90: aa:ef:b5:c6:22:0d:fb:e2:f6:31:a6:b3:ae:16:c1:a0:69:3f: db:9b:2c:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4MjYwRjdFMzUxNTJF QTI2NjM1MThCNDlCNUFDMzc0QjRBQjE3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEyf16SMS4sWja3Q73Et5jY+fopQkUjc6KI4K7beSzRKd8Jo26 uCo4fKAplZcypCvPOPIka5ttst7q+LMCxswfy58N3fYKJrOptKGUxMJOfh7xKo7A GaHM3uRiFdbq2c5/o78r3XtXmuzgbuui5o8eLflwHZeOAH5HXc6sLqx1KCMYuq+q 47P7lfpEPLk6/dx+7yA6ZECZ0YbeTie+gmdR9Bq0ARUlNae8wrY1eZSxT6kc+ADv gRyMrAErBfFoX0rPz+mh+43oB9/Z7xwbH15hjE1pLYH9FhfbOyVsS3i50Kbpl8O0 LPvQUSH8kNaWVxSAs/qClVSuYI4HoYdGT8EDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCCYPfjUVLqJmNRi0m1rDdLSrF1AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NDWVBmalVWTHFKbU5SaTBt MXJEZExTckYxQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wlQwDQYJKoZIhvcNAQELBQADggEBAClhnfjOVJiGYZZv0ayF7jWf8ZF06Gl9w3zx 3iYbqOxG6o64Z8qg3M1C7189bX0zrh7EHyupyvTIgELojVGix/d0Tsn0xQoUkdhe hvJdJAZPGDLSEPyWh1/jrbGDeua2nWRy2SPA2HHnHXqYq5hvGruQd0mpEunXBKwk pMo1dVZ8USgH5koNz7akA5sSHRln+yRdxkODgchqDVcZ/7MpN0M1H60A4jrooSqC Dri4b+NkKdEsmFWLITM+ZsBhq1wfuWjZ6SIs5d+fRb8ZETgVO060KxE/2gBI8Usb YYQ7t0uKyOnK3+HfNcHdkKrvtcYiDfvi9jGms64WwaBpP9ubLFg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:58 2025 by rpki-client