$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nFyOAUXarIrS5MjDqTLVJX-fnEM.roa File: nFyOAUXarIrS5MjDqTLVJX-fnEM.roa (raw, json) Hash identifier: fw5uooVUIrhmH/neEbT5Inbgdhpx3dH6t7fXROXT1JY= Subject key identifier: 9C:5C:8E:01:45:DA:AC:8A:D2:E4:C8:C3:A9:32:D5:25:7F:9F:9C:43 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3462 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nFyOAUXarIrS5MjDqTLVJX-fnEM.roa Signing time: Mon 10 Feb 2025 13:52:19 +0000 ROA not before: Mon 10 Feb 2025 13:52:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.236.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13410 (0x3462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9C5C8E0145DAAC8AD2E4C8C3A932D5257F9F9C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:f9:54:90:b7:de:98:d8:9b:81:16:f7:30: 67:94:18:72:6b:d4:d1:3a:26:38:44:d3:d3:18:72: 92:26:58:5b:16:0b:db:58:65:d4:0f:2f:01:e1:85: 0a:d2:92:ce:4a:9e:de:1a:2c:2e:b3:dd:ca:13:74: b0:21:e2:a9:d8:23:08:f2:e3:62:50:42:09:22:fa: 17:4d:ed:eb:57:7c:f6:04:74:14:9a:2f:4d:7a:61: e1:4a:8e:23:74:54:3c:3b:ad:0c:ce:79:3b:c9:c2: a7:d9:7b:13:bc:89:40:a7:6d:fe:d4:f0:4b:f6:26: 2d:97:d7:05:5d:28:30:aa:0c:6d:49:5d:a4:58:74: a7:b6:80:04:85:be:29:2b:86:f6:2c:4f:ca:91:a5: fd:e2:85:3e:a1:25:85:d5:46:d1:ed:59:40:0f:7e: 2a:4b:64:36:23:27:d5:41:8e:7c:b4:ed:75:21:01: b9:d0:4a:68:6a:8e:34:aa:f4:a0:e4:e3:bc:15:21: a2:39:f6:e0:e4:be:fc:53:26:42:ac:5b:b9:ff:00: d8:9d:f1:e7:e2:01:33:ec:3c:8b:20:ee:c7:78:6c: 74:97:d7:e3:e0:6c:73:b1:72:d3:82:71:e1:cf:e1: fc:30:a8:b9:ac:1e:2d:28:a7:1b:9c:6d:40:dd:7e: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5C:8E:01:45:DA:AC:8A:D2:E4:C8:C3:A9:32:D5:25:7F:9F:9C:43 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nFyOAUXarIrS5MjDqTLVJX-fnEM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.236.128/25 Signature Algorithm: sha256WithRSAEncryption 70:88:54:08:10:c8:ac:f2:c8:44:13:e0:97:3e:dc:0d:df:9b: 82:59:95:6f:a3:44:7e:10:ed:77:1f:b5:25:aa:8b:c9:ba:fb: bc:96:64:ed:64:a7:45:7f:13:79:35:e4:46:c7:93:20:a8:6e: ec:b3:02:b3:f3:1e:ea:ba:29:e6:a1:ca:2c:2e:e8:2c:1b:ae: f2:19:83:91:ac:c1:98:2e:59:a2:49:5c:79:78:79:4e:97:e2: d3:2f:31:0b:90:b8:a6:6f:94:87:d7:0e:89:d1:4c:b1:7d:1e: dd:cb:47:e3:15:c0:14:cc:ab:5e:2b:8c:91:8c:99:34:09:e4: 40:7d:9a:6e:38:38:19:bf:ee:f5:b0:d8:6e:9c:31:88:6c:c2: c2:81:c5:15:a5:1d:86:e2:e1:d6:7b:f1:6b:4a:64:ee:03:01: 8e:5a:71:56:ec:01:90:17:f9:9f:c7:20:11:16:a0:85:8b:4a: fe:40:f5:22:12:03:ba:f7:0b:d7:19:14:59:0a:ca:79:85:7c: 87:50:f0:c4:bd:cd:78:a9:e3:17:23:41:95:99:e6:d4:9f:27: 81:54:90:98:96:3b:a3:6a:e1:7e:4c:44:71:1a:b3:fa:1b:d6: 00:a0:9c:ee:3a:07:7a:32:8e:22:17:8d:51:ec:4f:22:c3:81: 04:98:dd:0c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlDNUM4RTAxNDVEQUFD OEFEMkU0QzhDM0E5MzJENTI1N0Y5RjlDNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5yvlUkLfemNibgRb3MGeUGHJr1NE6JjhE09MYcpImWFsWC9tY ZdQPLwHhhQrSks5Knt4aLC6z3coTdLAh4qnYIwjy42JQQgki+hdN7etXfPYEdBSa L016YeFKjiN0VDw7rQzOeTvJwqfZexO8iUCnbf7U8Ev2Ji2X1wVdKDCqDG1JXaRY dKe2gASFvikrhvYsT8qRpf3ihT6hJYXVRtHtWUAPfipLZDYjJ9VBjny07XUhAbnQ SmhqjjSq9KDk47wVIaI59uDkvvxTJkKsW7n/ANid8efiATPsPIsg7sd4bHSX1+Pg bHOxctOCceHP4fwwqLmsHi0opxucbUDdfrh/AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUnFyOAUXarIrS5MjDqTLVJX+fnEMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25GeU9BVVhhcklyUzVNakRx VExWSlgtZm5FTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+yAMA0GCSqGSIb3DQEBCwUAA4IBAQBwiFQIEMis8shEE+CXPtwN35uCWZVvo0R+ EO13H7UlqovJuvu8lmTtZKdFfxN5NeRGx5MgqG7sswKz8x7quinmocosLugsG67y GYORrMGYLlmiSVx5eHlOl+LTLzELkLimb5SH1w6J0UyxfR7dy0fjFcAUzKteK4yR jJk0CeRAfZpuODgZv+71sNhunDGIbMLCgcUVpR2G4uHWe/FrSmTuAwGOWnFW7AGQ F/mfxyARFqCFi0r+QPUiEgO69wvXGRRZCsp5hXyHUPDEvc14qeMXI0GVmebUnyeB VJCYljujauF+TERxGrP6G9YAoJzuOgd6Mo4iF41R7E8iw4EEmN0M -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:06 2025 by rpki-client