$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vd_8n1h1WiyASVlVYI2xyQGgpvM.roa File: Vd_8n1h1WiyASVlVYI2xyQGgpvM.roa (raw, json) Hash identifier: 0oBLAvwM6mal103olcR0atoSvHFRpPIMGpJCep9DzlI= Subject key identifier: 55:DF:FC:9F:58:75:5A:2C:80:49:59:55:60:8D:B1:C9:01:A0:A6:F3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 362A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vd_8n1h1WiyASVlVYI2xyQGgpvM.roa Signing time: Mon 10 Feb 2025 13:54:03 +0000 ROA not before: Mon 10 Feb 2025 13:54:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13866 (0x362a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=55DFFC9F58755A2C80495955608DB1C901A0A6F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:ba:2f:82:f0:fe:b7:02:8c:a6:66:37:c5: 68:25:32:ea:4d:56:8d:0a:ef:53:47:87:bc:8a:a7: d8:f1:04:5a:7d:1b:13:9d:0e:7b:98:41:27:be:a5: 7c:4d:72:da:0c:80:22:dc:77:06:44:1d:42:7a:65: 7b:d8:60:d4:73:09:d6:61:4e:94:a2:02:f6:82:5a: d3:9c:7a:47:46:90:66:ed:47:d6:ce:d2:e4:b8:f9: 8b:ce:0e:a8:17:05:fc:73:11:b6:48:cd:4b:4b:85: 64:8d:53:6c:b3:df:59:87:09:dc:b7:35:0d:9a:61: 80:a4:fd:eb:a6:ad:6c:33:77:f9:d7:35:be:35:9a: 75:de:10:d1:24:76:6a:bd:a2:82:14:38:7d:92:11: f0:f6:fc:86:06:6d:1d:06:6e:cd:f0:b4:61:c3:33: 3e:51:89:d9:0e:c7:9b:71:bf:96:12:99:28:be:fd: 3c:b1:2a:60:67:0c:8f:3b:bf:d7:24:a1:96:60:d1: 72:49:c3:d2:80:c3:23:4d:e4:8c:2b:8f:5b:61:99: 99:83:ac:a8:09:89:77:95:67:53:72:41:79:d1:fc: 6e:6a:a9:66:ce:10:27:fb:09:f9:23:7f:06:fe:8b: 2e:81:57:6f:39:62:11:05:dd:7b:e9:a5:8a:2a:9a: 01:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DF:FC:9F:58:75:5A:2C:80:49:59:55:60:8D:B1:C9:01:A0:A6:F3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vd_8n1h1WiyASVlVYI2xyQGgpvM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.240.0/22 Signature Algorithm: sha256WithRSAEncryption 44:9a:7e:c5:0b:15:53:7e:1e:72:98:31:ff:4d:b8:27:f2:76: a4:b9:98:ec:09:92:d5:5e:a2:70:9e:37:d6:08:88:f2:70:f4: 4f:b3:0c:ff:fa:de:5c:02:e2:38:5a:6f:94:e7:22:c5:f6:41: 0d:f7:c4:fc:fd:4f:f4:24:04:bf:4f:b4:87:e7:f6:9d:9c:70: 65:24:7f:2a:e6:b7:0c:23:7e:4a:11:58:e6:22:f6:f0:28:0a: 74:83:d3:5f:c3:a2:94:20:4d:fd:1e:a9:c5:4d:21:04:17:69: 1a:e7:48:86:96:16:2d:cf:30:b6:06:d1:b0:6d:a1:92:d9:ee: c9:b7:66:2a:9c:e2:09:71:74:93:c0:00:7e:75:68:b9:6f:c5: ad:79:c4:0b:11:4f:64:7d:26:16:c1:83:e5:c4:4d:a0:cd:ca: 0d:37:84:74:96:e9:82:9a:9d:6f:37:34:9a:c0:09:1a:fc:58: cd:a1:5e:c6:87:3c:05:6f:8c:db:47:37:4d:20:9d:4f:14:b5: f9:90:8f:68:73:2d:ef:f2:4f:19:61:ac:fd:e1:a5:8f:a7:7b: c7:c1:01:32:0f:ba:89:30:ed:da:e9:28:0a:14:99:00:ca:45: cc:2c:9e:be:39:db:4f:26:01:ff:a5:04:5d:1e:72:5c:fb:21: 8a:31:c2:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1REZGQzlGNTg3NTVB MkM4MDQ5NTk1NTYwOERCMUM5MDFBMEE2RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4JbovgvD+twKMpmY3xWglMupNVo0K71NHh7yKp9jxBFp9GxOd DnuYQSe+pXxNctoMgCLcdwZEHUJ6ZXvYYNRzCdZhTpSiAvaCWtOcekdGkGbtR9bO 0uS4+YvODqgXBfxzEbZIzUtLhWSNU2yz31mHCdy3NQ2aYYCk/eumrWwzd/nXNb41 mnXeENEkdmq9ooIUOH2SEfD2/IYGbR0Gbs3wtGHDMz5RidkOx5txv5YSmSi+/Tyx KmBnDI87v9ckoZZg0XJJw9KAwyNN5Iwrj1thmZmDrKgJiXeVZ1NyQXnR/G5qqWbO ECf7Cfkjfwb+iy6BV285YhEF3XvppYoqmgFrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVd/8n1h1WiyASVlVYI2xyQGgpvMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZkXzhuMWgxV2l5QVNWbFZZ STJ4eVFHZ3B2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wfAwDQYJKoZIhvcNAQELBQADggEBAESafsULFVN+HnKYMf9NuCfydqS5mOwJktVe onCeN9YIiPJw9E+zDP/63lwC4jhab5TnIsX2QQ33xPz9T/QkBL9PtIfn9p2ccGUk fyrmtwwjfkoRWOYi9vAoCnSD01/DopQgTf0eqcVNIQQXaRrnSIaWFi3PMLYG0bBt oZLZ7sm3Ziqc4glxdJPAAH51aLlvxa15xAsRT2R9JhbBg+XETaDNyg03hHSW6YKa nW83NJrACRr8WM2hXsaHPAVvjNtHN00gnU8UtfmQj2hzLe/yTxlhrP3hpY+ne8fB ATIPuokw7drpKAoUmQDKRcwsnr45208mAf+lBF0eclz7IYoxwu4= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:35 2025 by rpki-client