$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m-K-vMtkJXWqRznt_tsd3aTh_zY.roa File: m-K-vMtkJXWqRznt_tsd3aTh_zY.roa (raw, json) Hash identifier: mSpOWbUJVJB4dRzeVSKWn9nJ8l6utsyfb3X4grhNR84= Subject key identifier: 9B:E2:BE:BC:CB:64:25:75:AA:47:39:ED:FE:DB:1D:DD:A4:E1:FF:36 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36DD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m-K-vMtkJXWqRznt_tsd3aTh_zY.roa Signing time: Mon 10 Feb 2025 13:54:45 +0000 ROA not before: Mon 10 Feb 2025 13:54:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14045 (0x36dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9BE2BEBCCB642575AA4739EDFEDB1DDDA4E1FF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:5f:5c:af:33:32:b9:fb:ef:8b:91:f5:d8: 43:6a:22:0d:bd:9d:e3:47:c3:67:14:48:bc:8d:ce: 31:00:b9:b6:9c:d5:87:ec:1b:17:1b:e4:3c:86:14: 0a:56:23:0f:ee:2e:e2:64:71:f3:a5:27:7e:80:65: 3b:57:b2:af:b9:a1:f6:a2:df:8f:02:79:6d:05:00: 3d:ee:af:e5:05:6a:5d:4c:13:0a:17:87:0c:b3:09: 67:cf:5e:59:f5:38:da:7b:5f:50:09:69:cd:7a:2a: e7:ad:0a:da:aa:58:d5:9c:fa:0e:b8:f4:3d:fa:a7: a1:32:ad:1d:ad:02:36:d7:9a:db:a1:c2:1e:68:92: 39:0e:a4:47:50:fd:60:99:14:e5:6c:6b:74:df:bc: 41:90:61:30:d0:93:0f:ea:96:91:75:c9:5c:94:49: c4:01:39:79:1a:12:c4:d3:89:53:47:0a:7e:24:8c: 8d:05:72:cd:99:9b:78:45:93:c6:ae:2c:3a:84:6a: 4a:98:37:ce:c7:ea:18:75:eb:9f:32:4a:e6:e1:8c: 06:89:11:ab:13:25:f0:e9:89:0a:a0:71:21:8c:82: 96:39:e7:34:50:00:a8:8c:cc:42:dc:c1:60:8c:85: e1:6d:5b:11:e9:1f:56:24:9c:47:64:ab:40:05:84: 99:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E2:BE:BC:CB:64:25:75:AA:47:39:ED:FE:DB:1D:DD:A4:E1:FF:36 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m-K-vMtkJXWqRznt_tsd3aTh_zY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.4.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:37:05:ab:96:75:3f:0c:98:69:ee:81:08:87:f1:85:94:e7: 04:f9:46:f0:fb:dc:ff:ce:91:a4:46:6d:e4:c5:7f:2f:99:a1: fe:4e:a8:31:2e:df:ec:19:61:98:da:47:39:9c:a2:23:23:ce: 13:f2:c7:32:c0:34:b7:f6:11:c4:d5:f6:b7:3c:18:3f:5c:e3: 5f:85:8b:da:e4:cd:f5:29:ce:02:f4:50:17:ac:b3:11:00:cc: 4e:e9:5f:03:30:fd:2d:3a:5c:de:e9:62:74:76:59:33:d5:a5: e2:b0:0b:aa:e9:43:12:32:98:c3:46:95:64:d0:5f:34:08:88: ca:83:ae:27:ec:7b:9f:95:ef:f2:75:c1:d1:5c:6a:8c:98:23: 81:8b:e2:02:52:db:bc:88:69:88:79:af:b4:da:97:a0:c9:18: d4:e0:84:68:be:ae:d0:36:dc:60:94:2e:60:57:00:f4:eb:f0: 14:ff:92:a1:ff:9d:9f:17:ef:cf:90:bf:08:84:0b:54:32:a8: 63:4d:d4:bb:0b:e2:38:9e:92:3a:d0:19:85:32:9f:51:8b:f6: 22:18:33:10:78:34:00:f5:bf:08:96:60:50:19:85:63:d7:b4: e6:95:8a:8d:ef:6e:19:b3:d8:f8:97:43:b0:fd:7c:ce:61:e3: c8:5b:f0:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCRTJCRUJDQ0I2NDI1 NzVBQTQ3MzlFREZFREIxREREQTRFMUZGMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs9l9crzMyufvvi5H12ENqIg29neNHw2cUSLyNzjEAubac1Yfs Gxcb5DyGFApWIw/uLuJkcfOlJ36AZTtXsq+5ofai348CeW0FAD3ur+UFal1MEwoX hwyzCWfPXln1ONp7X1AJac16KuetCtqqWNWc+g649D36p6EyrR2tAjbXmtuhwh5o kjkOpEdQ/WCZFOVsa3TfvEGQYTDQkw/qlpF1yVyUScQBOXkaEsTTiVNHCn4kjI0F cs2Zm3hFk8auLDqEakqYN87H6hh1658ySubhjAaJEasTJfDpiQqgcSGMgpY55zRQ AKiMzELcwWCMheFtWxHpH1YknEdkq0AFhJk5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUm+K+vMtkJXWqRznt/tsd3aTh/zYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL20tSy12TXRrSlhXcVJ6bnRf dHNkM2FUaF96WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wQQwDQYJKoZIhvcNAQELBQADggEBAJ03BauWdT8MmGnugQiH8YWU5wT5RvD73P/O kaRGbeTFfy+Zof5OqDEu3+wZYZjaRzmcoiMjzhPyxzLANLf2EcTV9rc8GD9c41+F i9rkzfUpzgL0UBessxEAzE7pXwMw/S06XN7pYnR2WTPVpeKwC6rpQxIymMNGlWTQ XzQIiMqDrifse5+V7/J1wdFcaoyYI4GL4gJS27yIaYh5r7Tal6DJGNTghGi+rtA2 3GCULmBXAPTr8BT/kqH/nZ8X78+QvwiEC1QyqGNN1LsL4jiekjrQGYUyn1GL9iIY MxB4NAD1vwiWYFAZhWPXtOaVio3vbhmz2PiXQ7D9fM5h48hb8Os= -----END CERTIFICATE-----Generated at Wed Feb 19 21:59:19 2025 by rpki-client