$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NIILdtVuDAkKKTcRKq1gCD4ZphU.roa File: NIILdtVuDAkKKTcRKq1gCD4ZphU.roa (raw, json) Hash identifier: kgiG5sW56Kax0+k08yaq/Xh65/T2FhOyarCadVp0JJE= Subject key identifier: 34:82:0B:76:D5:6E:0C:09:0A:29:37:11:2A:AD:60:08:3E:19:A6:15 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33A3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NIILdtVuDAkKKTcRKq1gCD4ZphU.roa Signing time: Mon 10 Feb 2025 13:51:37 +0000 ROA not before: Mon 10 Feb 2025 13:51:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13219 (0x33a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=34820B76D56E0C090A2937112AAD60083E19A615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:27:fe:a5:99:ed:a4:c6:1a:1f:b3:d0:63: 03:12:2a:12:a9:d9:72:0a:2a:93:3f:d9:89:6e:c6: c3:8b:40:f2:1c:67:28:89:47:e9:df:87:06:ea:8a: 9b:1a:f7:f6:0e:28:32:7f:2d:b1:cf:9f:01:b2:64: b1:33:cf:11:9b:4f:a2:07:3d:c8:47:04:71:60:b4: 8e:d3:7c:fa:84:62:97:fe:f3:67:95:ba:89:d5:4e: 62:8d:c2:54:5b:0a:d2:45:b8:0e:6a:81:6a:cd:77: 97:5f:52:e1:91:92:29:b5:da:2f:bf:29:47:a0:5e: 70:d2:0a:45:5e:40:56:65:7b:b3:10:72:01:97:d0: 58:50:59:ed:f6:de:8b:0a:12:74:76:70:d2:cc:02: 0f:3f:99:38:52:f7:a8:06:ae:2f:e0:ba:a2:a4:8a: 33:69:ec:19:b5:49:a8:67:26:7f:50:47:c0:32:08: 15:ae:bc:3f:4d:29:f8:14:e2:48:f4:3f:6b:18:4e: 90:6a:3e:27:90:93:32:38:7c:ab:78:6f:d9:07:22: 39:f0:3b:4c:9a:f9:f8:f8:bd:b5:93:52:9b:a2:d8: 0a:f1:63:51:e6:e6:db:ca:60:48:20:a4:56:e3:b2: 44:55:7f:cd:be:13:45:2d:d5:ac:90:69:51:dd:9a: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:82:0B:76:D5:6E:0C:09:0A:29:37:11:2A:AD:60:08:3E:19:A6:15 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NIILdtVuDAkKKTcRKq1gCD4ZphU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.75.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:2e:da:4e:f2:8d:f7:6c:ff:bc:5c:29:c2:f3:59:86:1e:9d: e8:1d:fe:74:05:d5:cb:af:e1:d2:eb:24:02:33:69:d8:9b:ab: 67:9e:71:88:c3:90:62:17:eb:89:10:5b:05:e5:ba:3d:ac:4c: 55:a0:45:e7:1f:f2:1a:c1:9c:8b:c7:2e:5f:0a:4d:83:34:09: 08:75:ea:29:b1:1a:6a:d0:79:fa:3a:d9:bd:cb:0e:c0:1e:ae: ab:d5:39:c5:01:15:ac:36:a8:ff:fc:97:48:59:27:81:e7:3e: 82:33:52:03:33:35:fb:e8:11:e4:b1:d8:c6:c9:ce:4c:a4:9f: ad:3c:be:70:09:71:34:79:ed:dc:f6:a5:7c:4b:4c:92:f9:ea: 37:20:19:86:1b:0d:b7:ab:d3:db:78:31:29:72:c6:fd:1f:8a: 1a:53:ba:d0:4c:ef:96:d5:be:af:72:f0:d0:57:72:ac:0c:ee: bd:66:cb:f5:e0:c7:38:ae:2f:31:ed:0b:96:f0:d2:c6:6f:94: 35:18:f8:97:d4:53:e3:ad:0b:61:64:3d:1d:30:41:ba:25:70: ac:a3:0d:5d:f4:82:fa:82:59:37:6e:bd:0f:d0:29:35:fc:59: 0c:fe:59:6f:f1:25:68:44:6f:61:36:36:ea:a5:d3:27:5b:b8: a2:5b:95:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM0ODIwQjc2RDU2RTBD MDkwQTI5MzcxMTJBQUQ2MDA4M0UxOUE2MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDedyf+pZntpMYaH7PQYwMSKhKp2XIKKpM/2YluxsOLQPIcZyiJ R+nfhwbqipsa9/YOKDJ/LbHPnwGyZLEzzxGbT6IHPchHBHFgtI7TfPqEYpf+82eV uonVTmKNwlRbCtJFuA5qgWrNd5dfUuGRkim12i+/KUegXnDSCkVeQFZle7MQcgGX 0FhQWe323osKEnR2cNLMAg8/mThS96gGri/guqKkijNp7Bm1SahnJn9QR8AyCBWu vD9NKfgU4kj0P2sYTpBqPieQkzI4fKt4b9kHIjnwO0ya+fj4vbWTUpui2ArxY1Hm 5tvKYEggpFbjskRVf82+E0Ut1ayQaVHdmpPvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNIILdtVuDAkKKTcRKq1gCD4ZphUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05JSUxkdFZ1REFrS0tUY1JL cTFnQ0Q0WnBoVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wkswDQYJKoZIhvcNAQELBQADggEBAHsu2k7yjfds/7xcKcLzWYYenegd/nQF1cuv 4dLrJAIzadibq2eecYjDkGIX64kQWwXluj2sTFWgRecf8hrBnIvHLl8KTYM0CQh1 6imxGmrQefo62b3LDsAerqvVOcUBFaw2qP/8l0hZJ4HnPoIzUgMzNfvoEeSx2MbJ zkykn608vnAJcTR57dz2pXxLTJL56jcgGYYbDber09t4MSlyxv0fihpTutBM75bV vq9y8NBXcqwM7r1my/XgxziuLzHtC5bw0sZvlDUY+JfUU+OtC2FkPR0wQbolcKyj DV30gvqCWTduvQ/QKTX8WQz+WW/xJWhEb2E2Nuql0ydbuKJblUg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:32 2025 by rpki-client