$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QAePKsw-8tOedziy07nnW9Ax4Tw.roa File: QAePKsw-8tOedziy07nnW9Ax4Tw.roa (raw, json) Hash identifier: A5/aQ0ZF0zWkjlsYrWJMFVqVsDtQ9yrKxvbfY/WMQ7M= Subject key identifier: 40:07:8F:2A:CC:3E:F2:D3:9E:77:38:B2:D3:B9:E7:5B:D0:31:E1:3C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34C4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QAePKsw-8tOedziy07nnW9Ax4Tw.roa Signing time: Mon 10 Feb 2025 13:52:40 +0000 ROA not before: Mon 10 Feb 2025 13:52:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13508 (0x34c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=40078F2ACC3EF2D39E7738B2D3B9E75BD031E13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:3e:f4:72:c1:c5:ce:02:65:b3:06:c8:26: 84:18:f8:12:66:b4:9b:3d:2a:e7:53:60:7c:62:bd: 0f:2f:3a:09:19:12:b9:fd:9e:9d:80:7c:e0:94:d6: 27:fe:f7:5f:70:2e:e5:d8:97:b9:ae:e0:30:db:35: ab:75:62:07:2f:61:80:18:5d:6a:86:cd:58:a7:d7: 87:78:ed:12:2a:f2:20:79:81:0b:1d:1a:50:ea:b9: 07:a1:25:71:46:5a:c5:e3:0f:b0:cd:10:a8:45:d7: ef:95:7e:1f:87:7f:f7:21:2b:80:1f:23:4f:82:bd: 1a:7a:36:01:73:71:06:bf:10:35:9e:cf:89:1f:31: dd:45:43:ed:cd:80:f8:2e:b1:a2:36:b7:db:c3:bf: a8:1a:2b:ed:90:e4:cc:41:f4:07:43:83:06:e5:2e: ff:57:b7:b2:3b:d0:ee:ae:e1:dd:2f:49:ea:6c:d8: 06:56:f6:ca:f1:7e:5d:08:96:3e:cc:fa:c2:8a:49: 94:3b:7d:1c:1c:f1:2d:26:c2:67:db:7d:98:54:15: fe:07:b4:a7:1d:50:6b:64:e1:af:69:d9:6e:5d:87: b3:da:be:41:dc:ad:d0:6a:2b:42:80:df:51:2c:b4: 07:06:a9:5b:b1:e4:3a:2e:c9:46:56:28:34:bc:3f: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:07:8F:2A:CC:3E:F2:D3:9E:77:38:B2:D3:B9:E7:5B:D0:31:E1:3C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QAePKsw-8tOedziy07nnW9Ax4Tw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.136.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:da:ab:5f:67:a7:c7:48:06:2c:0f:60:de:ad:fb:8c:2c:f4: aa:f3:44:0b:8b:50:2b:a9:26:25:1c:f7:b2:2c:3d:a6:ea:7a: 29:2b:92:fb:63:19:94:1a:a8:19:19:19:50:dc:94:37:3e:71: 74:25:c2:37:5c:0f:7a:6c:78:f6:09:c9:da:30:b0:a7:55:a4: b1:f4:37:f7:f8:7b:cd:d7:b7:d1:89:28:22:bb:09:f5:95:88: 6d:7f:ce:ad:d9:4e:f9:1d:34:be:a0:b0:a7:ee:d8:88:08:04: 3a:1a:ea:35:00:bf:fd:de:c9:23:6b:ba:15:b3:26:44:c8:b1: c8:ea:f5:ea:25:af:35:29:72:ad:36:1f:da:51:e8:c9:e0:c7: 6e:ec:a8:8b:7e:9c:36:79:a4:fe:7e:2d:f7:97:90:b1:ce:37: 23:30:5a:f4:a8:59:58:ec:fd:ef:03:c6:75:53:e5:b2:38:45: d9:89:a2:29:ab:5d:fd:5b:4e:de:eb:af:79:3b:fe:08:e6:e6: ba:42:eb:22:84:c7:33:71:ad:3b:b3:ef:4d:c7:23:0b:62:c4: 6d:f2:1d:3a:10:b2:f8:9a:c0:97:d6:67:58:b0:c3:25:b9:a7: 04:da:b8:d2:8a:c7:10:a1:14:86:e8:df:ab:44:d4:75:07:1c: 22:e7:e5:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwMDc4RjJBQ0MzRUYy RDM5RTc3MzhCMkQzQjlFNzVCRDAzMUUxM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpxj70csHFzgJlswbIJoQY+BJmtJs9KudTYHxivQ8vOgkZErn9 np2AfOCU1if+919wLuXYl7mu4DDbNat1YgcvYYAYXWqGzVin14d47RIq8iB5gQsd GlDquQehJXFGWsXjD7DNEKhF1++Vfh+Hf/chK4AfI0+CvRp6NgFzcQa/EDWez4kf Md1FQ+3NgPgusaI2t9vDv6gaK+2Q5MxB9AdDgwblLv9Xt7I70O6u4d0vSeps2AZW 9srxfl0Ilj7M+sKKSZQ7fRwc8S0mwmfbfZhUFf4HtKcdUGtk4a9p2W5dh7PavkHc rdBqK0KA31EstAcGqVux5DouyUZWKDS8PxopAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQAePKsw+8tOedziy07nnW9Ax4TwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FBZVBLc3ctOHRPZWR6aXkw N25uVzlBeDRUdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w4gwDQYJKoZIhvcNAQELBQADggEBAE/aq19np8dIBiwPYN6t+4ws9KrzRAuLUCup JiUc97IsPabqeikrkvtjGZQaqBkZGVDclDc+cXQlwjdcD3psePYJydowsKdVpLH0 N/f4e83Xt9GJKCK7CfWViG1/zq3ZTvkdNL6gsKfu2IgIBDoa6jUAv/3eySNruhWz JkTIscjq9eolrzUpcq02H9pR6Mngx27sqIt+nDZ5pP5+LfeXkLHONyMwWvSoWVjs /e8DxnVT5bI4RdmJoimrXf1bTt7rr3k7/gjm5rpC6yKExzNxrTuz703HIwtixG3y HToQsviawJfWZ1iwwyW5pwTauNKKxxChFIbo36tE1HUHHCLn5WQ= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:26 2025 by rpki-client