$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kAVhrKvF1V9-iXbeQheJNZLJiaU.roa File: kAVhrKvF1V9-iXbeQheJNZLJiaU.roa (raw, json) Hash identifier: v+XbZfBC0RmMWpZ/IHCMORuohzm9sdZwDoWxFa7Ms88= Subject key identifier: 90:05:61:AC:AB:C5:D5:5F:7E:89:76:DE:42:17:89:35:92:C9:89:A5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3561 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kAVhrKvF1V9-iXbeQheJNZLJiaU.roa Signing time: Mon 10 Feb 2025 13:53:17 +0000 ROA not before: Mon 10 Feb 2025 13:53:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13665 (0x3561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=900561ACABC5D55F7E8976DE4217893592C989A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fa:93:e1:df:e8:50:85:8f:12:16:4e:77:9e: ca:dc:5f:bf:d5:19:80:51:84:82:38:96:31:cf:53: 68:e3:f7:ee:dd:ac:75:9c:fc:1b:54:36:c6:00:d6: 63:6a:b4:8d:9d:e5:be:55:4f:3b:f1:23:cc:6f:d8: e6:6e:11:6e:d1:f5:4c:44:d3:ba:87:17:74:67:67: 0a:13:10:b8:c4:19:57:97:8e:f6:e8:4d:d3:6b:83: 7f:e2:e2:3e:81:c8:02:39:41:e2:c6:01:bb:97:70: c6:13:d8:66:ab:02:ec:20:6d:34:94:92:c3:a3:d6: c5:8c:5e:d4:fa:89:6b:2f:92:c4:a9:65:d6:4e:f9: 4c:5b:10:d6:fb:75:c5:54:18:bb:ae:5f:df:e1:80: 2a:ed:c4:fe:bf:8f:45:68:94:24:a6:77:48:dc:cc: 7c:09:53:74:7a:f6:18:58:d9:6f:4e:5b:10:05:31: bc:fe:fd:da:04:9e:de:c2:4f:c7:14:89:09:74:ad: 93:23:05:08:cc:8f:ea:cd:cd:ad:9a:01:cc:6b:29: 05:d0:34:fb:cc:58:d0:d4:c0:1b:c2:c1:74:4b:cf: 5c:4b:f4:5a:1a:fd:44:63:c5:47:c2:0d:fd:35:a6: 91:97:a3:e9:e9:39:bb:fb:83:76:57:c3:44:87:06: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:61:AC:AB:C5:D5:5F:7E:89:76:DE:42:17:89:35:92:C9:89:A5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kAVhrKvF1V9-iXbeQheJNZLJiaU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.48.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:79:07:5b:18:38:3c:49:5e:b5:17:47:2c:77:1e:d6:3a:0c: 8f:01:7c:41:7e:21:58:5c:47:42:d6:c7:23:6c:87:89:11:5f: 13:b8:b2:59:01:b1:d2:78:7f:ba:06:d7:7a:0b:af:08:04:62: 45:33:2b:45:ba:ae:66:0f:d1:fb:28:28:13:fa:e6:a1:af:e5: ee:29:30:d6:4f:39:fd:f1:de:ac:9f:40:2a:0d:d2:75:3c:9e: 0d:a8:45:8a:b4:b0:08:dc:6e:ce:b3:e5:61:6c:41:48:1b:3f: 89:ec:8d:a9:cb:9d:c5:22:f9:ea:3e:a6:15:8f:3c:41:4a:ac: b8:ef:d6:61:aa:09:e0:6d:d4:d4:bf:72:60:0c:f7:2f:ef:db: 64:05:7f:0b:4c:4d:20:e9:a7:9e:e6:33:34:54:11:3e:dd:8b: fa:05:5c:b1:de:c9:a5:99:5c:b9:32:03:2d:2d:5e:0c:ad:cb: 43:11:57:53:a2:89:d1:43:cf:b9:8f:4a:e2:90:7e:30:f6:af: 03:24:e7:ed:84:32:e7:70:64:3a:ca:7a:bb:41:00:d3:f8:bf: fa:10:8b:b7:d5:e4:55:80:41:96:c8:6c:ee:62:9c:ac:dc:60: c0:46:90:0c:2b:47:7b:f8:36:f9:9a:9f:53:d9:df:54:58:4c: be:3b:28:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwMDU2MUFDQUJDNUQ1 NUY3RTg5NzZERTQyMTc4OTM1OTJDOTg5QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa+pPh3+hQhY8SFk53nsrcX7/VGYBRhII4ljHPU2jj9+7drHWc /BtUNsYA1mNqtI2d5b5VTzvxI8xv2OZuEW7R9UxE07qHF3RnZwoTELjEGVeXjvbo TdNrg3/i4j6ByAI5QeLGAbuXcMYT2GarAuwgbTSUksOj1sWMXtT6iWsvksSpZdZO +UxbENb7dcVUGLuuX9/hgCrtxP6/j0VolCSmd0jczHwJU3R69hhY2W9OWxAFMbz+ /doEnt7CT8cUiQl0rZMjBQjMj+rNza2aAcxrKQXQNPvMWNDUwBvCwXRLz1xL9Foa /URjxUfCDf01ppGXo+npObv7g3ZXw0SHBqxxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkAVhrKvF1V9+iXbeQheJNZLJiaUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tBVmhyS3ZGMVY5LWlYYmVR aGVKTlpMSmlhVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wTAwDQYJKoZIhvcNAQELBQADggEBAI95B1sYODxJXrUXRyx3HtY6DI8BfEF+IVhc R0LWxyNsh4kRXxO4slkBsdJ4f7oG13oLrwgEYkUzK0W6rmYP0fsoKBP65qGv5e4p MNZPOf3x3qyfQCoN0nU8ng2oRYq0sAjcbs6z5WFsQUgbP4nsjanLncUi+eo+phWP PEFKrLjv1mGqCeBt1NS/cmAM9y/v22QFfwtMTSDpp57mMzRUET7di/oFXLHeyaWZ XLkyAy0tXgyty0MRV1OiidFDz7mPSuKQfjD2rwMk5+2EMudwZDrKertBANP4v/oQ i7fV5FWAQZbIbO5inKzcYMBGkAwrR3v4Nvman1PZ31RYTL47KFo= -----END CERTIFICATE-----Generated at Wed Feb 19 21:59:53 2025 by rpki-client