$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKFwwXIohtH600VXg5CNbksFtQM.roa File: hKFwwXIohtH600VXg5CNbksFtQM.roa (raw, json) Hash identifier: a/UT2jvZGABqqDE4XwltCXjJRjWbGeb7IaGG4WDOn4A= Subject key identifier: 84:A1:70:C1:72:28:86:D1:FA:D3:45:57:83:90:8D:6E:4B:05:B5:03 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3632 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKFwwXIohtH600VXg5CNbksFtQM.roa Signing time: Mon 10 Feb 2025 13:54:05 +0000 ROA not before: Mon 10 Feb 2025 13:54:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.192.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13874 (0x3632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=84A170C1722886D1FAD3455783908D6E4B05B503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:90:01:6e:60:5a:39:b9:43:97:20:82:db: 4d:93:2a:94:d3:8d:5c:4a:75:69:45:d2:20:48:9a: b2:ba:ce:d7:b0:29:1c:2c:ff:57:a3:08:0f:94:db: b8:6e:38:e5:c8:0d:48:f8:31:bc:67:c5:3e:cc:17: da:31:32:27:e3:6d:0f:0f:e7:57:39:4d:52:22:60: 64:38:87:ab:8f:36:48:ad:a4:74:61:7d:72:da:20: ac:d6:f7:e4:b8:4d:e0:7f:d0:35:0d:08:45:5f:bf: d9:6e:45:9c:8a:45:c0:ce:5a:bc:55:a0:07:97:3c: a4:da:dc:d1:67:ae:9c:b0:9f:ec:61:c6:74:f5:f6: b5:7c:f1:5c:02:d2:4e:a4:cf:0f:77:30:11:f4:18: a3:ec:f7:ba:bc:4d:39:db:21:d0:e6:cb:6a:1e:54: 3a:8a:c7:10:13:96:c7:f7:22:b4:ac:8f:53:74:e5: c9:35:37:0e:f8:03:cf:cf:e3:43:51:e4:ce:73:67: b9:d7:c6:cf:06:99:8d:10:24:79:76:83:65:e4:95: bd:40:09:f7:2d:97:2b:c5:58:fb:26:07:8e:27:41: cd:f8:a2:6c:d7:b7:64:2c:a4:49:25:63:c1:a5:ee: 20:0f:58:a2:09:64:04:bb:12:27:de:d1:48:07:52: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A1:70:C1:72:28:86:D1:FA:D3:45:57:83:90:8D:6E:4B:05:B5:03 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKFwwXIohtH600VXg5CNbksFtQM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/14 Signature Algorithm: sha256WithRSAEncryption a6:41:b7:75:41:84:0e:f9:d7:03:a8:bd:ae:ca:65:69:29:5c: 90:51:ab:ca:71:b3:02:a6:73:bb:fd:1d:37:bd:f0:67:3d:d7: 81:16:07:57:5b:fe:98:89:fe:13:c0:c8:d4:7d:2e:95:37:2c: f9:f1:ed:2e:0b:81:e4:ea:9a:b6:18:6c:10:7f:42:85:32:3e: 61:ef:35:2a:b9:14:ac:0f:cd:1d:37:5b:d8:8f:db:e1:39:63: da:a3:dd:d4:4f:ae:22:12:71:7e:e6:f8:e0:29:8d:c2:80:1d: 4e:8f:c1:6b:f5:3b:68:63:5c:58:cd:d4:61:be:8a:0c:04:a4: 70:33:5c:f6:11:be:ef:9c:92:99:f5:83:c6:df:51:99:fa:68: 3c:37:d6:41:a5:41:0d:f5:ad:06:0f:e7:ce:3f:98:e1:c0:47: 0a:f2:c2:a0:6a:ec:9d:6c:de:ae:a3:2f:bf:f9:38:85:b3:72: 34:de:d5:7c:36:2e:62:96:4e:93:8d:9b:95:99:08:b8:8e:d3: 64:79:41:9e:5f:8c:91:fe:b9:0f:f9:fb:7f:55:7d:50:f3:88: dd:8d:12:e7:f9:12:a8:83:c4:7e:b0:ed:0e:af:65:c2:a5:4a: 04:d4:31:51:9e:c9:25:5e:cd:72:08:9d:c4:36:6a:b6:b1:f6: 60:fb:8d:7c -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICNjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0QTE3MEMxNzIyODg2 RDFGQUQzNDU1NzgzOTA4RDZFNEIwNUI1MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA3pABbmBaOblDlyCC202TKpTTjVxKdWlF0iBImrK6ztewKRws /1ejCA+U27huOOXIDUj4MbxnxT7MF9oxMifjbQ8P51c5TVIiYGQ4h6uPNkitpHRh fXLaIKzW9+S4TeB/0DUNCEVfv9luRZyKRcDOWrxVoAeXPKTa3NFnrpywn+xhxnT1 9rV88VwC0k6kzw93MBH0GKPs97q8TTnbIdDmy2oeVDqKxxATlsf3IrSsj1N05ck1 Nw74A8/P40NR5M5zZ7nXxs8GmY0QJHl2g2Xklb1ACfctlyvFWPsmB44nQc34omzX t2QspEklY8Gl7iAPWKIJZAS7Eife0UgHUtJpAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUhKFwwXIohtH600VXg5CNbksFtQMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hLRnd3WElvaHRINjAwVlhn NUNOYmtzRnRRTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJ7 wDANBgkqhkiG9w0BAQsFAAOCAQEApkG3dUGEDvnXA6i9rsplaSlckFGrynGzAqZz u/0dN73wZz3XgRYHV1v+mIn+E8DI1H0ulTcs+fHtLguB5OqathhsEH9ChTI+Ye81 KrkUrA/NHTdb2I/b4Tlj2qPd1E+uIhJxfub44CmNwoAdTo/Ba/U7aGNcWM3UYb6K DASkcDNc9hG+75ySmfWDxt9RmfpoPDfWQaVBDfWtBg/nzj+Y4cBHCvLCoGrsnWze rqMvv/k4hbNyNN7VfDYuYpZOk42blZkIuI7TZHlBnl+Mkf65D/n7f1V9UPOI3Y0S 5/kSqIPEfrDtDq9lwqVKBNQxUZ7JJV7NcgidxDZqtrH2YPuNfA== -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:13 2025 by rpki-client