$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GipNNh7ZyCgs2qnVpUhB_-xZbV4.roa File: GipNNh7ZyCgs2qnVpUhB_-xZbV4.roa (raw, json) Hash identifier: /BESQ46HV3SdUFquT68gxkC3k2Mnk1b2gec6ensCZvU= Subject key identifier: 1A:2A:4D:36:1E:D9:C8:28:2C:DA:A9:D5:A5:48:41:FF:EC:59:6D:5E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 366F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GipNNh7ZyCgs2qnVpUhB_-xZbV4.roa Signing time: Mon 10 Feb 2025 13:54:19 +0000 ROA not before: Mon 10 Feb 2025 13:54:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13935 (0x366f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1A2A4D361ED9C8282CDAA9D5A54841FFEC596D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:60:bc:36:05:74:4b:a0:de:2f:57:0a:22: bd:5d:5a:f8:34:90:6e:23:28:e0:0d:0e:80:f1:e4: 79:c0:a1:46:ab:0d:00:4e:23:ed:24:fd:89:7e:f0: d2:a2:c0:06:da:b1:f8:47:5a:35:12:a6:fb:22:c2: b3:c3:55:38:66:44:49:4b:a8:72:c9:b2:b3:e3:8f: a9:5a:dd:57:f0:1f:b0:de:bc:7d:6a:f4:cb:a6:bf: 14:2b:58:f8:d1:4b:64:88:cf:f5:da:48:1f:74:02: 19:6f:54:00:d2:36:5f:d2:17:d4:57:82:34:aa:1f: 38:7b:69:1b:ae:8f:fe:1d:ff:37:94:a8:a6:2c:2a: fd:75:51:14:8c:f4:bb:58:62:5e:0f:a9:1e:b4:15: 86:ad:bb:58:94:04:66:d3:2b:94:9c:8b:83:6e:e7: 9c:20:85:86:c2:33:d6:fe:7e:0f:c9:d3:bc:fa:01: 63:67:85:7d:38:a5:33:79:61:41:8b:35:6d:c3:6a: a0:45:ea:4d:37:a1:0f:83:c1:0d:f9:eb:10:91:1e: c1:c8:a8:c7:9d:a7:68:70:67:29:e2:7e:fa:11:f3: cf:5f:2a:fd:19:ac:2f:3c:c5:9e:fb:d3:02:a2:d1: e6:64:97:50:cb:2d:0b:48:20:a6:5a:15:fa:cd:87: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:4D:36:1E:D9:C8:28:2C:DA:A9:D5:A5:48:41:FF:EC:59:6D:5E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GipNNh7ZyCgs2qnVpUhB_-xZbV4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.20.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:8b:fa:df:eb:0a:4b:7f:20:d1:cb:77:6a:ac:dd:60:55:44: 59:37:ce:45:a7:2a:7e:c5:43:27:1d:3b:bc:e7:dd:b5:72:d3: 1d:db:ea:24:c0:e1:ad:68:54:38:6a:a3:ec:20:fa:01:95:1d: 85:73:18:47:d3:31:ba:bf:5a:f5:bc:74:42:e0:48:b4:24:87: b4:bd:bd:ff:d6:38:dd:ad:e5:cd:71:72:68:dc:07:74:0b:a7: 65:06:3f:b9:fb:76:ee:ea:ca:02:68:a1:dd:96:c1:93:0d:3f: ee:aa:13:10:fa:bf:50:2e:cc:57:51:6d:f3:68:a1:f5:ec:31: b8:31:80:0d:c7:d8:fe:ca:5e:cc:c7:1d:12:25:eb:62:80:23: 95:58:73:14:dd:4b:9e:5e:bc:21:32:27:0f:d9:ca:48:e7:65: 92:53:de:b8:89:89:b9:26:9d:3e:52:90:4f:1d:f6:0a:69:0d: 19:e3:02:27:e2:f6:6d:bd:f7:85:6b:59:ce:5a:f8:38:da:24: 0b:19:c0:b1:e3:13:f4:b6:33:dd:46:2b:8a:30:22:81:bd:5c: 45:46:ee:50:5f:7c:5f:98:ba:05:d4:b7:69:15:2e:49:92:90: df:89:71:77:fa:2e:61:a2:6e:51:9e:2c:5e:a3:41:b0:64:b8: 69:e6:93:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBMkE0RDM2MUVEOUM4 MjgyQ0RBQTlENUE1NDg0MUZGRUM1OTZENUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeMGC8NgV0S6DeL1cKIr1dWvg0kG4jKOANDoDx5HnAoUarDQBO I+0k/Yl+8NKiwAbasfhHWjUSpvsiwrPDVThmRElLqHLJsrPjj6la3VfwH7DevH1q 9MumvxQrWPjRS2SIz/XaSB90AhlvVADSNl/SF9RXgjSqHzh7aRuuj/4d/zeUqKYs Kv11URSM9LtYYl4PqR60FYatu1iUBGbTK5Sci4Nu55wghYbCM9b+fg/J07z6AWNn hX04pTN5YUGLNW3DaqBF6k03oQ+DwQ356xCRHsHIqMedp2hwZynifvoR889fKv0Z rC88xZ770wKi0eZkl1DLLQtIIKZaFfrNh7nZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGipNNh7ZyCgs2qnVpUhB/+xZbV4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dpcE5OaDdaeUNnczJxblZw VWhCXy14WmJWNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wRQwDQYJKoZIhvcNAQELBQADggEBAJ6L+t/rCkt/INHLd2qs3WBVRFk3zkWnKn7F QycdO7zn3bVy0x3b6iTA4a1oVDhqo+wg+gGVHYVzGEfTMbq/WvW8dELgSLQkh7S9 vf/WON2t5c1xcmjcB3QLp2UGP7n7du7qygJood2WwZMNP+6qExD6v1AuzFdRbfNo ofXsMbgxgA3H2P7KXszHHRIl62KAI5VYcxTdS55evCEyJw/ZykjnZZJT3riJibkm nT5SkE8d9gppDRnjAifi9m2994VrWc5a+DjaJAsZwLHjE/S2M91GK4owIoG9XEVG 7lBffF+YugXUt2kVLkmSkN+JcXf6LmGiblGeLF6jQbBkuGnmk9s= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:52 2025 by rpki-client