$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WlJAGm8WfCW8e9drVHr8y91grEA.roa File: WlJAGm8WfCW8e9drVHr8y91grEA.roa (raw, json) Hash identifier: p9Jm2VCY0oEUj7PzO7fjey+N9MGy/6OeR7jjY2fqPVg= Subject key identifier: 5A:52:40:1A:6F:16:7C:25:BC:7B:D7:6B:54:7A:FC:CB:DD:60:AC:40 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3401 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WlJAGm8WfCW8e9drVHr8y91grEA.roa Signing time: Mon 10 Feb 2025 13:51:59 +0000 ROA not before: Mon 10 Feb 2025 13:51:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13313 (0x3401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5A52401A6F167C25BC7BD76B547AFCCBDD60AC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:a8:fc:90:51:04:99:d6:a1:5d:68:ff:ff: 3f:b4:76:e3:d8:d7:04:f2:85:40:bb:fb:fb:77:74: b9:03:35:42:de:30:69:96:f1:93:8b:c9:55:8f:15: ed:a6:bf:ca:e7:2f:e3:ac:dd:67:d5:be:2c:2d:f4: 2d:51:1d:ab:c2:64:60:5b:99:3a:4b:54:e5:c7:91: 4f:7e:71:61:10:9a:5e:e8:43:88:53:9c:0a:2c:6a: 5a:a7:f6:2a:1d:cb:76:b8:98:f3:ca:49:9a:fc:75: b7:4b:92:03:60:89:ef:d8:c2:6a:79:54:6d:50:bf: 41:4d:d6:92:af:41:97:a5:1d:68:78:c8:aa:9e:39: ec:6d:cc:a3:07:ca:6c:b6:d5:3a:01:e7:fc:75:61: 9c:35:9f:7b:62:66:3f:e5:f9:67:e3:05:6a:02:24: bf:e2:38:77:56:9a:9e:db:63:7f:0c:ed:9f:aa:7c: 7f:d6:a7:9c:a1:89:22:9b:1b:cc:8d:16:89:07:13: 39:2e:38:01:64:9f:30:27:b2:45:9c:e2:c3:5f:a4: c5:b4:02:40:54:87:a2:0c:08:43:6f:a0:8b:7c:3d: d8:37:7f:46:24:32:5b:29:13:fc:29:4f:c0:b7:79: 27:be:b6:64:4c:58:16:95:c8:1e:5e:bb:84:34:36: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:52:40:1A:6F:16:7C:25:BC:7B:D7:6B:54:7A:FC:CB:DD:60:AC:40 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WlJAGm8WfCW8e9drVHr8y91grEA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.40.0/22 Signature Algorithm: sha256WithRSAEncryption 50:32:47:b7:a5:6f:e7:c6:f5:74:8e:37:b6:4a:1c:29:9b:c5: 9a:10:29:40:e3:0a:a5:af:70:43:8d:bb:a4:c8:f3:e5:4c:a9: 90:11:56:bc:e8:ce:a8:83:9b:c5:28:6b:5a:fa:20:ca:ed:6a: e4:98:81:08:73:b1:23:71:d8:ee:a5:c5:a6:66:ae:fd:a7:37: 40:36:31:35:40:5b:71:9c:ef:69:ac:be:ae:c4:ab:50:b2:f5: 6d:47:65:59:64:95:a0:30:d3:8b:54:d2:47:0c:74:07:e9:37: 41:15:0a:db:eb:1b:d1:50:f9:07:81:fc:3a:76:81:da:e6:3a: 72:11:16:ac:8a:57:33:c9:92:5d:02:76:e6:40:86:cd:a1:7e: 6b:a4:6a:d0:0e:36:a8:b3:8d:8b:f8:63:6b:68:df:0b:fb:21: 79:e0:a2:51:54:57:b6:1d:c7:2c:bc:56:88:22:b0:2c:2d:cc: 0b:76:c3:87:5c:42:7a:9e:88:5c:82:32:10:d3:7a:10:0f:19: 6b:70:7a:0e:c6:4d:49:b9:8e:a3:1f:18:04:00:80:a1:63:03: 18:c6:f5:78:b5:0b:56:01:1e:69:f4:5f:94:ce:ce:5e:64:b4: da:50:12:01:ad:55:ac:9a:a7:86:2f:b0:70:84:8a:97:14:aa: 5c:ae:67:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBNTI0MDFBNkYxNjdD MjVCQzdCRDc2QjU0N0FGQ0NCREQ2MEFDNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4XKj8kFEEmdahXWj//z+0duPY1wTyhUC7+/t3dLkDNULeMGmW 8ZOLyVWPFe2mv8rnL+Os3WfVviwt9C1RHavCZGBbmTpLVOXHkU9+cWEQml7oQ4hT nAosalqn9iody3a4mPPKSZr8dbdLkgNgie/Ywmp5VG1Qv0FN1pKvQZelHWh4yKqe OextzKMHymy21ToB5/x1YZw1n3tiZj/l+WfjBWoCJL/iOHdWmp7bY38M7Z+qfH/W p5yhiSKbG8yNFokHEzkuOAFknzAnskWc4sNfpMW0AkBUh6IMCENvoIt8Pdg3f0Yk MlspE/wpT8C3eSe+tmRMWBaVyB5eu4Q0Ns5rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWlJAGm8WfCW8e9drVHr8y91grEAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dsSkFHbThXZkNXOGU5ZHJW SHI4eTkxZ3JFQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wigwDQYJKoZIhvcNAQELBQADggEBAFAyR7elb+fG9XSON7ZKHCmbxZoQKUDjCqWv cEONu6TI8+VMqZARVrzozqiDm8Uoa1r6IMrtauSYgQhzsSNx2O6lxaZmrv2nN0A2 MTVAW3Gc72msvq7Eq1Cy9W1HZVlklaAw04tU0kcMdAfpN0EVCtvrG9FQ+QeB/Dp2 gdrmOnIRFqyKVzPJkl0CduZAhs2hfmukatAONqizjYv4Y2to3wv7IXngolFUV7Yd xyy8VogisCwtzAt2w4dcQnqeiFyCMhDTehAPGWtweg7GTUm5jqMfGAQAgKFjAxjG 9Xi1C1YBHmn0X5TOzl5ktNpQEgGtVayap4YvsHCEipcUqlyuZ/k= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:12 2025 by rpki-client