$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QRyMPIc2EnvZZTc69gzzCoqEu_A.roa File: QRyMPIc2EnvZZTc69gzzCoqEu_A.roa (raw, json) Hash identifier: PTz1fjlOY2me4xf0C4hp5UNPMddgGHUhKbyesaTQWlA= Subject key identifier: 41:1C:8C:3C:87:36:12:7B:D9:65:37:3A:F6:0C:F3:0A:8A:84:BB:F0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3431 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QRyMPIc2EnvZZTc69gzzCoqEu_A.roa Signing time: Mon 10 Feb 2025 13:52:10 +0000 ROA not before: Mon 10 Feb 2025 13:52:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13361 (0x3431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=411C8C3C8736127BD965373AF60CF30A8A84BBF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:e2:f4:7f:bc:d6:69:6d:dd:b0:cb:1a:d8: dd:7f:96:a3:28:96:91:bc:87:e7:80:12:f8:3a:14: e0:fe:e2:1f:2c:92:db:61:7b:f5:a1:5d:7e:7f:71: 95:97:24:2f:fa:c8:06:23:b1:50:b8:91:7b:04:dd: 7c:0b:20:24:1a:ef:22:19:98:f8:2c:9d:6f:f6:5a: 4c:eb:08:8d:7e:bc:c7:57:64:a7:e2:1d:1e:ba:dc: 93:d4:70:3f:e7:aa:68:cf:c5:f5:9f:38:ca:2f:c7: 41:36:e1:c0:62:3c:4a:16:4b:42:8a:f8:a0:80:de: 01:af:16:8c:ab:be:4f:ca:42:ff:65:78:31:a6:3f: fb:ed:e2:32:89:3e:69:73:9f:8d:c5:0a:c0:9c:67: 0f:12:97:1f:48:c5:e2:ba:48:43:d2:cf:28:b2:e8: 35:ea:d8:e1:53:e3:58:9b:92:18:db:35:0d:05:43: 7a:25:e9:eb:a0:34:d2:f1:46:e4:0e:b4:97:ef:57: eb:88:a8:f6:6f:18:fd:24:ce:02:94:01:7d:e0:e6: f8:56:d2:2a:d4:93:84:10:bd:38:bb:18:47:7d:2f: c7:4f:22:f9:76:14:f4:de:40:27:2f:70:aa:2d:55: 04:51:0e:b6:b3:b3:5c:a9:89:78:49:53:85:6f:95: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1C:8C:3C:87:36:12:7B:D9:65:37:3A:F6:0C:F3:0A:8A:84:BB:F0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QRyMPIc2EnvZZTc69gzzCoqEu_A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.112.0/21 Signature Algorithm: sha256WithRSAEncryption 06:99:8b:4b:e2:4c:ab:dc:ef:b8:95:c3:33:3c:86:a9:61:cd: 94:a8:70:e7:ae:6d:0f:11:e8:a0:d1:7b:e1:2d:2c:90:8d:04: 83:ee:81:51:39:11:33:42:e9:65:c6:1c:8a:2a:ed:15:9c:9b: 9d:1f:a7:bc:46:da:ac:70:49:22:16:60:d2:ab:50:ea:11:ab: 96:36:31:3a:e9:32:11:08:34:7e:c8:1c:40:14:3d:2f:b2:64: ea:c1:66:81:8f:01:a1:61:36:0e:79:91:8f:21:6d:ed:bd:34: 2e:f2:b4:00:81:38:e0:85:03:f9:9a:57:af:04:f2:f3:8b:6a: 4b:37:81:4a:c5:0b:30:15:35:05:e5:3a:e8:7b:e7:75:42:70: 3b:e6:c1:02:79:07:76:00:90:fe:a1:f7:6a:fb:b3:8f:f4:13: 4e:5f:b5:cb:ed:22:23:0e:35:36:16:db:55:f8:24:71:16:e4: d6:38:7a:16:fb:3d:e7:1a:13:54:29:62:7c:f4:54:30:ba:39: af:b0:40:e3:8c:0c:9e:83:e5:46:91:bd:48:95:d6:31:10:5f: c5:9e:c2:5b:09:12:0f:60:39:f2:bd:e9:c0:12:83:b3:d4:cc: 9c:a5:3d:9e:ac:19:58:da:f9:5c:bb:3f:82:9b:dc:64:92:43: 7c:d9:1a:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxMUM4QzNDODczNjEy N0JEOTY1MzczQUY2MENGMzBBOEE4NEJCRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1NOL0f7zWaW3dsMsa2N1/lqMolpG8h+eAEvg6FOD+4h8sktth e/WhXX5/cZWXJC/6yAYjsVC4kXsE3XwLICQa7yIZmPgsnW/2WkzrCI1+vMdXZKfi HR663JPUcD/nqmjPxfWfOMovx0E24cBiPEoWS0KK+KCA3gGvFoyrvk/KQv9leDGm P/vt4jKJPmlzn43FCsCcZw8Slx9IxeK6SEPSzyiy6DXq2OFT41ibkhjbNQ0FQ3ol 6eugNNLxRuQOtJfvV+uIqPZvGP0kzgKUAX3g5vhW0irUk4QQvTi7GEd9L8dPIvl2 FPTeQCcvcKotVQRRDrazs1ypiXhJU4VvladXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQRyMPIc2EnvZZTc69gzzCoqEu/AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FSeU1QSWMyRW52WlpUYzY5 Z3p6Q29xRXVfQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wnAwDQYJKoZIhvcNAQELBQADggEBAAaZi0viTKvc77iVwzM8hqlhzZSocOeubQ8R 6KDRe+EtLJCNBIPugVE5ETNC6WXGHIoq7RWcm50fp7xG2qxwSSIWYNKrUOoRq5Y2 MTrpMhEINH7IHEAUPS+yZOrBZoGPAaFhNg55kY8hbe29NC7ytACBOOCFA/maV68E 8vOLaks3gUrFCzAVNQXlOuh753VCcDvmwQJ5B3YAkP6h92r7s4/0E05ftcvtIiMO NTYW21X4JHEW5NY4ehb7PecaE1QpYnz0VDC6Oa+wQOOMDJ6D5UaRvUiV1jEQX8We wlsJEg9gOfK96cASg7PUzJylPZ6sGVja+Vy7P4Kb3GSSQ3zZGpY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:06 2025 by rpki-client