$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dT_96mjE6pn2PTTGAwuIaqbPknI.roa File: dT_96mjE6pn2PTTGAwuIaqbPknI.roa (raw, json) Hash identifier: dUyAkXvUs6T8EZaxmxrsuBDWNvH7XUcplOa15Ojb7Ts= Subject key identifier: 75:3F:FD:EA:68:C4:EA:99:F6:3D:34:C6:03:0B:88:6A:A6:CF:92:72 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36BD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dT_96mjE6pn2PTTGAwuIaqbPknI.roa Signing time: Mon 10 Feb 2025 13:54:37 +0000 ROA not before: Mon 10 Feb 2025 13:54:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.194.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14013 (0x36bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=753FFDEA68C4EA99F63D34C6030B886AA6CF9272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fb:ef:24:02:2f:46:78:fa:9b:7b:64:8c:d6: 50:ab:41:54:87:f7:5e:45:b0:3b:cc:9d:d1:51:62: 11:19:41:9e:63:1a:fd:ae:3d:f6:cb:4c:22:34:97: 6d:8e:7a:f2:4d:b5:d8:93:25:f0:11:70:10:49:aa: 4a:cb:f9:cc:5a:7d:0d:8b:29:01:be:be:fe:66:99: 73:1e:2d:d3:65:fd:42:ed:72:f8:87:c7:da:71:55: d7:2f:10:f7:ec:0d:90:e8:91:48:7d:36:3c:03:99: 26:41:95:27:5e:60:da:50:4e:28:dd:80:e9:cc:ca: 28:90:f2:1a:1b:e0:43:ae:09:ba:a3:6d:bc:9d:b3: 76:db:41:cd:91:65:77:c0:2d:34:6a:a4:5a:30:3b: 3d:4a:e7:ef:ff:8d:4e:2e:ff:3e:7b:19:56:72:2d: a5:d4:e4:fd:94:86:d6:87:e9:02:9f:c7:8e:01:5f: c2:44:b6:47:99:7d:00:89:80:7b:3f:ec:12:4d:7d: ad:ec:14:98:19:9d:2b:7d:21:30:9f:cf:c3:e1:63: 5a:62:cd:3f:91:2e:25:63:50:22:b1:d5:b1:27:92: fe:c1:08:d9:30:7a:eb:5c:4c:f3:95:4a:57:d1:b6: 94:d6:33:1d:b5:6c:5b:38:43:d6:ff:f5:f1:c4:f3: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3F:FD:EA:68:C4:EA:99:F6:3D:34:C6:03:0B:88:6A:A6:CF:92:72 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dT_96mjE6pn2PTTGAwuIaqbPknI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.253.0/24 Signature Algorithm: sha256WithRSAEncryption 93:7f:fe:7f:1a:f7:7a:a0:e0:de:a8:dc:a4:aa:75:df:f4:28: 60:19:14:3d:29:3b:b9:9b:42:19:b5:1b:b6:7b:fa:07:09:38: c4:56:4d:87:9b:f7:71:a2:ed:db:6c:3e:4e:5d:d5:e3:14:76: b0:e6:a7:e8:e0:15:48:21:d1:cd:38:66:09:30:b0:61:4b:ca: 25:de:49:ab:a3:00:5b:26:2b:1c:0f:f7:ff:ca:b1:9d:ef:b5: b3:4e:10:33:72:d0:8e:8f:ff:40:e3:e4:5b:0f:a6:bc:88:5f: 9e:57:dc:6b:17:35:da:ea:57:fe:95:69:87:b9:0f:22:f9:e1: e0:52:c9:ca:f0:78:61:b1:d8:e8:52:3e:90:56:ee:d4:02:12: 87:15:6b:32:3d:c9:2f:54:66:29:7d:a4:87:d0:93:4f:d2:12: 7c:25:db:9e:f6:6d:e2:c3:5d:07:bd:07:2f:73:bc:0e:c5:92: 98:07:21:d8:7e:4c:7a:0f:be:e9:2c:83:24:c0:ad:1a:44:e5: c2:df:7e:6c:e4:f8:61:ea:13:65:48:db:2b:7f:ef:be:f0:46: 9d:8b:ca:94:42:f7:bf:8c:25:1b:1c:9a:af:71:77:ff:7a:35: ce:04:e0:5e:ee:f6:e5:05:df:3f:69:a4:11:f1:ca:b7:29:7f: 37:c6:86:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc1M0ZGREVBNjhDNEVB OTlGNjNEMzRDNjAzMEI4ODZBQTZDRjkyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDo++8kAi9GePqbe2SM1lCrQVSH915FsDvMndFRYhEZQZ5jGv2u PfbLTCI0l22OevJNtdiTJfARcBBJqkrL+cxafQ2LKQG+vv5mmXMeLdNl/ULtcviH x9pxVdcvEPfsDZDokUh9NjwDmSZBlSdeYNpQTijdgOnMyiiQ8hob4EOuCbqjbbyd s3bbQc2RZXfALTRqpFowOz1K5+//jU4u/z57GVZyLaXU5P2UhtaH6QKfx44BX8JE tkeZfQCJgHs/7BJNfa3sFJgZnSt9ITCfz8PhY1pizT+RLiVjUCKx1bEnkv7BCNkw eutcTPOVSlfRtpTWMx21bFs4Q9b/9fHE84uZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdT/96mjE6pn2PTTGAwuIaqbPknIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RUXzk2bWpFNnBuMlBUVEdB d3VJYXFiUGtuSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wv0wDQYJKoZIhvcNAQELBQADggEBAJN//n8a93qg4N6o3KSqdd/0KGAZFD0pO7mb Qhm1G7Z7+gcJOMRWTYeb93Gi7dtsPk5d1eMUdrDmp+jgFUgh0c04ZgkwsGFLyiXe SaujAFsmKxwP9//KsZ3vtbNOEDNy0I6P/0Dj5FsPpryIX55X3GsXNdrqV/6VaYe5 DyL54eBSycrweGGx2OhSPpBW7tQCEocVazI9yS9UZil9pIfQk0/SEnwl2572beLD XQe9By9zvA7FkpgHIdh+THoPvuksgyTArRpE5cLffmzk+GHqE2VI2yt/777wRp2L ypRC97+MJRscmq9xd/96Nc4E4F7u9uUF3z9ppBHxyrcpfzfGhsU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:10:09 2025 by rpki-client