$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H0y2t5iWYhlLgqJK7TWeNVGMWW0.roa File: H0y2t5iWYhlLgqJK7TWeNVGMWW0.roa (raw, json) Hash identifier: nerlcM9H8BB30D4/CIxwVjp/zJoofko2I6WGokSzdac= Subject key identifier: 1F:4C:B6:B7:98:96:62:19:4B:82:A2:4A:ED:35:9E:35:51:8C:59:6D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35AE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H0y2t5iWYhlLgqJK7TWeNVGMWW0.roa Signing time: Mon 10 Feb 2025 13:53:35 +0000 ROA not before: Mon 10 Feb 2025 13:53:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.223.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13742 (0x35ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1F4CB6B7989662194B82A24AED359E35518C596D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:f7:11:7d:7c:b8:7a:d4:b7:76:d1:df:01: 73:cc:21:e4:d2:4d:f3:ad:e0:28:72:80:b8:c9:1a: 27:d5:07:5e:02:c7:c1:c8:a8:25:b0:10:49:e7:93: fc:fd:81:ec:b1:0d:1a:d2:97:16:88:ea:66:20:7c: f3:fc:9d:ee:30:f4:39:94:c3:9a:65:fe:2e:1e:ea: 5e:18:16:51:69:98:f9:e3:30:ed:e9:1e:2c:14:d9: fb:b8:be:4f:54:1c:dd:c9:00:3a:f1:7a:27:04:80: 95:5c:1f:fc:1c:fb:a1:b2:c8:9f:ec:1e:d1:e1:a8: ed:36:b9:3d:cf:14:f5:0a:a0:ef:35:04:ea:50:ef: 16:b7:f0:60:dd:65:63:94:e8:42:51:7c:d4:4d:9d: 30:79:ea:9b:13:9d:7d:c1:db:e0:42:96:08:8b:8f: c9:b9:32:d7:c1:6d:6f:23:29:c0:62:37:17:b9:78: 1a:2a:84:72:e8:7f:c7:72:80:b7:f2:19:8e:a0:26: 97:47:5c:79:80:d4:82:cc:ca:e7:9a:97:7c:8a:63: f5:1f:6a:60:8e:31:61:32:1f:ca:d7:0a:ff:e2:3c: 42:f8:fd:b3:f1:6b:ee:40:06:46:32:85:23:a4:3d: c4:e3:3a:bf:66:2d:8c:a7:b9:00:e2:b8:5b:c7:9b: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:B6:B7:98:96:62:19:4B:82:A2:4A:ED:35:9E:35:51:8C:59:6D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H0y2t5iWYhlLgqJK7TWeNVGMWW0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.223.0/26 Signature Algorithm: sha256WithRSAEncryption 20:6b:7c:c2:7d:94:80:74:b7:6b:95:6a:ae:24:b0:23:98:7f: b7:90:50:cc:ad:cb:7e:d4:be:1f:a6:4e:e9:1e:72:62:22:bd: 17:23:07:e3:0f:f5:08:a1:84:fa:98:06:39:82:23:cb:02:aa: 6f:60:8a:c6:92:7e:8e:68:6f:40:1f:29:26:af:6b:92:3f:56: 49:8d:a2:ef:f0:9a:1e:98:46:74:ba:99:15:3c:4a:28:e4:ac: a4:09:33:df:59:a2:c5:91:30:0d:db:7a:17:ff:52:ca:eb:3a: b7:4e:d3:23:15:a0:34:7f:b6:2d:61:6a:cf:4b:1a:86:ed:91: 5f:22:db:fd:74:49:38:22:ff:6d:c6:48:eb:f2:76:33:c7:1b: 58:5c:9a:38:50:34:4d:db:4b:7d:2b:f4:de:ef:31:a6:e5:3e: 6a:45:50:64:15:66:87:c3:20:c9:bf:c0:8f:80:14:ba:e7:bd: e4:17:97:f3:cb:c9:5c:63:ad:69:0b:1f:a2:2b:d7:ed:6c:7e: 50:04:75:25:89:cb:ce:8c:45:9b:7f:23:ca:57:6a:5f:3f:96: b4:99:b3:2a:1d:2b:90:2d:98:77:e7:76:f3:e8:f3:4e:e9:93: 0e:ad:1f:e9:b8:36:60:dd:df:b7:c0:04:da:97:29:44:69:84: cc:f8:7c:57 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNa4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGNENCNkI3OTg5NjYy MTk0QjgyQTI0QUVEMzU5RTM1NTE4QzU5NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC81/cRfXy4etS3dtHfAXPMIeTSTfOt4ChygLjJGifVB14Cx8HI qCWwEEnnk/z9geyxDRrSlxaI6mYgfPP8ne4w9DmUw5pl/i4e6l4YFlFpmPnjMO3p HiwU2fu4vk9UHN3JADrxeicEgJVcH/wc+6GyyJ/sHtHhqO02uT3PFPUKoO81BOpQ 7xa38GDdZWOU6EJRfNRNnTB56psTnX3B2+BClgiLj8m5MtfBbW8jKcBiNxe5eBoq hHLof8dygLfyGY6gJpdHXHmA1ILMyueal3yKY/UfamCOMWEyH8rXCv/iPEL4/bPx a+5ABkYyhSOkPcTjOr9mLYynuQDiuFvHm66xAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUH0y2t5iWYhlLgqJK7TWeNVGMWW0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0gweTJ0NWlXWWhsTGdxSks3 VFdlTlZHTVdXMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wd8AMA0GCSqGSIb3DQEBCwUAA4IBAQAga3zCfZSAdLdrlWquJLAjmH+3kFDMrct+ 1L4fpk7pHnJiIr0XIwfjD/UIoYT6mAY5giPLAqpvYIrGkn6OaG9AHykmr2uSP1ZJ jaLv8JoemEZ0upkVPEoo5KykCTPfWaLFkTAN23oX/1LK6zq3TtMjFaA0f7YtYWrP SxqG7ZFfItv9dEk4Iv9txkjr8nYzxxtYXJo4UDRN20t9K/Te7zGm5T5qRVBkFWaH wyDJv8CPgBS6573kF5fzy8lcY61pCx+iK9ftbH5QBHUlicvOjEWbfyPKV2pfP5a0 mbMqHSuQLZh353bz6PNO6ZMOrR/puDZg3d+3wATalylEaYTM+HxX -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:34 2025 by rpki-client