$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgbSUmnWprjQdijhrdlPwWzVG44.roa File: KgbSUmnWprjQdijhrdlPwWzVG44.roa (raw, json) Hash identifier: u6PVRxNlkquOZjMIVqqxAUIsEwhvRF36NkYZurrym9E= Subject key identifier: 2A:06:D2:52:69:D6:A6:B8:D0:76:28:E1:AD:D9:4F:C1:6C:D5:1B:8E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 363C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgbSUmnWprjQdijhrdlPwWzVG44.roa Signing time: Mon 10 Feb 2025 13:54:07 +0000 ROA not before: Mon 10 Feb 2025 13:54:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.195.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13884 (0x363c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2A06D25269D6A6B8D07628E1ADD94FC16CD51B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:34:d6:46:7c:cf:87:9d:88:4a:c1:69:f5: be:07:05:9f:26:1e:b0:d7:e1:16:6f:ee:e7:7e:ca: ed:67:c4:09:0c:e1:c0:89:20:0b:9d:6f:0e:ce:9e: 72:eb:90:70:d4:03:aa:9e:b9:c9:18:be:4a:10:50: 72:a3:77:ee:78:69:a4:d0:05:55:09:d4:b6:39:aa: 4c:a1:78:d6:6a:7e:81:b5:0d:88:c1:5e:e1:b0:ae: 38:9b:d5:b2:51:d8:40:b2:13:e9:00:71:20:a7:8c: 0b:76:44:16:ab:0a:1f:f4:d0:dc:9d:70:af:2c:25: 60:45:44:c8:78:87:85:48:94:65:27:c3:73:bc:df: c7:3c:cf:a5:6e:30:e3:fa:06:c0:ea:35:dd:69:d3: 1d:0b:19:1f:da:86:79:b7:f6:45:d9:0d:11:62:92: e1:11:32:00:04:93:53:87:fe:ab:21:ab:d5:6e:f3: c4:b2:af:28:e5:ab:17:27:2c:7c:c6:5b:b3:04:7d: bf:2a:9d:4b:3f:33:77:24:71:03:10:37:5d:d3:4c: 5e:21:88:48:db:a7:28:ab:9b:aa:22:c7:0b:65:80: 49:13:f2:a1:0e:d0:f9:aa:f3:47:17:b2:85:6a:fd: 38:2c:0a:6e:ab:97:5c:c5:26:ea:45:90:ae:6e:7c: 3b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:06:D2:52:69:D6:A6:B8:D0:76:28:E1:AD:D9:4F:C1:6C:D5:1B:8E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgbSUmnWprjQdijhrdlPwWzVG44.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.236.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:08:fe:4a:d9:88:5f:91:85:04:48:54:c1:6c:be:bf:be:b9: 98:c7:fc:b2:09:5c:b0:c7:02:fa:8a:4e:7d:99:f9:17:7a:cb: 2b:35:ff:05:73:46:43:5b:2a:e2:0f:d0:0c:6f:67:43:93:fd: 56:eb:38:e6:34:e6:3b:3c:02:6b:04:4a:15:cc:d2:bb:6d:01: 53:f2:c2:58:f0:1c:43:9c:2c:5e:71:b9:ea:27:b1:eb:60:fc: 79:f1:9e:f4:96:4c:3c:72:da:07:61:80:be:56:cc:ec:27:f2: ad:4e:c2:b0:48:9f:33:cb:b8:42:e3:59:c4:bc:6b:d0:16:6d: 6f:c9:fa:a6:60:5e:d1:9e:c7:8a:a3:b2:c6:b7:db:2b:57:c1: 97:4c:87:95:3f:6c:52:a4:19:54:c7:58:9a:d2:28:9f:f5:26: 21:12:06:4e:79:0f:f5:86:46:f7:3e:25:c5:9a:30:90:b1:89: db:c2:3f:f5:cd:90:9f:b1:84:43:be:35:c0:2e:49:f4:d9:d2: 9c:e6:d1:71:92:18:61:5d:0a:42:f8:a6:aa:27:c0:6e:f4:b3: 04:cf:d6:02:05:60:31:f2:99:57:59:c7:51:11:dd:d7:b8:c0: 05:c1:b0:a7:eb:4b:ef:26:65:93:87:9a:0f:7b:65:f2:81:aa: 31:d5:80:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBMDZEMjUyNjlENkE2 QjhEMDc2MjhFMUFERDk0RkMxNkNENTFCOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDamjTWRnzPh52ISsFp9b4HBZ8mHrDX4RZv7ud+yu1nxAkM4cCJ IAudbw7OnnLrkHDUA6qeuckYvkoQUHKjd+54aaTQBVUJ1LY5qkyheNZqfoG1DYjB XuGwrjib1bJR2ECyE+kAcSCnjAt2RBarCh/00NydcK8sJWBFRMh4h4VIlGUnw3O8 38c8z6VuMOP6BsDqNd1p0x0LGR/ahnm39kXZDRFikuERMgAEk1OH/qshq9Vu88Sy ryjlqxcnLHzGW7MEfb8qnUs/M3ckcQMQN13TTF4hiEjbpyirm6oixwtlgEkT8qEO 0Pmq80cXsoVq/TgsCm6rl1zFJupFkK5ufDvDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKgbSUmnWprjQdijhrdlPwWzVG44wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tnYlNVbW5XcHJqUWRpamhy ZGxQd1d6Vkc0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+wwDQYJKoZIhvcNAQELBQADggEBAAsI/krZiF+RhQRIVMFsvr++uZjH/LIJXLDH AvqKTn2Z+Rd6yys1/wVzRkNbKuIP0AxvZ0OT/VbrOOY05js8AmsEShXM0rttAVPy wljwHEOcLF5xueonsetg/HnxnvSWTDxy2gdhgL5WzOwn8q1OwrBInzPLuELjWcS8 a9AWbW/J+qZgXtGex4qjssa32ytXwZdMh5U/bFKkGVTHWJrSKJ/1JiESBk55D/WG Rvc+JcWaMJCxidvCP/XNkJ+xhEO+NcAuSfTZ0pzm0XGSGGFdCkL4pqonwG70swTP 1gIFYDHymVdZx1ER3de4wAXBsKfrS+8mZZOHmg97ZfKBqjHVgHc= -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:36 2025 by rpki-client