$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YBbTnV-C1nE5AHgtsL_lkcgmVbs.roa File: YBbTnV-C1nE5AHgtsL_lkcgmVbs.roa (raw, json) Hash identifier: oZfkvd5hF/Y/ESwhjpPx7oCFoHQdF6TiFFL7CKyylcI= Subject key identifier: 60:16:D3:9D:5F:82:D6:71:39:00:78:2D:B0:BF:E5:91:C8:26:55:BB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3505 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YBbTnV-C1nE5AHgtsL_lkcgmVbs.roa Signing time: Mon 10 Feb 2025 13:52:55 +0000 ROA not before: Mon 10 Feb 2025 13:52:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13573 (0x3505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6016D39D5F82D6713900782DB0BFE591C82655BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:44:e7:c8:56:9b:ee:17:aa:61:99:67:55: 15:b0:11:d9:d2:02:da:70:e1:78:60:be:0d:f9:f9: 68:87:f9:33:90:9b:98:98:17:42:e7:d6:34:37:db: f2:46:9e:8b:cf:88:b8:2b:86:a8:24:f0:ba:bc:f9: bc:29:65:d5:6c:81:0f:e0:ed:a5:94:65:49:39:48: e9:86:9d:f4:87:81:0f:4b:c1:83:da:0e:0a:00:09: db:2a:24:f5:2a:c3:00:50:a5:84:37:97:2a:22:f8: 73:d9:3b:87:e8:0b:64:a0:92:0f:cf:70:31:bd:8b: d4:a7:73:fc:e6:97:cd:be:85:e0:70:1c:c6:2b:d2: a2:f5:d9:5e:04:24:12:db:d8:2d:e1:7d:09:84:cd: 43:88:3d:fb:bf:9a:0b:91:c0:b4:f6:18:6e:70:95: 19:1e:e3:71:db:fa:36:c9:ff:35:80:ce:b7:02:2c: cd:83:e8:07:f4:67:aa:76:2a:04:b0:99:04:42:5f: fd:27:ae:e8:bf:3d:9c:85:19:34:02:75:67:b3:70: d2:16:0f:b6:4b:ee:a3:67:6a:44:c3:68:3f:8e:39: f6:1a:2f:b4:74:85:dc:16:21:8c:c1:a7:b1:4b:2c: ed:72:f1:33:c8:f8:7c:3d:81:30:cc:7f:52:9e:a5: 80:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:D3:9D:5F:82:D6:71:39:00:78:2D:B0:BF:E5:91:C8:26:55:BB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YBbTnV-C1nE5AHgtsL_lkcgmVbs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.84.0/22 Signature Algorithm: sha256WithRSAEncryption 07:b0:bd:4f:3a:c6:55:5b:7f:8a:0f:2b:1d:5c:3a:64:eb:36: c2:94:6d:e9:57:ae:81:37:2b:3e:5e:99:fd:09:90:b2:4b:cf: 05:ad:6a:86:70:8c:57:38:a7:3f:29:b6:80:af:d9:7f:79:d1: 9a:79:40:12:33:31:71:16:d7:69:29:b3:8a:c9:f7:70:79:67: ad:df:80:45:c4:b9:70:56:ed:45:76:cb:4d:11:79:88:67:44: 27:45:5b:2f:61:56:de:c8:47:d4:72:ad:0c:54:ce:32:0b:78: 1d:80:8d:f9:99:26:c0:2d:81:eb:e0:a7:92:a5:9e:63:bc:df: 29:04:70:c1:23:97:44:a6:09:f5:50:eb:9e:92:cb:db:68:6b: b0:28:89:d3:99:be:ac:5c:19:3e:e6:ca:df:c5:f8:1d:28:a5: 6f:d6:cd:bc:7d:42:2d:43:a4:ed:97:0d:e8:7e:f5:1a:f6:95: ff:d8:ba:22:d0:ac:da:6a:ca:4f:91:a7:1c:93:99:a0:84:88: 87:5c:d3:d1:92:d9:cc:b0:fb:68:8f:4e:bc:09:59:60:19:38: 72:ad:45:a2:70:32:49:28:7a:59:d5:1e:f7:46:df:d7:a8:06: 28:0b:74:61:b6:d1:de:92:fe:e1:31:9f:26:13:93:8d:a6:63: 72:02:8f:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwMTZEMzlENUY4MkQ2 NzEzOTAwNzgyREIwQkZFNTkxQzgyNjU1QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ20TnyFab7heqYZlnVRWwEdnSAtpw4Xhgvg35+WiH+TOQm5iY F0Ln1jQ32/JGnovPiLgrhqgk8Lq8+bwpZdVsgQ/g7aWUZUk5SOmGnfSHgQ9LwYPa DgoACdsqJPUqwwBQpYQ3lyoi+HPZO4foC2Sgkg/PcDG9i9Snc/zml82+heBwHMYr 0qL12V4EJBLb2C3hfQmEzUOIPfu/mguRwLT2GG5wlRke43Hb+jbJ/zWAzrcCLM2D 6Af0Z6p2KgSwmQRCX/0nrui/PZyFGTQCdWezcNIWD7ZL7qNnakTDaD+OOfYaL7R0 hdwWIYzBp7FLLO1y8TPI+Hw9gTDMf1KepYCFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYBbTnV+C1nE5AHgtsL/lkcgmVbswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lCYlRuVi1DMW5FNUFIZ3Rz TF9sa2NnbVZicy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w1QwDQYJKoZIhvcNAQELBQADggEBAAewvU86xlVbf4oPKx1cOmTrNsKUbelXroE3 Kz5emf0JkLJLzwWtaoZwjFc4pz8ptoCv2X950Zp5QBIzMXEW12kps4rJ93B5Z63f gEXEuXBW7UV2y00ReYhnRCdFWy9hVt7IR9RyrQxUzjILeB2AjfmZJsAtgevgp5Kl nmO83ykEcMEjl0SmCfVQ656Sy9toa7AoidOZvqxcGT7myt/F+B0opW/Wzbx9Qi1D pO2XDeh+9Rr2lf/YuiLQrNpqyk+RpxyTmaCEiIdc09GS2cyw+2iPTrwJWWAZOHKt RaJwMkkoelnVHvdG39eoBigLdGG20d6S/uExnyYTk42mY3ICjws= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:09 2025 by rpki-client