$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kLLxmVELI-7tOaa8-6DDxKquOcc.roa File: kLLxmVELI-7tOaa8-6DDxKquOcc.roa (raw, json) Hash identifier: n3eW4Q2KXOi1rkpN6JNWZ/jQi9mDeW8PXz13GRVBiBc= Subject key identifier: 90:B2:F1:99:51:0B:23:EE:ED:39:A6:BC:FB:A0:C3:C4:AA:AE:39:C7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3623 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kLLxmVELI-7tOaa8-6DDxKquOcc.roa Signing time: Mon 10 Feb 2025 13:54:01 +0000 ROA not before: Mon 10 Feb 2025 13:54:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13859 (0x3623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=90B2F199510B23EEED39A6BCFBA0C3C4AAAE39C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:91:e0:28:4f:a5:d6:96:ca:50:60:fe:d0: ab:40:e8:26:d1:a9:c3:76:29:72:ab:4d:d3:31:ba: f7:5e:91:b4:cc:a0:75:fd:67:0b:45:4d:13:e8:58: 92:ef:48:da:ed:c2:3e:8e:56:8d:98:af:7b:4f:7c: 3f:f9:29:68:ee:ba:fc:88:12:56:cc:3b:27:2b:22: 13:45:46:54:58:49:f2:a0:2f:0c:bb:ec:b0:fd:76: d1:6e:ad:6c:5d:53:ef:4a:d3:fb:f0:39:e8:97:58: 29:e6:57:16:9f:75:2b:c4:0b:38:07:86:3a:a4:84: c5:eb:64:40:f1:c6:3b:24:d5:1a:4d:e4:32:f9:14: 76:28:4e:3d:a3:3a:d9:6e:97:c9:ab:69:b2:fd:f6: ed:03:25:6f:ad:6f:f2:58:db:35:cd:33:ae:b8:2b: e6:c3:24:2d:dd:cb:f6:fa:32:fb:9c:a4:c7:b4:9f: 17:fe:62:1f:41:04:bf:cc:d6:a1:c2:d0:b0:25:e5: f2:6f:d1:e1:73:52:2e:ac:c1:3f:13:8a:7c:bb:87: ac:27:08:86:a5:21:71:4a:d5:b2:da:ec:06:6b:ac: 20:f3:c5:ae:99:e4:fc:86:0d:67:c9:11:e9:e9:6d: 25:40:f4:0d:10:8f:c2:ea:51:d4:a1:15:a3:c5:3f: 46:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B2:F1:99:51:0B:23:EE:ED:39:A6:BC:FB:A0:C3:C4:AA:AE:39:C7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kLLxmVELI-7tOaa8-6DDxKquOcc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.48.0/20 Signature Algorithm: sha256WithRSAEncryption 55:33:1b:f7:73:4f:6e:f3:73:73:8a:c0:06:7c:23:81:51:31: 13:2a:5f:25:c6:fb:b7:a5:16:38:59:f2:09:0f:ea:17:c0:70: af:81:fd:68:9e:fc:fa:11:54:f4:86:12:51:5a:fe:fc:80:10: f0:e3:b1:27:0e:69:7e:6b:21:31:30:e9:9d:3b:97:97:13:65: 22:66:9e:56:f7:53:06:1d:ea:9b:5b:39:53:08:cd:6f:29:69: a3:6e:d1:01:c0:89:9a:6c:32:12:89:8b:f0:ae:0b:07:ba:e9: 7b:c7:0f:64:7b:0e:d0:8f:61:87:e1:bd:93:ce:85:00:05:e9: ee:ac:09:2d:81:89:0c:fb:0e:bc:34:ce:1e:5f:7a:15:a4:3b: cd:00:b1:84:e7:41:7e:0c:37:2a:95:3b:16:97:4a:cf:7d:87: 00:69:42:f9:c7:4b:2c:bd:d4:7b:c3:bc:77:30:e7:2b:a2:06: fe:b6:af:2e:3b:b0:d9:37:b6:e6:18:52:10:a2:bf:90:2e:77: 0c:1c:5c:6b:f8:a1:32:4a:7d:a2:7f:38:ff:81:bc:ca:d4:09: 52:9b:40:a1:1c:5a:7f:7c:d9:af:6c:0e:e3:69:65:23:6f:4c: 8d:4b:d6:2b:b3:4e:48:87:59:d2:d3:08:07:36:34:36:86:13: 2a:f2:7a:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwQjJGMTk5NTEwQjIz RUVFRDM5QTZCQ0ZCQTBDM0M0QUFBRTM5QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+dJHgKE+l1pbKUGD+0KtA6CbRqcN2KXKrTdMxuvdekbTMoHX9 ZwtFTRPoWJLvSNrtwj6OVo2Yr3tPfD/5KWjuuvyIElbMOycrIhNFRlRYSfKgLwy7 7LD9dtFurWxdU+9K0/vwOeiXWCnmVxafdSvECzgHhjqkhMXrZEDxxjsk1RpN5DL5 FHYoTj2jOtlul8mrabL99u0DJW+tb/JY2zXNM664K+bDJC3dy/b6MvucpMe0nxf+ Yh9BBL/M1qHC0LAl5fJv0eFzUi6swT8Tiny7h6wnCIalIXFK1bLa7AZrrCDzxa6Z 5PyGDWfJEenpbSVA9A0Qj8LqUdShFaPFP0YNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkLLxmVELI+7tOaa8+6DDxKquOccwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tMTHhtVkVMSS03dE9hYTgt NkREeEtxdU9jYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wTAwDQYJKoZIhvcNAQELBQADggEBAFUzG/dzT27zc3OKwAZ8I4FRMRMqXyXG+7el FjhZ8gkP6hfAcK+B/Wie/PoRVPSGElFa/vyAEPDjsScOaX5rITEw6Z07l5cTZSJm nlb3UwYd6ptbOVMIzW8paaNu0QHAiZpsMhKJi/CuCwe66XvHD2R7DtCPYYfhvZPO hQAF6e6sCS2BiQz7Drw0zh5fehWkO80AsYTnQX4MNyqVOxaXSs99hwBpQvnHSyy9 1HvDvHcw5yuiBv62ry47sNk3tuYYUhCiv5AudwwcXGv4oTJKfaJ/OP+BvMrUCVKb QKEcWn982a9sDuNpZSNvTI1L1iuzTkiHWdLTCAc2NDaGEyryeh8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:09 2025 by rpki-client