$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UNXSllBSfIhdDMfRZfM_gGH3yAk.roa File: UNXSllBSfIhdDMfRZfM_gGH3yAk.roa (raw, json) Hash identifier: y5rcVdPNoSWz/oJ7mc9+QyMsuMp1QXiVXNdHLIbPKyM= Subject key identifier: 50:D5:D2:96:50:52:7C:88:5D:0C:C7:D1:65:F3:3F:80:61:F7:C8:09 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33B5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UNXSllBSfIhdDMfRZfM_gGH3yAk.roa Signing time: Mon 10 Feb 2025 13:51:41 +0000 ROA not before: Mon 10 Feb 2025 13:51:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.88.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13237 (0x33b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=50D5D29650527C885D0CC7D165F33F8061F7C809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:52:a5:54:93:2c:da:c3:f0:02:e0:93:02:27: a1:0e:66:65:29:f1:87:75:5c:b4:75:99:51:8f:86: e6:89:29:5d:b7:64:0c:5b:0d:b0:03:7b:f3:09:3c: 0a:dd:98:80:37:61:76:ee:f0:2a:f4:2f:63:bf:8c: 6e:d5:de:59:f0:29:e4:1c:d0:af:01:db:9b:53:cc: 68:c1:41:3b:c8:ff:55:38:6b:75:c9:a0:b8:19:25: 48:1c:0a:9d:b5:31:5d:e2:18:86:cc:62:f0:b1:9f: 09:9c:60:d3:8c:01:c2:bf:1e:02:0c:6c:b8:2e:89: 6d:54:47:68:01:9b:f3:ca:7b:34:24:ec:fe:8a:b1: 42:77:ad:1b:b9:ba:d6:3f:9f:ae:5a:eb:6c:7f:2c: a1:e0:95:bf:ca:7d:48:57:d7:d0:3e:19:be:a6:e7: b4:e6:dc:40:ef:79:10:6a:e0:a2:2d:64:70:20:cf: 96:5a:72:6a:b7:15:9b:6b:bf:ab:e2:9a:1c:19:08: e6:c7:e8:df:18:1c:8d:61:55:81:fb:a0:21:dd:f6: 55:1d:2d:66:1c:a9:8d:1f:57:c3:09:f7:ef:b2:85: d1:9f:a1:73:4c:bd:30:f8:57:ee:45:74:03:50:2f: b4:3b:be:3f:dc:d1:a3:46:ec:c1:21:75:d9:90:7d: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D5:D2:96:50:52:7C:88:5D:0C:C7:D1:65:F3:3F:80:61:F7:C8:09 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UNXSllBSfIhdDMfRZfM_gGH3yAk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.88.0/21 Signature Algorithm: sha256WithRSAEncryption 13:48:26:36:b8:c6:58:c5:ed:e1:9d:f2:0a:37:9d:72:89:75: 86:49:f9:43:f7:52:b2:92:6a:81:29:20:01:b5:57:3d:1e:db: b2:f9:6b:80:be:aa:37:54:b9:a5:ec:18:ba:f2:1e:c7:3c:e2: 3a:a0:cb:eb:8d:b4:de:f2:1b:55:ba:b0:0e:9c:e2:04:01:d4: 13:87:0f:b3:0c:3d:58:93:be:51:d3:0a:4a:10:38:b5:dd:21: 92:26:eb:fb:19:cb:7f:43:06:d1:e5:a8:c5:1f:ab:35:2a:e7: 3f:04:10:9e:b8:4f:9c:83:24:b5:a4:7b:54:cd:af:df:44:5a: c2:4a:85:ed:1c:6b:fb:16:19:1b:ed:4d:2a:6d:85:c1:9d:86: 24:b6:8d:30:ee:b2:c0:2a:37:20:5f:07:ba:17:b9:eb:4b:4a: 05:e3:55:57:88:a8:e9:2f:e8:f1:d1:c7:cb:1a:34:e7:2b:3b: 69:b2:43:8b:e4:4d:c9:d1:cc:fb:2f:0e:bb:30:16:50:5a:ae: dd:f6:d9:b7:8a:ee:d5:a9:9c:00:a9:88:b3:c2:15:16:ee:c0: 11:75:0f:6e:6a:27:3e:ca:76:f4:74:88:25:27:f4:4a:02:e4: 63:f5:b7:dd:a3:cc:6c:66:7d:98:ca:b9:d6:31:48:61:ae:f0: 24:d3:25:15 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM7UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUwRDVEMjk2NTA1MjdD ODg1RDBDQzdEMTY1RjMzRjgwNjFGN0M4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjUqVUkyzaw/AC4JMCJ6EOZmUp8Yd1XLR1mVGPhuaJKV23ZAxb DbADe/MJPArdmIA3YXbu8Cr0L2O/jG7V3lnwKeQc0K8B25tTzGjBQTvI/1U4a3XJ oLgZJUgcCp21MV3iGIbMYvCxnwmcYNOMAcK/HgIMbLguiW1UR2gBm/PKezQk7P6K sUJ3rRu5utY/n65a62x/LKHglb/KfUhX19A+Gb6m57Tm3EDveRBq4KItZHAgz5Za cmq3FZtrv6vimhwZCObH6N8YHI1hVYH7oCHd9lUdLWYcqY0fV8MJ9++yhdGfoXNM vTD4V+5FdANQL7Q7vj/c0aNG7MEhddmQfSFpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUNXSllBSfIhdDMfRZfM/gGH3yAkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VOWFNsbEJTZkloZERNZlJa Zk1fZ0dIM3lBay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wFgwDQYJKoZIhvcNAQELBQADggEBABNIJja4xljF7eGd8go3nXKJdYZJ+UP3UrKS aoEpIAG1Vz0e27L5a4C+qjdUuaXsGLryHsc84jqgy+uNtN7yG1W6sA6c4gQB1BOH D7MMPViTvlHTCkoQOLXdIZIm6/sZy39DBtHlqMUfqzUq5z8EEJ64T5yDJLWke1TN r99EWsJKhe0ca/sWGRvtTSpthcGdhiS2jTDussAqNyBfB7oXuetLSgXjVVeIqOkv 6PHRx8saNOcrO2myQ4vkTcnRzPsvDrswFlBart322beK7tWpnACpiLPCFRbuwBF1 D25qJz7KdvR0iCUn9EoC5GP1t92jzGxmfZjKudYxSGGu8CTTJRU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:31 2025 by rpki-client