$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N4JsNuigg-GYnXVTJo7_XG92BlA.roa File: N4JsNuigg-GYnXVTJo7_XG92BlA.roa (raw, json) Hash identifier: 5GJqWJw5TnXBsJgU0EkshoVw7BWcjGR80hFgkRdX8sg= Subject key identifier: 37:82:6C:36:E8:A0:83:E1:98:9D:75:53:26:8E:FF:5C:6F:76:06:50 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35AF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N4JsNuigg-GYnXVTJo7_XG92BlA.roa Signing time: Mon 10 Feb 2025 13:53:35 +0000 ROA not before: Mon 10 Feb 2025 13:53:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13743 (0x35af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=37826C36E8A083E1989D7553268EFF5C6F760650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:70:2b:2c:1b:61:08:e1:ac:f5:70:99:87: d8:b3:89:a1:57:6b:44:8e:6d:31:20:f6:fb:2e:76: 30:ed:bc:81:3f:fc:54:f8:be:e4:47:d6:6b:db:b8: 2c:a5:48:03:2f:8c:2d:d4:e1:f4:18:b4:00:15:20: 86:ca:64:40:55:73:36:a9:53:a1:db:84:db:74:14: 3d:fe:a0:4c:57:31:0d:20:b8:73:f5:2c:6e:82:6c: c1:7c:68:10:2e:3c:d8:d6:55:8e:05:71:4f:cb:9a: 3e:32:94:07:0d:a1:58:54:3b:d9:29:b5:5f:93:da: 08:14:87:0e:37:7f:1a:f7:1d:d7:41:31:75:76:b3: 73:ae:ce:76:59:78:af:dc:e2:56:ec:9d:15:84:8a: fa:aa:e7:03:ff:5e:54:73:b5:b3:0e:48:a2:ff:a0: 7a:f3:2f:c3:be:3c:3b:0c:17:55:54:4d:58:70:a5: 12:05:fd:e1:5f:f9:0c:c9:93:80:ea:23:2c:ed:ba: 26:f6:99:42:d9:9c:3f:68:37:b7:de:74:43:10:a1: fc:64:df:60:fa:85:21:83:17:d2:53:ca:b0:c6:52: db:88:ce:ca:b8:4c:d9:30:3a:39:4c:8b:45:a6:06: f9:ed:5e:85:29:a0:5c:89:58:2a:99:c6:31:f8:19: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:6C:36:E8:A0:83:E1:98:9D:75:53:26:8E:FF:5C:6F:76:06:50 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N4JsNuigg-GYnXVTJo7_XG92BlA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.44.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:d2:cc:2c:c8:39:db:cc:d9:fd:36:05:48:bf:1f:dc:d6:d2: 9d:b3:e8:02:97:22:4a:4b:80:7e:da:8b:6a:8e:65:a0:ee:17: 47:b4:bc:c3:30:be:ae:3c:29:6d:13:fc:2b:d4:8d:2e:4b:fa: fa:41:94:cb:90:fb:69:bc:6d:78:19:98:1a:cd:85:92:f9:3e: 08:6f:8d:6e:c0:0f:92:84:0a:0a:64:4a:46:c8:ad:d2:5d:24: 5f:bd:85:44:29:5c:07:c0:89:ca:cf:8a:67:80:4e:ab:c2:3e: 59:08:6c:6b:81:cf:35:04:98:6a:42:9f:97:61:4c:ff:bb:9c: 33:1d:cb:e0:33:3d:b1:ce:76:cd:0d:d8:10:b1:e8:bd:58:07: 3c:8e:b8:91:88:4c:11:1d:6c:43:f8:a1:95:55:ec:fa:5e:57: b3:f6:05:ae:9b:c0:f8:09:c2:d9:ad:0e:57:37:89:07:f4:46: 86:31:99:b7:6a:53:17:0e:a7:2b:99:a1:cb:b6:0a:b2:82:f2: 2f:74:29:bb:33:3b:09:5a:46:d3:4f:b0:2c:71:05:d4:d4:12: 91:cc:0c:73:2b:8d:d0:be:e4:fb:4e:ad:95:b9:99:06:da:9e: 4b:f2:23:c0:68:e0:92:b5:20:9c:4a:d4:c6:6f:1c:50:14:53: 45:1d:fa:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3ODI2QzM2RThBMDgz RTE5ODlENzU1MzI2OEVGRjVDNkY3NjA2NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC543ArLBthCOGs9XCZh9iziaFXa0SObTEg9vsudjDtvIE//FT4 vuRH1mvbuCylSAMvjC3U4fQYtAAVIIbKZEBVczapU6HbhNt0FD3+oExXMQ0guHP1 LG6CbMF8aBAuPNjWVY4FcU/Lmj4ylAcNoVhUO9kptV+T2ggUhw43fxr3HddBMXV2 s3OuznZZeK/c4lbsnRWEivqq5wP/XlRztbMOSKL/oHrzL8O+PDsMF1VUTVhwpRIF /eFf+QzJk4DqIyztuib2mULZnD9oN7fedEMQofxk32D6hSGDF9JTyrDGUtuIzsq4 TNkwOjlMi0WmBvntXoUpoFyJWCqZxjH4GYXPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUN4JsNuigg+GYnXVTJo7/XG92BlAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL040SnNOdWlnZy1HWW5YVlRK bzdfWEc5MkJsQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wywwDQYJKoZIhvcNAQELBQADggEBAB7SzCzIOdvM2f02BUi/H9zW0p2z6AKXIkpL gH7ai2qOZaDuF0e0vMMwvq48KW0T/CvUjS5L+vpBlMuQ+2m8bXgZmBrNhZL5Pghv jW7AD5KECgpkSkbIrdJdJF+9hUQpXAfAicrPimeATqvCPlkIbGuBzzUEmGpCn5dh TP+7nDMdy+AzPbHOds0N2BCx6L1YBzyOuJGITBEdbEP4oZVV7PpeV7P2Ba6bwPgJ wtmtDlc3iQf0RoYxmbdqUxcOpyuZocu2CrKC8i90KbszOwlaRtNPsCxxBdTUEpHM DHMrjdC+5PtOrZW5mQbankvyI8Bo4JK1IJxK1MZvHFAUU0Ud+u0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:52 2025 by rpki-client