$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UUgxMPAVmk-jCIMI_uLeyVwYAIs.roa File: UUgxMPAVmk-jCIMI_uLeyVwYAIs.roa (raw, json) Hash identifier: 9X8U4AthuP74IdqYBprYILCcORHIjJs0+fwqsGL/N6w= Subject key identifier: 51:48:31:30:F0:15:9A:4F:A3:08:83:08:FE:E2:DE:C9:5C:18:00:8B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3386 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UUgxMPAVmk-jCIMI_uLeyVwYAIs.roa Signing time: Mon 10 Feb 2025 13:51:31 +0000 ROA not before: Mon 10 Feb 2025 13:51:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13190 (0x3386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=51483130F0159A4FA3088308FEE2DEC95C18008B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4a:ea:f4:42:96:67:d7:71:d2:54:fc:53:91: dc:c9:13:67:e2:59:36:f5:00:ff:5f:bb:12:80:40: b7:e5:86:94:b3:93:8f:40:4c:40:36:a8:ba:af:b0: ac:50:67:f9:cf:ed:77:eb:a9:16:c5:ed:d1:70:ab: 77:14:0a:2d:0a:ad:a3:30:31:0e:f2:6e:d3:93:6a: db:2a:64:f0:72:e3:13:8f:62:7a:ab:4f:79:f9:f1: c2:dd:0d:dd:f9:c9:54:8d:3b:ef:b3:76:d2:42:a7: 6d:56:8f:15:8a:0f:6a:96:52:c8:72:78:21:4c:bc: 11:c1:49:b4:fc:a4:af:1f:fa:7e:4c:be:2a:c5:8e: 6d:c6:0f:f3:2c:2b:09:4b:54:d0:cf:19:cb:23:f1: 6d:d4:71:68:f1:33:7f:bd:e2:c8:b3:73:b4:7f:61: fb:b8:a1:52:88:32:a3:f9:86:9a:6e:c7:ac:d6:b3: a4:a5:2f:d2:3e:4c:30:4f:57:e6:9b:ce:9d:17:27: 48:b3:17:1a:6c:3b:92:68:4f:32:dc:97:84:e7:c7: 22:f4:4d:10:82:14:5d:c4:8c:9e:9a:33:a6:b9:f2: a7:6f:09:08:68:4a:1f:e6:73:c9:f4:54:69:b5:56: c6:e7:db:db:ea:14:c1:cc:79:4b:c9:6e:d7:1e:b5: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:48:31:30:F0:15:9A:4F:A3:08:83:08:FE:E2:DE:C9:5C:18:00:8B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UUgxMPAVmk-jCIMI_uLeyVwYAIs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.104.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:c4:ed:35:a9:11:80:87:73:75:1d:3a:68:f3:a6:81:d3:2a: d9:5a:27:19:8e:22:bd:d3:38:4d:ae:3c:9f:8d:34:42:41:f3: 78:f6:d9:c3:69:5d:c7:5c:56:88:51:60:3b:f2:f8:cf:27:09: f6:69:c5:9d:7d:a5:b0:cc:30:1a:d8:bd:0b:28:e2:69:9b:28: df:48:8e:a8:36:66:6c:02:ec:b8:24:1b:ff:e3:fd:e5:c1:76: 13:22:01:04:58:64:a5:ca:c5:a4:65:47:43:a6:01:08:ac:50: a4:9d:f2:b3:17:d3:a4:bf:86:bc:18:f9:6d:3b:f5:89:00:17: 72:c1:5b:62:ba:9c:d9:5b:1a:e3:e8:34:b6:9d:50:0d:16:26: c2:1b:2f:97:71:f6:7e:85:e8:dd:c7:9e:d8:3a:19:16:61:16: 71:4a:2b:7a:3d:b7:4f:f5:3f:16:b0:b1:08:f8:9d:5e:bb:bc: d8:06:41:3e:49:79:e0:64:8f:79:9b:4f:d3:77:66:62:38:af: 55:b7:2b:3a:9f:0d:95:e4:cb:5a:f7:0c:46:a5:d1:b4:3e:40: 0c:bd:d7:c0:cb:f5:79:ee:e3:46:e6:dd:a7:4e:97:98:1d:f3: 12:4d:f0:2f:2b:87:e5:3e:18:64:84:1d:d4:b7:73:46:5e:7f: 09:c6:de:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM4YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUxNDgzMTMwRjAxNTlB NEZBMzA4ODMwOEZFRTJERUM5NUMxODAwOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbSur0QpZn13HSVPxTkdzJE2fiWTb1AP9fuxKAQLflhpSzk49A TEA2qLqvsKxQZ/nP7XfrqRbF7dFwq3cUCi0KraMwMQ7ybtOTatsqZPBy4xOPYnqr T3n58cLdDd35yVSNO++zdtJCp21WjxWKD2qWUshyeCFMvBHBSbT8pK8f+n5MvirF jm3GD/MsKwlLVNDPGcsj8W3UcWjxM3+94sizc7R/Yfu4oVKIMqP5hppux6zWs6Sl L9I+TDBPV+abzp0XJ0izFxpsO5JoTzLcl4TnxyL0TRCCFF3EjJ6aM6a58qdvCQho Sh/mc8n0VGm1Vsbn29vqFMHMeUvJbtcetQ9DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUUgxMPAVmk+jCIMI/uLeyVwYAIswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VVZ3hNUEFWbWstakNJTUlf dUxleVZ3WUFJcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wmgwDQYJKoZIhvcNAQELBQADggEBAIrE7TWpEYCHc3UdOmjzpoHTKtlaJxmOIr3T OE2uPJ+NNEJB83j22cNpXcdcVohRYDvy+M8nCfZpxZ19pbDMMBrYvQso4mmbKN9I jqg2ZmwC7LgkG//j/eXBdhMiAQRYZKXKxaRlR0OmAQisUKSd8rMX06S/hrwY+W07 9YkAF3LBW2K6nNlbGuPoNLadUA0WJsIbL5dx9n6F6N3Hntg6GRZhFnFKK3o9t0/1 PxawsQj4nV67vNgGQT5JeeBkj3mbT9N3ZmI4r1W3KzqfDZXky1r3DEal0bQ+QAy9 18DL9Xnu40bm3adOl5gd8xJN8C8rh+U+GGSEHdS3c0ZefwnG3i8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:00:25 2025 by rpki-client