$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eB2FyhfBk9JALX4J2W4AiG1iDgk.roa File: eB2FyhfBk9JALX4J2W4AiG1iDgk.roa (raw, json) Hash identifier: vKMJTzH5+wY6N7mah36VRECA3juLuXSF5d+UNiW8P9s= Subject key identifier: 78:1D:85:CA:17:C1:93:D2:40:2D:7E:09:D9:6E:00:88:6D:62:0E:09 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36CC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eB2FyhfBk9JALX4J2W4AiG1iDgk.roa Signing time: Mon 10 Feb 2025 13:54:42 +0000 ROA not before: Mon 10 Feb 2025 13:54:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14028 (0x36cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=781D85CA17C193D2402D7E09D96E00886D620E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:f0:84:3f:35:80:e6:71:a9:7a:56:bb:e2: 6a:0f:76:df:8d:f1:2d:5c:af:0c:98:4b:87:a9:0a: 95:0f:d6:5d:0d:12:b3:87:ad:a9:7e:59:dd:88:30: b1:6c:ab:ab:72:f8:e3:30:3b:7a:39:5a:81:fa:dc: b6:54:45:f1:19:70:3d:8c:40:a4:fd:0f:f7:d0:72: 4a:86:37:f8:0c:9f:05:86:45:e8:f5:be:d1:fe:3c: f6:a1:c9:ce:01:42:40:99:7e:53:bb:fb:ad:fc:ac: 8c:ac:b9:32:ec:8f:31:90:5f:79:ba:9a:46:52:7f: cf:fd:a7:67:fa:d1:41:e0:f1:96:5b:0e:6d:c4:4f: de:46:ef:9e:c3:86:5b:b3:e7:3b:12:4c:02:59:a0: 07:e8:e7:2b:16:d7:4f:1e:53:2e:d4:b2:ec:2c:f1: 46:64:28:12:be:c3:c0:d4:a5:1d:53:3b:ff:89:ea: f2:b9:89:3e:a0:30:3c:51:73:34:95:a0:34:72:35: de:ea:ea:f4:ff:2e:b8:1a:db:0d:22:ac:70:9d:86: 0b:ab:30:aa:1a:6e:a4:3c:d5:5c:46:18:f3:03:c0: 7c:e2:86:51:b7:a7:4c:5d:ff:71:a6:58:e1:ec:33: 4c:aa:08:fb:b4:9b:35:e8:b5:2f:1c:71:34:56:3d: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1D:85:CA:17:C1:93:D2:40:2D:7E:09:D9:6E:00:88:6D:62:0E:09 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eB2FyhfBk9JALX4J2W4AiG1iDgk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.40.0/22 Signature Algorithm: sha256WithRSAEncryption a7:5e:c7:08:0f:56:c6:77:3a:c2:06:a4:80:f2:61:81:34:e9: 65:5b:bd:62:fe:4b:f7:04:2d:e4:86:7c:78:5f:b3:70:ac:b1: 1e:2b:8e:65:60:02:73:5d:b8:82:0c:d0:97:10:5c:ac:25:30: b5:30:ff:fc:d8:5e:59:78:e2:87:e3:16:2e:b6:b7:5e:ac:ae: 5a:36:3c:8d:c2:6d:c5:a8:30:bf:69:7a:e3:ca:ce:c9:7a:c5: 16:97:ef:96:2e:8d:62:61:5d:c7:51:bb:67:b2:e5:ef:d1:c5: fe:b8:ea:bf:a9:2d:68:76:c5:a9:99:93:59:8e:68:84:81:5e: b5:bc:6a:7d:07:8a:ec:7d:e9:39:08:b7:e3:00:04:61:a3:0b: 38:9c:6f:be:60:1c:40:38:57:20:de:02:b6:7c:62:d6:35:89: 69:a0:fa:b8:91:a8:f9:f4:4e:ab:59:55:01:2b:ea:99:92:7a: b3:b0:6a:af:53:ba:08:5d:9b:42:d0:07:85:07:b4:a4:2d:4f: b3:aa:32:bf:28:29:db:eb:66:6d:10:e0:fa:05:30:88:69:95: 11:62:12:2d:de:fa:f1:87:26:59:55:61:53:d0:eb:70:b5:17: d2:a3:cb:65:0e:08:0e:0d:cf:85:34:89:74:ea:63:c7:a5:d6: fd:a0:bf:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc4MUQ4NUNBMTdDMTkz RDI0MDJEN0UwOUQ5NkUwMDg4NkQ2MjBFMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzG/CEPzWA5nGpela74moPdt+N8S1crwyYS4epCpUP1l0NErOH ral+Wd2IMLFsq6ty+OMwO3o5WoH63LZURfEZcD2MQKT9D/fQckqGN/gMnwWGRej1 vtH+PPahyc4BQkCZflO7+638rIysuTLsjzGQX3m6mkZSf8/9p2f60UHg8ZZbDm3E T95G757Dhluz5zsSTAJZoAfo5ysW108eUy7Usuws8UZkKBK+w8DUpR1TO/+J6vK5 iT6gMDxRczSVoDRyNd7q6vT/Lrga2w0irHCdhgurMKoabqQ81VxGGPMDwHzihlG3 p0xd/3GmWOHsM0yqCPu0mzXotS8ccTRWPXRjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeB2FyhfBk9JALX4J2W4AiG1iDgkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VCMkZ5aGZCazlKQUxYNEoy VzRBaUcxaURnay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wCgwDQYJKoZIhvcNAQELBQADggEBAKdexwgPVsZ3OsIGpIDyYYE06WVbvWL+S/cE LeSGfHhfs3CssR4rjmVgAnNduIIM0JcQXKwlMLUw//zYXll44ofjFi62t16srlo2 PI3CbcWoML9peuPKzsl6xRaX75YujWJhXcdRu2ey5e/Rxf646r+pLWh2xamZk1mO aISBXrW8an0Hiux96TkIt+MABGGjCzicb75gHEA4VyDeArZ8YtY1iWmg+riRqPn0 TqtZVQEr6pmSerOwaq9Tughdm0LQB4UHtKQtT7OqMr8oKdvrZm0Q4PoFMIhplRFi Ei3e+vGHJllVYVPQ63C1F9Kjy2UOCA4Nz4U0iXTqY8el1v2gv/0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:00:10 2025 by rpki-client