$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eg6WQewN8VgW14-VhJ0WMZQELjM.roa File: Eg6WQewN8VgW14-VhJ0WMZQELjM.roa (raw, json) Hash identifier: e9fONVwenzM2WX8EPA70crWrNDJfpAZY8yqBtY2CLo8= Subject key identifier: 12:0E:96:41:EC:0D:F1:58:16:D7:8F:95:84:9D:16:31:94:04:2E:33 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 343E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eg6WQewN8VgW14-VhJ0WMZQELjM.roa Signing time: Mon 10 Feb 2025 13:52:12 +0000 ROA not before: Mon 10 Feb 2025 13:52:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13374 (0x343e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=120E9641EC0DF15816D78F95849D163194042E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6f:c5:3f:09:1b:40:53:fd:66:d0:8a:cb:84: fa:21:fd:8b:4d:1d:1b:a6:cf:82:1d:01:23:ed:a8: 45:b8:be:b4:3b:fd:9e:c4:63:4c:f8:45:af:9c:8b: 95:2e:6a:17:1c:2d:71:7c:d9:47:26:dc:60:06:d2: 0b:94:45:c6:c4:bb:93:8b:92:04:97:39:00:c9:fd: 09:fe:3b:f4:ae:9c:aa:0e:0d:20:4e:b5:77:d9:7d: 7a:02:b6:3d:c1:be:e6:ca:c0:9e:a6:79:fd:00:be: a8:14:b5:04:ca:12:ea:44:a4:db:99:99:b3:39:bc: 42:00:8f:ff:e1:59:a5:b8:8f:28:e5:6c:e1:63:6e: df:a1:aa:fa:23:e1:42:b5:17:33:33:21:5e:f1:65: 21:5e:55:6d:5e:b7:75:34:55:ab:3a:64:16:f4:6b: 18:7b:e2:6d:1d:51:0b:57:54:56:3d:2c:1f:fa:08: 50:ff:f0:bf:9c:98:e7:76:9a:c5:28:90:9c:5d:7f: 0e:5c:0e:4a:2d:41:27:e6:ac:73:86:7a:f0:34:f9: 80:bc:59:5d:dc:87:7b:65:3e:f3:f9:4a:9d:ac:f8: 25:36:6c:84:0b:6f:77:69:d1:1b:93:c3:cc:07:cc: 31:bb:2d:02:d3:99:37:1d:bb:26:6c:8c:13:a3:b0: cc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0E:96:41:EC:0D:F1:58:16:D7:8F:95:84:9D:16:31:94:04:2E:33 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eg6WQewN8VgW14-VhJ0WMZQELjM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.4.0/22 Signature Algorithm: sha256WithRSAEncryption 21:a4:16:fa:26:ce:66:4d:0b:4a:d6:62:f8:0a:0f:99:0f:e8: ed:44:1d:02:46:21:e9:48:2e:db:9b:db:44:b9:12:f2:94:e7: 43:25:0c:a2:34:ca:53:d8:17:1b:0e:77:85:f4:7b:23:d7:b1: dd:16:9a:08:c1:8e:1d:56:cb:b1:ed:c4:d0:49:e6:6f:dc:fb: cc:37:39:15:3c:bf:0b:6d:f7:e4:f0:6d:0c:fd:ff:3a:26:14: 9b:c6:dc:58:cc:95:28:30:e4:f1:85:90:11:0e:69:96:bb:52: a3:a8:50:1d:4d:b1:a3:de:3c:8b:7a:52:ea:25:ea:af:ec:53: 1e:3b:71:88:e4:29:01:c8:11:18:bd:b3:87:e2:8b:8a:c8:69: 44:61:24:88:d9:3f:56:d9:74:be:39:d3:8e:c5:ea:1b:34:d4: 99:88:f6:50:9e:58:f0:a9:b4:0f:a9:e4:ae:8b:3c:0f:4a:26: 09:f1:17:27:9f:6d:06:36:b9:63:78:83:9a:58:4b:cb:0e:70: 90:bb:99:4f:b7:93:e8:b1:1d:7b:93:b5:c7:c6:fc:a8:9d:4c: d9:08:ad:02:00:d2:b0:56:8e:6d:2f:a2:c6:fe:2a:7a:f9:cf: dd:e9:c1:ec:82:3c:99:30:dc:cf:63:d6:7b:ee:77:f3:b2:4c: d6:ed:dc:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICND4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEyMEU5NjQxRUMwREYx NTgxNkQ3OEY5NTg0OUQxNjMxOTQwNDJFMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYb8U/CRtAU/1m0IrLhPoh/YtNHRumz4IdASPtqEW4vrQ7/Z7E Y0z4Ra+ci5UuahccLXF82Ucm3GAG0guURcbEu5OLkgSXOQDJ/Qn+O/SunKoODSBO tXfZfXoCtj3BvubKwJ6mef0AvqgUtQTKEupEpNuZmbM5vEIAj//hWaW4jyjlbOFj bt+hqvoj4UK1FzMzIV7xZSFeVW1et3U0Vas6ZBb0axh74m0dUQtXVFY9LB/6CFD/ 8L+cmOd2msUokJxdfw5cDkotQSfmrHOGevA0+YC8WV3ch3tlPvP5Sp2s+CU2bIQL b3dp0RuTw8wHzDG7LQLTmTcduyZsjBOjsMyBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEg6WQewN8VgW14+VhJ0WMZQELjMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VnNldRZXdOOFZnVzE0LVZo SjBXTVpRRUxqTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wgQwDQYJKoZIhvcNAQELBQADggEBACGkFvomzmZNC0rWYvgKD5kP6O1EHQJGIelI Ltub20S5EvKU50MlDKI0ylPYFxsOd4X0eyPXsd0WmgjBjh1Wy7HtxNBJ5m/c+8w3 ORU8vwtt9+TwbQz9/zomFJvG3FjMlSgw5PGFkBEOaZa7UqOoUB1NsaPePIt6Uuol 6q/sUx47cYjkKQHIERi9s4fii4rIaURhJIjZP1bZdL45047F6hs01JmI9lCeWPCp tA+p5K6LPA9KJgnxFyefbQY2uWN4g5pYS8sOcJC7mU+3k+ixHXuTtcfG/KidTNkI rQIA0rBWjm0vosb+Knr5z93pweyCPJkw3M9j1nvud/OyTNbt3Do= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:43 2025 by rpki-client