$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cZesd_dOrgQomv9hOioCiMDOGO0.roa File: cZesd_dOrgQomv9hOioCiMDOGO0.roa (raw, json) Hash identifier: DuvWUwEku9de3koXVWWtm6f8WP/5yB6P35uUNxFrDck= Subject key identifier: 71:97:AC:77:F7:4E:AE:04:28:9A:FF:61:3A:2A:02:88:C0:CE:18:ED Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 356E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cZesd_dOrgQomv9hOioCiMDOGO0.roa Signing time: Mon 10 Feb 2025 13:53:20 +0000 ROA not before: Mon 10 Feb 2025 13:53:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13678 (0x356e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7197AC77F74EAE04289AFF613A2A0288C0CE18ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:6a:94:14:cd:d6:31:78:a6:c3:a4:1d:be: 57:09:50:17:02:0a:16:7a:15:10:f4:8b:c9:7b:a1: 18:0d:46:10:0c:bc:27:67:81:98:78:40:89:a5:f8: 18:eb:2c:c8:84:31:f8:1c:3e:2e:70:52:e9:6c:09: 6e:88:bd:86:71:d1:fb:9c:a1:63:f1:21:40:98:38: 18:70:59:64:37:f7:df:a4:46:e1:b2:5e:8a:16:fa: 4c:b0:ca:5a:76:af:22:0d:7b:d7:74:ef:48:c1:13: 84:88:1c:7a:0d:00:4f:d0:dc:c8:4b:59:98:ad:e4: 3a:56:79:63:02:52:e3:b9:1a:80:53:73:1e:6f:80: 79:9c:49:ff:99:8f:04:03:78:c3:d2:fb:92:65:20: 7d:d5:e4:5d:40:5b:b3:2c:59:20:f9:32:1a:10:e4: a7:09:a9:a3:79:6d:b9:0e:2f:ae:a1:d5:23:92:98: 24:25:04:22:b3:86:10:19:d8:6f:c3:fb:a2:d7:a5: 8f:dc:83:2d:22:9c:4f:fb:f0:13:99:56:21:b9:de: 31:bf:6e:05:4d:23:df:ee:8c:7c:d8:96:fa:31:fe: c2:19:f9:b4:eb:c2:66:03:ab:42:93:a6:78:65:2e: f6:ba:eb:b1:77:c9:f2:b7:5a:1b:c3:d9:f7:48:eb: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:97:AC:77:F7:4E:AE:04:28:9A:FF:61:3A:2A:02:88:C0:CE:18:ED X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cZesd_dOrgQomv9hOioCiMDOGO0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.200.0/22 Signature Algorithm: sha256WithRSAEncryption 58:69:0e:74:24:11:91:db:23:5a:33:07:dc:aa:26:e5:de:47: be:2b:bb:cd:87:03:19:3f:6c:5e:4c:c0:08:ef:9e:01:fb:b3: 11:45:60:f6:0d:dd:2a:d8:56:82:c0:22:eb:47:30:5c:b1:29: 08:cd:22:c1:c0:db:08:38:68:ba:12:4e:68:f2:52:a7:47:5d: 48:a5:d1:98:2f:af:1d:64:c1:00:0f:9c:16:48:11:30:5d:ba: 5e:49:c4:ed:53:b7:f9:5a:24:60:c9:a1:ca:a8:fe:47:ec:96: 80:71:a4:f6:f0:8a:2d:38:ae:bf:5f:dd:7b:b3:f3:37:80:98: 7d:dd:68:9b:5a:0f:5a:3a:68:fe:fb:03:6c:57:fd:72:2e:f8: b7:5e:cb:e5:d8:d1:d2:df:c3:62:ce:e4:cc:92:36:f1:bc:e0: ff:bb:30:c1:cb:91:8e:b6:51:89:13:cc:82:5a:d7:ed:9f:92: fd:96:e8:42:fc:cd:06:8a:3c:26:91:ac:6d:30:00:c6:ac:a5: 6c:36:ca:e1:09:a0:f3:ab:38:64:7e:4c:05:71:4b:ba:36:36: b5:17:36:db:d0:f3:89:e2:cf:4d:78:a0:44:e2:f5:28:47:51: 1e:cf:7e:d0:e7:2f:32:e0:fb:69:cd:42:29:05:92:24:e2:3a: 32:9b:98:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxOTdBQzc3Rjc0RUFF MDQyODlBRkY2MTNBMkEwMjg4QzBDRTE4RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPAmqUFM3WMXimw6QdvlcJUBcCChZ6FRD0i8l7oRgNRhAMvCdn gZh4QIml+BjrLMiEMfgcPi5wUulsCW6IvYZx0fucoWPxIUCYOBhwWWQ399+kRuGy XooW+kywylp2ryINe9d070jBE4SIHHoNAE/Q3MhLWZit5DpWeWMCUuO5GoBTcx5v gHmcSf+ZjwQDeMPS+5JlIH3V5F1AW7MsWSD5MhoQ5KcJqaN5bbkOL66h1SOSmCQl BCKzhhAZ2G/D+6LXpY/cgy0inE/78BOZViG53jG/bgVNI9/ujHzYlvox/sIZ+bTr wmYDq0KTpnhlLva667F3yfK3WhvD2fdI68oXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcZesd/dOrgQomv9hOioCiMDOGO0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NaZXNkX2RPcmdRb212OWhP aW9DaU1ET0dPMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wMgwDQYJKoZIhvcNAQELBQADggEBAFhpDnQkEZHbI1ozB9yqJuXeR74ru82HAxk/ bF5MwAjvngH7sxFFYPYN3SrYVoLAIutHMFyxKQjNIsHA2wg4aLoSTmjyUqdHXUil 0Zgvrx1kwQAPnBZIETBdul5JxO1Tt/laJGDJocqo/kfsloBxpPbwii04rr9f3Xuz 8zeAmH3daJtaD1o6aP77A2xX/XIu+Ldey+XY0dLfw2LO5MySNvG84P+7MMHLkY62 UYkTzIJa1+2fkv2W6EL8zQaKPCaRrG0wAMaspWw2yuEJoPOrOGR+TAVxS7o2NrUX NtvQ84niz014oETi9ShHUR7PftDnLzLg+2nNQikFkiTiOjKbmNw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:03 2025 by rpki-client