$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aN_nisbOi6r_Za0JGwdPIt9m_xw.roa File: aN_nisbOi6r_Za0JGwdPIt9m_xw.roa (raw, json) Hash identifier: FjOscWfLIpWR3DH7c62vq2Z5nOjtKrcz9Urt1HDCEBI= Subject key identifier: 68:DF:E7:8A:C6:CE:8B:AA:FF:65:AD:09:1B:07:4F:22:DF:66:FF:1C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33FC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aN_nisbOi6r_Za0JGwdPIt9m_xw.roa Signing time: Mon 10 Feb 2025 13:51:57 +0000 ROA not before: Mon 10 Feb 2025 13:51:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13308 (0x33fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=68DFE78AC6CE8BAAFF65AD091B074F22DF66FF1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:df:c4:cf:1f:6c:8f:50:87:09:14:01:0d: 08:cd:af:14:a0:ad:a9:03:2e:68:d9:ac:d0:02:b6: c0:70:88:6c:f8:41:4f:bd:32:72:e1:cc:10:4c:27: fd:72:18:c9:7b:b6:5d:37:42:20:6e:74:ce:bb:e5: f3:af:9d:55:ff:9f:52:8e:e8:67:84:04:bc:f5:fe: 01:bf:7c:4d:e5:ff:69:1b:67:28:37:39:4d:b7:95: 4b:c8:68:f8:7a:24:ad:bf:94:e6:12:00:3c:f3:8a: 1e:c9:7c:65:91:b2:44:49:0b:9a:35:8f:c1:c4:3c: ec:1d:e3:23:17:cf:3e:7a:b9:24:7a:fc:b1:39:ee: 54:8a:2e:e3:ff:36:fc:05:fa:b9:d0:8a:70:f6:2b: 9a:a2:aa:4c:7a:b6:65:21:9b:54:36:b5:ee:86:b8: 65:fb:3f:2c:f1:9a:0d:97:8f:98:91:13:7b:32:0e: 75:68:c6:ea:bf:4a:06:5c:94:e0:f5:f1:ec:b7:14: 93:e2:25:0c:38:39:f5:64:3f:00:69:79:15:c9:98: bd:82:30:1a:60:e5:7c:67:3f:fb:22:28:21:e2:93: 2b:c6:cb:de:cd:2a:62:00:07:48:e3:8e:d5:b5:be: 80:84:8e:32:dc:8e:27:da:37:f9:14:40:f6:58:68: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DF:E7:8A:C6:CE:8B:AA:FF:65:AD:09:1B:07:4F:22:DF:66:FF:1C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aN_nisbOi6r_Za0JGwdPIt9m_xw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.128.0/20 Signature Algorithm: sha256WithRSAEncryption 85:e5:97:60:af:cc:e5:e0:da:a8:c7:94:c2:14:e1:19:48:46: 2e:94:a2:bd:6c:31:96:33:02:52:d7:1c:4a:9b:bb:55:2c:ee: c6:95:92:58:a7:ed:b1:52:9f:15:cb:06:03:d5:cd:09:9e:f4: d5:c4:66:cb:1b:d1:5c:e0:23:d3:b3:74:24:35:41:4b:1b:51: 16:7e:c9:06:ba:38:74:4c:d3:70:89:76:b4:6f:65:cc:f0:52: c6:85:0f:e5:cd:d1:61:48:a0:1e:a2:78:9d:2b:e4:41:84:a5: b0:2f:19:2e:7c:65:52:ae:d7:a6:e5:52:90:9c:52:ea:bc:c4: ae:58:d6:ec:79:98:85:62:58:f8:11:25:e0:86:e7:01:32:dd: f3:bd:06:79:69:5d:e9:38:06:67:3c:07:ff:97:b4:d5:21:e2: 69:7e:74:64:aa:87:00:7d:1d:8d:ca:71:ba:80:ea:08:a3:47: 91:e4:02:4b:22:26:d7:79:78:6f:91:60:ea:0a:85:23:6e:1c: ce:b0:f0:03:c2:a2:77:35:c1:9b:7c:a7:f4:8f:54:04:31:78: 51:47:6d:d7:24:5a:d1:66:e3:e3:c7:f8:a6:e5:8f:93:74:08: b4:c3:9a:98:3c:df:9b:ec:62:e0:d1:a4:e1:00:e6:a4:8b:0a: f3:79:cc:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY4REZFNzhBQzZDRThC QUFGRjY1QUQwOTFCMDc0RjIyREY2NkZGMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGMt/Ezx9sj1CHCRQBDQjNrxSgrakDLmjZrNACtsBwiGz4QU+9 MnLhzBBMJ/1yGMl7tl03QiBudM675fOvnVX/n1KO6GeEBLz1/gG/fE3l/2kbZyg3 OU23lUvIaPh6JK2/lOYSADzzih7JfGWRskRJC5o1j8HEPOwd4yMXzz56uSR6/LE5 7lSKLuP/NvwF+rnQinD2K5qiqkx6tmUhm1Q2te6GuGX7Pyzxmg2Xj5iRE3syDnVo xuq/SgZclOD18ey3FJPiJQw4OfVkPwBpeRXJmL2CMBpg5XxnP/siKCHikyvGy97N KmIAB0jjjtW1voCEjjLcjifaN/kUQPZYaGbZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaN/nisbOi6r/Za0JGwdPIt9m/xwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FOX25pc2JPaTZyX1phMEpH d2RQSXQ5bV94dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 woAwDQYJKoZIhvcNAQELBQADggEBAIXll2CvzOXg2qjHlMIU4RlIRi6Uor1sMZYz AlLXHEqbu1Us7saVklin7bFSnxXLBgPVzQme9NXEZssb0VzgI9OzdCQ1QUsbURZ+ yQa6OHRM03CJdrRvZczwUsaFD+XN0WFIoB6ieJ0r5EGEpbAvGS58ZVKu16blUpCc Uuq8xK5Y1ux5mIViWPgRJeCG5wEy3fO9BnlpXek4Bmc8B/+XtNUh4ml+dGSqhwB9 HY3KcbqA6gijR5HkAksiJtd5eG+RYOoKhSNuHM6w8APConc1wZt8p/SPVAQxeFFH bdckWtFm4+PH+Kblj5N0CLTDmpg835vsYuDRpOEA5qSLCvN5zHo= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:13 2025 by rpki-client