$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mcRVV1Zq73lBK0W3ipNGRxv78ws.roa File: mcRVV1Zq73lBK0W3ipNGRxv78ws.roa (raw, json) Hash identifier: CqQnBRi+9aVfI2BbB7dAeXpDZxsMWcLKeEYnqO4vlU4= Subject key identifier: 99:C4:55:57:56:6A:EF:79:41:2B:45:B7:8A:93:46:47:1B:FB:F3:0B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34A0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mcRVV1Zq73lBK0W3ipNGRxv78ws.roa Signing time: Mon 10 Feb 2025 13:52:34 +0000 ROA not before: Mon 10 Feb 2025 13:52:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.223.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13472 (0x34a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99C45557566AEF79412B45B78A9346471BFBF30B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:58:ba:f0:61:5e:53:48:ba:ad:fa:af:c4:75: 4a:83:0d:c7:0c:e3:40:06:6a:03:63:09:da:0a:4a: e3:b3:fd:a4:ee:85:ac:1c:a2:26:72:f2:cd:00:7e: 94:c6:87:24:85:5b:f1:21:51:81:0f:10:6c:1c:72: 01:22:93:1c:ad:ab:1d:66:72:f9:c4:ef:f8:9b:22: 3e:0a:4b:1f:44:d0:67:2a:4c:7b:2b:5e:c8:40:89: 19:b7:9e:9e:24:a8:bc:e9:c2:14:42:3b:2b:43:de: 97:68:51:b4:85:72:73:60:72:77:09:45:be:05:c6: df:90:0a:5e:01:ee:d8:26:f4:ce:9e:22:9b:5c:76: e8:10:75:e4:cd:f4:f7:61:89:5a:4b:38:d0:54:e7: d0:a3:90:b8:b7:b1:d4:4a:20:b2:62:f1:af:38:ba: 6d:64:50:54:6b:ad:46:4a:63:03:2f:b8:e5:0b:f7: c3:c4:0e:57:0f:bc:27:74:4d:af:c6:9a:d8:14:a8: b5:b1:61:64:9e:87:f3:ac:5d:08:b0:e8:ec:47:8b: c1:82:1a:7f:7e:91:65:83:ec:8c:33:df:9e:72:04: 89:c7:d1:30:16:27:5b:06:92:ef:e6:6c:f0:47:2f: 9c:ab:fc:df:5f:74:95:b4:0d:cc:2a:e8:9a:dd:b6: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:55:57:56:6A:EF:79:41:2B:45:B7:8A:93:46:47:1B:FB:F3:0B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mcRVV1Zq73lBK0W3ipNGRxv78ws.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.223.192/26 Signature Algorithm: sha256WithRSAEncryption b6:06:57:d1:bd:d2:a5:28:8c:f7:ea:95:f3:c9:e3:76:43:d8: c4:8b:a4:df:cf:b8:ed:42:e0:75:e6:78:b8:c1:b2:20:0d:74: 9d:ad:2e:e0:cd:cc:36:a5:7f:96:a5:dd:19:b7:ad:79:b6:ff: 29:52:d7:f8:e2:88:ca:c0:2c:32:63:6c:e5:3c:88:30:99:ab: 8f:6a:cc:d2:db:64:78:13:80:ac:83:4e:f0:d3:12:47:b4:ba: 7e:72:85:c2:10:a7:fa:4f:5f:cc:23:de:69:bd:ed:0e:41:98: dc:50:42:3a:d6:ea:37:0f:f3:bb:d9:d2:3d:c8:bc:2c:49:df: ed:0b:dd:b8:a7:03:eb:2a:07:20:6a:da:96:f3:85:d3:77:c8: 80:8c:83:9c:5d:32:03:09:fe:57:75:0e:c5:f4:20:06:34:fb: b8:13:db:b2:0a:4d:ad:97:5d:4b:95:44:5d:15:4a:c9:cf:99: 91:95:b8:be:4b:a3:90:e9:54:22:af:9b:be:02:4a:28:6c:3a: 0b:5b:00:56:d8:3c:9e:7f:ca:2e:c5:5a:b1:51:3e:d3:ce:77: d5:c0:9d:ac:db:3f:9a:e8:a1:6d:9d:a7:5d:a7:94:d0:85:65: f9:9a:af:a1:71:7a:e7:64:08:b0:a9:44:5a:ee:bd:b8:67:73: 76:99:f2:98 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5QzQ1NTU3NTY2QUVG Nzk0MTJCNDVCNzhBOTM0NjQ3MUJGQkYzMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsWLrwYV5TSLqt+q/EdUqDDccM40AGagNjCdoKSuOz/aTuhawc oiZy8s0AfpTGhySFW/EhUYEPEGwccgEikxytqx1mcvnE7/ibIj4KSx9E0GcqTHsr XshAiRm3np4kqLzpwhRCOytD3pdoUbSFcnNgcncJRb4Fxt+QCl4B7tgm9M6eIptc dugQdeTN9PdhiVpLONBU59CjkLi3sdRKILJi8a84um1kUFRrrUZKYwMvuOUL98PE DlcPvCd0Ta/GmtgUqLWxYWSeh/OsXQiw6OxHi8GCGn9+kWWD7Iwz355yBInH0TAW J1sGku/mbPBHL5yr/N9fdJW0Dcwq6Jrdtp7JAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUmcRVV1Zq73lBK0W3ipNGRxv78wswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21jUlZWMVpxNzNsQkswVzNp cE5HUnh2Nzh3cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wd/AMA0GCSqGSIb3DQEBCwUAA4IBAQC2BlfRvdKlKIz36pXzyeN2Q9jEi6Tfz7jt QuB15ni4wbIgDXSdrS7gzcw2pX+Wpd0Zt615tv8pUtf44ojKwCwyY2zlPIgwmauP aszS22R4E4Csg07w0xJHtLp+coXCEKf6T1/MI95pve0OQZjcUEI61uo3D/O72dI9 yLwsSd/tC924pwPrKgcgatqW84XTd8iAjIOcXTIDCf5XdQ7F9CAGNPu4E9uyCk2t l11LlURdFUrJz5mRlbi+S6OQ6VQir5u+AkoobDoLWwBW2Dyef8ouxVqxUT7TznfV wJ2s2z+a6KFtnaddp5TQhWX5mq+hcXrnZAiwqURa7r24Z3N2mfKY -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:52 2025 by rpki-client