$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i-ai-kAltteKt1KUzPpWZvBUC_A.roa File: i-ai-kAltteKt1KUzPpWZvBUC_A.roa (raw, json) Hash identifier: bhhn+3Za198dyYlcaqi4ICCXiRc3aV7JJvqwRSUCeU4= Subject key identifier: 8B:E6:A2:FA:40:25:B6:D7:8A:B7:52:94:CC:FA:56:66:F0:54:0B:F0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3660 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i-ai-kAltteKt1KUzPpWZvBUC_A.roa Signing time: Mon 10 Feb 2025 13:54:16 +0000 ROA not before: Mon 10 Feb 2025 13:54:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.219.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13920 (0x3660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8BE6A2FA4025B6D78AB75294CCFA5666F0540BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:99:33:3f:a5:e9:02:00:1b:03:87:a8:ac: fa:7e:27:09:75:a2:64:ee:cc:c1:02:3a:d9:f4:93: 41:5f:4f:51:d9:fc:b9:87:51:b7:dd:d4:79:0a:c7: 30:6d:37:bb:50:1e:7f:6d:1d:15:70:45:ae:20:97: 57:f3:7a:54:2b:40:1d:b0:ce:cf:ad:c0:a1:c2:57: 3c:84:c8:ec:ad:ba:54:68:ea:fc:67:46:06:c0:64: 72:bc:1a:a2:9d:91:49:04:e2:8d:61:76:d9:d9:12: 6e:ba:59:9c:43:1a:3e:f5:36:71:ef:2b:f9:a7:ad: ae:d3:70:64:2f:cc:06:cb:e4:eb:f8:78:a3:0e:c3: 05:cc:39:19:e9:ca:4b:53:ad:1f:e5:11:43:0a:1f: 43:9d:34:91:4d:5f:ab:8b:6c:53:86:33:07:19:e7: 8a:c0:4f:a4:09:af:31:97:b1:cf:1b:77:23:e8:e9: e4:46:a4:6e:5d:d2:48:f2:cf:c2:36:1e:b0:45:f2: 04:b7:74:4b:78:d2:8b:be:30:5c:72:1a:aa:ea:ef: be:8a:1a:26:97:cc:23:56:64:70:2f:1f:08:f1:5d: 79:f7:0b:71:7a:f0:3b:a2:7d:6a:84:07:83:28:42: 36:ee:d2:d2:1e:da:33:c0:cb:87:de:02:f4:db:50: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:A2:FA:40:25:B6:D7:8A:B7:52:94:CC:FA:56:66:F0:54:0B:F0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i-ai-kAltteKt1KUzPpWZvBUC_A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.219.192/26 Signature Algorithm: sha256WithRSAEncryption 57:a0:c9:65:f6:a1:cd:88:bc:6c:d6:99:91:e8:46:a0:e3:72: 87:76:6c:4d:40:96:64:0f:6d:c7:84:26:64:98:1f:dd:4c:55: ff:56:f1:10:1d:83:0c:66:f8:5b:37:d3:fc:c3:91:f2:7f:fb: 65:ef:f1:15:ee:dd:0a:ab:b8:bf:4b:f2:06:0b:2b:9c:8c:08: bb:5d:ff:57:00:73:19:ca:91:96:6b:a9:bb:a8:f1:ae:fb:b3: 1d:f2:2b:d9:b2:a3:62:b3:1d:07:16:d9:2e:38:b9:7a:25:5c: 9d:26:18:ec:00:f0:9b:48:6f:cb:9d:bf:84:20:6b:19:c5:43: 1e:be:cd:2a:cb:ad:99:b5:c8:1d:d8:3b:30:f7:93:6f:5e:b1: f5:d4:39:01:cc:d1:10:8a:c9:13:c8:dd:67:7e:49:f4:1f:16: 8a:74:fc:79:47:52:62:76:57:36:fa:fd:7d:76:81:ea:52:a2: 93:34:9c:33:40:35:25:18:4b:2b:16:7d:7f:a6:72:81:60:a4: b8:7c:c8:35:8e:cf:05:2a:09:8c:fb:96:99:9e:65:75:ad:54: 8d:fa:9e:45:db:1b:4f:bf:a4:4e:93:59:6a:df:b3:ea:2c:82: 22:8f:c5:16:3c:0d:5b:24:10:e8:5d:ea:a6:91:34:18:d6:8d: 25:84:27:8e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCRTZBMkZBNDAyNUI2 RDc4QUI3NTI5NENDRkE1NjY2RjA1NDBCRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ75kzP6XpAgAbA4eorPp+Jwl1omTuzMECOtn0k0FfT1HZ/LmH Ubfd1HkKxzBtN7tQHn9tHRVwRa4gl1fzelQrQB2wzs+twKHCVzyEyOytulRo6vxn RgbAZHK8GqKdkUkE4o1hdtnZEm66WZxDGj71NnHvK/mnra7TcGQvzAbL5Ov4eKMO wwXMORnpyktTrR/lEUMKH0OdNJFNX6uLbFOGMwcZ54rAT6QJrzGXsc8bdyPo6eRG pG5d0kjyz8I2HrBF8gS3dEt40ou+MFxyGqrq776KGiaXzCNWZHAvHwjxXXn3C3F6 8DuifWqEB4MoQjbu0tIe2jPAy4feAvTbUCclAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUi+ai+kAltteKt1KUzPpWZvBUC/AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ktYWkta0FsdHRlS3QxS1V6 UHBXWnZCVUNfQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wdvAMA0GCSqGSIb3DQEBCwUAA4IBAQBXoMll9qHNiLxs1pmR6Eag43KHdmxNQJZk D23HhCZkmB/dTFX/VvEQHYMMZvhbN9P8w5Hyf/tl7/EV7t0Kq7i/S/IGCyucjAi7 Xf9XAHMZypGWa6m7qPGu+7Md8ivZsqNisx0HFtkuOLl6JVydJhjsAPCbSG/Lnb+E IGsZxUMevs0qy62Ztcgd2Dsw95NvXrH11DkBzNEQiskTyN1nfkn0HxaKdPx5R1Ji dlc2+v19doHqUqKTNJwzQDUlGEsrFn1/pnKBYKS4fMg1js8FKgmM+5aZnmV1rVSN +p5F2xtPv6ROk1lq37PqLIIij8UWPA1bJBDoXeqmkTQY1o0lhCeO -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:51 2025 by rpki-client