$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PIM_MCrxqZI9RgY_hEzfV7mLDnY.roa File: PIM_MCrxqZI9RgY_hEzfV7mLDnY.roa (raw, json) Hash identifier: vUOe1qHC/0KHYAa6fcjCO61HlAPMY/JM31rOcGhhijo= Subject key identifier: 3C:83:3F:30:2A:F1:A9:92:3D:46:06:3F:84:4C:DF:57:B9:8B:0E:76 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3458 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PIM_MCrxqZI9RgY_hEzfV7mLDnY.roa Signing time: Mon 10 Feb 2025 13:52:18 +0000 ROA not before: Mon 10 Feb 2025 13:52:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13400 (0x3458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3C833F302AF1A9923D46063F844CDF57B98B0E76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:b6:c6:9c:be:a6:ee:35:3f:9e:99:18:62: 4b:e9:d3:90:1e:8d:01:8f:aa:dc:ce:e9:59:8c:21: 99:9a:7a:71:1d:fb:f0:20:8e:22:69:ad:e9:dd:61: be:0b:07:e2:fd:f6:16:1a:64:86:48:97:1f:31:19: a1:b4:c2:d9:ce:ee:e5:1a:7b:1f:7c:d7:e2:75:3d: db:5e:dc:bd:5f:95:a4:dd:9e:06:2f:2a:7c:31:9a: fc:51:36:61:36:15:5c:6c:31:e7:9c:0b:e3:6f:56: ec:77:4d:86:a2:94:9e:39:dc:09:96:c1:36:eb:02: dd:31:37:c1:48:52:77:99:8f:47:30:b0:cc:17:b7: 42:a6:c8:1d:57:df:d3:e2:1c:f7:02:1e:22:72:7e: 9d:77:65:23:6e:b6:d4:fc:8f:31:83:a7:17:4c:30: 5f:f8:0a:9d:11:0c:23:21:b5:a5:dc:db:f2:9b:84: 9b:c8:86:b1:56:5c:7c:0b:0d:04:e6:c4:96:5b:c4: 04:7f:4c:87:50:f9:4a:b7:2e:ed:55:88:53:4a:2c: 39:43:26:8c:b0:df:b1:2a:4e:f7:30:8d:b5:8e:fa: 68:4c:05:00:6b:bc:6e:61:a5:db:e9:d7:3e:9a:50: 36:42:06:38:13:0a:29:06:75:50:c1:1e:ce:60:e3: d1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:83:3F:30:2A:F1:A9:92:3D:46:06:3F:84:4C:DF:57:B9:8B:0E:76 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PIM_MCrxqZI9RgY_hEzfV7mLDnY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.232.0/21 Signature Algorithm: sha256WithRSAEncryption 53:a7:61:f9:a1:44:53:fe:83:61:4e:cf:e8:46:a4:87:e1:09: 3c:cc:dc:1b:77:13:2e:00:7f:af:02:e4:63:99:4c:aa:9e:96: 63:82:c9:40:7e:27:7e:72:5e:d9:8d:69:a1:2f:f0:58:55:31: 89:c6:9d:b4:b4:57:a0:a4:a8:7c:51:ef:77:c6:49:72:15:63: 99:f6:c1:20:af:34:36:82:f8:d0:c2:95:87:6e:b5:46:07:28: ce:82:ee:de:79:a9:55:0a:cd:8d:4b:03:69:ea:ea:31:98:a6: 7c:89:3e:ab:6d:23:3c:2b:be:06:42:5b:a0:be:67:3d:57:30: 0b:bf:37:80:23:53:13:7a:41:03:ef:f1:a5:07:fd:0b:b1:a3: 06:11:34:90:f8:aa:e2:86:4a:23:16:1a:54:78:47:eb:0b:cd: 2e:a5:19:c9:48:01:ca:17:49:fc:f2:31:70:25:b5:24:d7:c4: 29:cd:51:d9:6a:15:3f:a9:0d:8f:7c:74:96:00:03:6a:62:d8: 8b:4a:69:53:c7:07:65:f7:22:45:f5:21:37:64:ba:5b:9e:79: 8f:82:c3:d4:62:02:bb:b1:d1:70:cb:65:b6:60:ed:a8:59:6d: bb:97:1a:7b:9b:7b:28:c5:59:59:cc:8a:a0:17:af:c9:15:1a: c7:b2:56:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDODMzRjMwMkFGMUE5 OTIzRDQ2MDYzRjg0NENERjU3Qjk4QjBFNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxJrbGnL6m7jU/npkYYkvp05AejQGPqtzO6VmMIZmaenEd+/Ag jiJprendYb4LB+L99hYaZIZIlx8xGaG0wtnO7uUaex981+J1Pdte3L1flaTdngYv KnwxmvxRNmE2FVxsMeecC+NvVux3TYailJ453AmWwTbrAt0xN8FIUneZj0cwsMwX t0KmyB1X39PiHPcCHiJyfp13ZSNuttT8jzGDpxdMMF/4Cp0RDCMhtaXc2/KbhJvI hrFWXHwLDQTmxJZbxAR/TIdQ+Uq3Lu1ViFNKLDlDJoyw37EqTvcwjbWO+mhMBQBr vG5hpdvp1z6aUDZCBjgTCikGdVDBHs5g49GnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPIM/MCrxqZI9RgY/hEzfV7mLDnYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BJTV9NQ3J4cVpJOVJnWV9o RXpmVjdtTERuWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wegwDQYJKoZIhvcNAQELBQADggEBAFOnYfmhRFP+g2FOz+hGpIfhCTzM3Bt3Ey4A f68C5GOZTKqelmOCyUB+J35yXtmNaaEv8FhVMYnGnbS0V6CkqHxR73fGSXIVY5n2 wSCvNDaC+NDClYdutUYHKM6C7t55qVUKzY1LA2nq6jGYpnyJPqttIzwrvgZCW6C+ Zz1XMAu/N4AjUxN6QQPv8aUH/QuxowYRNJD4quKGSiMWGlR4R+sLzS6lGclIAcoX SfzyMXAltSTXxCnNUdlqFT+pDY98dJYAA2pi2ItKaVPHB2X3IkX1ITdkulueeY+C w9RiArux0XDLZbZg7ahZbbuXGnubeyjFWVnMiqAXr8kVGseyVkg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:43 2025 by rpki-client