$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mwBe7aOqIu6Ct-v24wNeCYRpLp8.roa File: mwBe7aOqIu6Ct-v24wNeCYRpLp8.roa (raw, json) Hash identifier: nJbfy8xqP8vSGoCuBUEsrP7j4RXa52mBpJOx7nBFc/c= Subject key identifier: 9B:00:5E:ED:A3:AA:22:EE:82:B7:EB:F6:E3:03:5E:09:84:69:2E:9F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3610 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mwBe7aOqIu6Ct-v24wNeCYRpLp8.roa Signing time: Mon 10 Feb 2025 13:53:56 +0000 ROA not before: Mon 10 Feb 2025 13:53:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.194.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13840 (0x3610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9B005EEDA3AA22EE82B7EBF6E3035E0984692E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:fa:a3:4d:cf:e1:ed:f2:cb:df:00:5d:f9: 00:15:64:54:b3:b8:e0:78:62:2b:54:1c:5f:d7:11: b8:20:e0:5f:49:8d:96:39:e8:5a:29:6b:31:f6:fa: 90:e4:d7:65:b0:96:70:7d:bd:e1:a3:b0:03:ae:9a: a1:ba:c4:a8:d7:bf:f4:04:1c:fa:50:13:53:ff:a5: a3:3d:09:cb:fa:cf:fc:0c:49:c9:28:c7:6e:b2:b5: 37:9e:e2:62:ff:e2:14:36:4a:1e:45:9f:e0:a8:56: 2b:0d:51:fb:32:e5:80:d3:52:53:17:03:80:9e:83: e0:66:35:34:9f:0e:b4:9d:00:0b:32:4e:17:7d:1c: 19:e8:54:38:bc:50:31:84:7d:35:9e:fe:0b:2f:31: 7d:d3:ab:e3:7b:b9:21:1f:5c:a4:99:18:cf:88:01: ef:36:6a:9e:7b:b5:cf:ee:ac:e1:a7:5c:46:24:53: 1d:2e:75:bc:ae:88:9b:8e:27:38:59:a2:58:af:5f: 0a:05:23:ea:8c:bd:05:3d:4a:ac:51:a1:e3:49:13: 4b:6f:51:2b:d1:47:bc:16:94:2e:d7:5d:41:43:00: 43:56:ec:9d:da:93:be:67:2a:c9:1f:5a:94:a9:42: d4:ef:1f:10:39:3a:ed:c0:7a:e7:24:14:61:b0:e5: 58:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:00:5E:ED:A3:AA:22:EE:82:B7:EB:F6:E3:03:5E:09:84:69:2E:9F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mwBe7aOqIu6Ct-v24wNeCYRpLp8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.128.0/18 Signature Algorithm: sha256WithRSAEncryption 5c:95:b6:ec:2f:74:7b:e0:48:0e:62:1a:04:96:a9:2e:0e:91: 14:79:1e:bb:7e:3a:4a:d0:ae:aa:a6:19:dd:fd:28:71:63:f0: f5:8b:1a:1d:1b:66:ba:dc:1f:33:fd:1f:2c:cb:b3:74:91:ec: 96:51:34:0b:1b:62:5f:35:93:04:b9:70:e3:3c:2d:21:e4:25: bc:fa:ac:5f:af:f1:19:26:14:1a:64:aa:12:c6:f9:04:78:37: 8e:40:36:27:4e:99:11:98:e2:1b:76:36:94:59:77:30:e0:5d: d5:5c:e5:0b:9f:ec:39:be:d1:72:92:52:66:81:d1:3a:5d:f7: 89:44:4b:c2:a4:92:79:e8:e1:b8:4e:8c:8f:8f:a6:b2:c3:6e: 5d:21:8e:d1:3e:94:2f:b0:34:25:02:69:e5:29:e2:3c:a1:65: 5a:b3:de:8e:b4:6c:ff:6f:27:17:c5:f6:27:34:4e:ef:bb:27: 65:f0:4f:e9:7d:f8:21:0d:63:c9:13:53:17:d8:76:18:31:92: a1:b0:a9:72:91:ad:1e:95:e9:68:f8:b9:25:85:f2:65:ad:15: 18:00:8f:0a:25:e3:bd:4b:15:fd:8e:ec:0d:43:fd:fb:a5:88: 9b:51:2a:fb:76:5b:9a:8f:08:51:48:5b:b1:47:f7:c8:0a:09: b9:e9:e5:d9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCMDA1RUVEQTNBQTIy RUU4MkI3RUJGNkUzMDM1RTA5ODQ2OTJFOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+SPqjTc/h7fLL3wBd+QAVZFSzuOB4YitUHF/XEbgg4F9JjZY5 6FopazH2+pDk12WwlnB9veGjsAOumqG6xKjXv/QEHPpQE1P/paM9Ccv6z/wMScko x26ytTee4mL/4hQ2Sh5Fn+CoVisNUfsy5YDTUlMXA4Ceg+BmNTSfDrSdAAsyThd9 HBnoVDi8UDGEfTWe/gsvMX3Tq+N7uSEfXKSZGM+IAe82ap57tc/urOGnXEYkUx0u dbyuiJuOJzhZolivXwoFI+qMvQU9SqxRoeNJE0tvUSvRR7wWlC7XXUFDAENW7J3a k75nKskfWpSpQtTvHxA5Ou3AeuckFGGw5VhlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmwBe7aOqIu6Ct+v24wNeCYRpLp8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL213QmU3YU9xSXU2Q3QtdjI0 d05lQ1lScExwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7 woAwDQYJKoZIhvcNAQELBQADggEBAFyVtuwvdHvgSA5iGgSWqS4OkRR5Hrt+OkrQ rqqmGd39KHFj8PWLGh0bZrrcHzP9HyzLs3SR7JZRNAsbYl81kwS5cOM8LSHkJbz6 rF+v8RkmFBpkqhLG+QR4N45ANidOmRGY4ht2NpRZdzDgXdVc5Quf7Dm+0XKSUmaB 0Tpd94lES8Kkknno4bhOjI+PprLDbl0hjtE+lC+wNCUCaeUp4jyhZVqz3o60bP9v JxfF9ic0Tu+7J2XwT+l9+CENY8kTUxfYdhgxkqGwqXKRrR6V6Wj4uSWF8mWtFRgA jwol471LFf2O7A1D/fuliJtRKvt2W5qPCFFIW7FH98gKCbnp5dk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:45 2025 by rpki-client