$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WR0UXPqY2-Qo7PvApsitWIs4bzc.roa File: WR0UXPqY2-Qo7PvApsitWIs4bzc.roa (raw, json) Hash identifier: A2yXIHEbFFEMXJrNmBPgIF2vU2lQ2z4oIMb3fDnSsWc= Subject key identifier: 59:1D:14:5C:FA:98:DB:E4:28:EC:FB:C0:A6:C8:AD:58:8B:38:6F:37 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3516 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WR0UXPqY2-Qo7PvApsitWIs4bzc.roa Signing time: Mon 10 Feb 2025 13:53:00 +0000 ROA not before: Mon 10 Feb 2025 13:53:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13590 (0x3516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=591D145CFA98DBE428ECFBC0A6C8AD588B386F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:88:ea:60:86:23:51:c5:00:82:33:b1:49: 10:6d:67:72:0f:58:fc:28:59:09:6d:0a:72:19:03: db:3c:0b:b1:3f:82:33:e1:9e:78:5d:17:b0:9a:08: 41:b2:57:11:82:cd:d4:5c:9c:c0:c5:2a:ef:35:49: 39:de:b9:7d:76:20:66:fe:05:9d:d1:e2:a8:c0:a0: 83:ad:0f:67:c2:d0:88:04:a9:f8:41:2a:d2:38:41: b1:39:5c:94:1c:b1:b5:47:7b:60:e4:a7:01:92:33: 27:0d:19:32:5e:28:34:5f:a9:5d:96:32:ad:36:d6: 3a:7e:6e:eb:c7:ca:66:6d:0e:da:c0:5d:12:9f:20: 5d:dc:99:05:0a:e1:f7:e1:8b:c3:f2:2d:12:83:77: bf:bf:c6:29:f1:c8:76:ce:48:ed:c3:d5:84:a9:89: 9e:f3:92:d9:97:c5:c7:f1:18:6d:4e:67:40:17:ae: a0:3d:ab:05:d0:f2:1b:b8:5a:c6:9d:c0:c1:ba:22: be:76:25:59:e8:bf:88:ee:51:d8:c8:56:cc:84:b3: 1c:9f:dc:5a:94:69:ad:93:03:4f:99:a0:d6:7f:8b: ee:06:c5:83:b7:66:18:02:9f:b2:73:5f:4c:a5:45: 45:33:78:d8:b2:fe:5e:bb:7a:83:cb:e0:22:b9:be: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1D:14:5C:FA:98:DB:E4:28:EC:FB:C0:A6:C8:AD:58:8B:38:6F:37 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WR0UXPqY2-Qo7PvApsitWIs4bzc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.88.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:24:61:07:65:b3:8b:b7:16:fa:39:ca:00:e9:b7:0b:38:52: 21:7c:d9:b9:91:9d:32:b2:9b:14:b2:6d:10:df:40:66:9d:61: 6b:12:00:b0:e4:c5:6c:46:1f:68:e5:35:22:0d:95:ba:77:4c: c6:e3:eb:10:93:99:37:63:9f:b0:5a:46:57:0a:cf:54:05:44: 0e:8c:c9:9d:28:03:e0:d5:b4:29:a3:29:4d:b5:76:e9:ad:f2: 8c:19:d9:f9:fe:4d:0b:2b:d8:55:18:b2:7a:18:53:2f:85:4c: 72:32:85:cd:aa:a8:0f:ea:71:a6:51:62:19:22:ba:44:d7:3d: d9:e8:01:15:3e:6c:5c:c5:70:bc:09:57:0a:25:9d:4d:7d:3d: 29:38:a7:a6:c3:0b:ae:b6:93:a6:5b:f5:d7:af:9c:0c:28:7e: d2:53:42:15:0b:3b:40:9a:18:73:d9:4a:ea:37:22:80:e2:b5: f3:e6:3f:c1:fa:15:4b:6a:74:3f:e5:b0:e8:c7:8f:2a:66:a1: 2f:ff:5e:c8:02:47:15:d6:12:b9:51:a9:5b:43:ea:dd:3f:c6: 5c:69:eb:87:b3:59:13:f3:d6:21:04:57:e2:8a:37:18:d5:e5: 27:02:f4:32:a5:66:24:89:83:c7:89:2b:bf:f1:fd:1b:50:2f: 03:51:f8:f3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU5MUQxNDVDRkE5OERC RTQyOEVDRkJDMEE2QzhBRDU4OEIzODZGMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+YYjqYIYjUcUAgjOxSRBtZ3IPWPwoWQltCnIZA9s8C7E/gjPh nnhdF7CaCEGyVxGCzdRcnMDFKu81STneuX12IGb+BZ3R4qjAoIOtD2fC0IgEqfhB KtI4QbE5XJQcsbVHe2DkpwGSMycNGTJeKDRfqV2WMq021jp+buvHymZtDtrAXRKf IF3cmQUK4ffhi8PyLRKDd7+/xinxyHbOSO3D1YSpiZ7zktmXxcfxGG1OZ0AXrqA9 qwXQ8hu4WsadwMG6Ir52JVnov4juUdjIVsyEsxyf3FqUaa2TA0+ZoNZ/i+4GxYO3 ZhgCn7JzX0ylRUUzeNiy/l67eoPL4CK5vjqNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWR0UXPqY2+Qo7PvApsitWIs4bzcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dSMFVYUHFZMi1RbzdQdkFw c2l0V0lzNGJ6Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w1gwDQYJKoZIhvcNAQELBQADggEBAC4kYQdls4u3Fvo5ygDptws4UiF82bmRnTKy mxSybRDfQGadYWsSALDkxWxGH2jlNSINlbp3TMbj6xCTmTdjn7BaRlcKz1QFRA6M yZ0oA+DVtCmjKU21dumt8owZ2fn+TQsr2FUYsnoYUy+FTHIyhc2qqA/qcaZRYhki ukTXPdnoARU+bFzFcLwJVwolnU19PSk4p6bDC662k6Zb9devnAwoftJTQhULO0Ca GHPZSuo3IoDitfPmP8H6FUtqdD/lsOjHjypmoS//XsgCRxXWErlRqVtD6t0/xlxp 64ezWRPz1iEEV+KKNxjV5ScC9DKlZiSJg8eJK7/x/RtQLwNR+PM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:51 2025 by rpki-client