$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JeDnsynvSNgPIRLRiud28imDI0I.roa File: JeDnsynvSNgPIRLRiud28imDI0I.roa (raw, json) Hash identifier: 5soRj2QFWNKv67XWZEfcISqHjfHz0BInauWQs6HoduY= Subject key identifier: 25:E0:E7:B3:29:EF:48:D8:0F:21:12:D1:8A:E7:76:F2:29:83:23:42 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35D9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JeDnsynvSNgPIRLRiud28imDI0I.roa Signing time: Mon 10 Feb 2025 13:53:44 +0000 ROA not before: Mon 10 Feb 2025 13:53:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13785 (0x35d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=25E0E7B329EF48D80F2112D18AE776F229832342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:f3:85:ec:a4:d2:9c:52:9f:79:a9:7e:2f: 07:ba:ef:e5:dc:32:9c:8c:02:94:d7:21:22:5e:ca: e6:64:06:60:0c:f8:aa:20:dd:cd:47:c1:dd:39:82: 50:2e:de:cc:55:4c:7c:62:9b:48:2a:5b:ce:9b:ea: 12:c1:2e:28:76:42:a7:92:09:e7:22:95:33:39:3f: 51:cf:88:b0:a6:16:49:d3:c1:4f:e1:2a:bf:f0:a3: 70:a8:da:22:47:bb:16:0b:79:58:fc:40:e2:5a:eb: 33:85:59:fa:2c:69:0e:81:66:4c:28:80:96:c4:8c: 5e:5e:af:28:b0:d5:c7:2e:0b:3a:23:61:2c:2c:bf: 24:8e:74:50:6b:40:5f:7e:c6:40:07:bd:2b:a8:e4: 6c:a2:a2:79:48:80:ec:04:48:ab:82:c8:90:0b:31: 4b:99:29:e7:07:6a:af:b4:2a:e5:6d:f6:b7:77:c1: 4d:d9:0f:b8:a7:e9:b1:df:1a:b9:e4:f0:b8:52:14: 2f:b3:de:5e:95:bf:56:f7:88:cf:f2:ec:3e:a9:48: 97:f0:8b:78:9f:00:af:bd:c8:8f:f8:3b:2d:0f:97: 9c:db:49:6e:c8:9c:60:5a:6b:ec:20:0d:7a:66:d5: 49:ac:e1:65:0f:0d:7b:cc:c2:80:dc:2d:c1:71:94: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E0:E7:B3:29:EF:48:D8:0F:21:12:D1:8A:E7:76:F2:29:83:23:42 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JeDnsynvSNgPIRLRiud28imDI0I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.0.0/21 Signature Algorithm: sha256WithRSAEncryption 85:76:b7:66:67:7d:8d:7c:db:71:a5:34:22:c2:3f:db:ff:f2: 85:94:86:7b:3a:31:4d:5e:30:ac:e9:c3:89:e3:9c:33:66:97: 12:58:c0:00:7b:b5:e3:82:d8:90:ff:99:2e:77:94:f3:b1:13: 9c:56:a5:8f:f3:dc:5f:c5:d5:34:70:a2:11:39:39:d2:5f:fb: be:f1:1c:05:7e:d6:7b:e5:55:18:1d:6e:ba:24:f6:32:2b:b6: 0a:16:87:f5:7f:28:71:3c:eb:29:7e:98:a1:2e:79:0c:7b:5c: 37:49:c9:70:ca:be:31:b5:7b:c0:51:a4:bc:a3:81:90:2a:5c: 78:25:1f:cb:68:d0:b3:6c:50:b1:20:50:50:05:54:80:67:d1: bd:3c:09:86:09:d3:9f:8d:44:33:68:7a:e5:4c:4a:19:a9:bc: cf:48:c4:f4:93:d9:2a:d5:38:de:00:e9:31:21:87:40:3d:b4: 81:4d:10:eb:2a:d3:5c:35:7f:50:b3:9c:a0:2d:8d:18:9c:0f: 2b:37:41:67:1c:ad:2e:53:2c:9c:e2:09:dd:d0:c8:ab:62:43: 4a:a3:d3:52:96:af:83:ea:cc:96:77:f3:01:a8:e6:62:58:22: 09:ed:d6:7b:4a:df:64:91:d6:c5:4d:2b:46:5c:bb:26:9a:a2: cd:d5:57:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI1RTBFN0IzMjlFRjQ4 RDgwRjIxMTJEMThBRTc3NkYyMjk4MzIzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDChPOF7KTSnFKfeal+Lwe67+XcMpyMApTXISJeyuZkBmAM+Kog 3c1Hwd05glAu3sxVTHxim0gqW86b6hLBLih2QqeSCecilTM5P1HPiLCmFknTwU/h Kr/wo3Co2iJHuxYLeVj8QOJa6zOFWfosaQ6BZkwogJbEjF5eryiw1ccuCzojYSws vySOdFBrQF9+xkAHvSuo5GyionlIgOwESKuCyJALMUuZKecHaq+0KuVt9rd3wU3Z D7in6bHfGrnk8LhSFC+z3l6Vv1b3iM/y7D6pSJfwi3ifAK+9yI/4Oy0Pl5zbSW7I nGBaa+wgDXpm1Ums4WUPDXvMwoDcLcFxlDsNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJeDnsynvSNgPIRLRiud28imDI0IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0plRG5zeW52U05nUElSTFJp dWQyOGltREkwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wwAwDQYJKoZIhvcNAQELBQADggEBAIV2t2ZnfY1823GlNCLCP9v/8oWUhns6MU1e MKzpw4njnDNmlxJYwAB7teOC2JD/mS53lPOxE5xWpY/z3F/F1TRwohE5OdJf+77x HAV+1nvlVRgdbrok9jIrtgoWh/V/KHE86yl+mKEueQx7XDdJyXDKvjG1e8BRpLyj gZAqXHglH8to0LNsULEgUFAFVIBn0b08CYYJ05+NRDNoeuVMShmpvM9IxPST2SrV ON4A6TEhh0A9tIFNEOsq01w1f1CznKAtjRicDys3QWccrS5TLJziCd3QyKtiQ0qj 01KWr4PqzJZ38wGo5mJYIgnt1ntK32SR1sVNK0Zcuyaaos3VVzA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:48 2025 by rpki-client