$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nnQ7f1U7Xt-EQ3rK_TBS7_AZaHE.roa File: nnQ7f1U7Xt-EQ3rK_TBS7_AZaHE.roa (raw, json) Hash identifier: QPOPM28xrNCYWDZKdL0NiGh7OAV5E68ctQ3KT4ulfJg= Subject key identifier: 9E:74:3B:7F:55:3B:5E:DF:84:43:7A:CA:FD:30:52:EF:F0:19:68:71 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35F9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nnQ7f1U7Xt-EQ3rK_TBS7_AZaHE.roa Signing time: Mon 10 Feb 2025 13:53:52 +0000 ROA not before: Mon 10 Feb 2025 13:53:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13817 (0x35f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9E743B7F553B5EDF84437ACAFD3052EFF0196871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:fa:75:76:6c:e4:40:51:0c:7a:e1:fe:f4: c9:b0:4a:17:18:f9:d7:ce:0e:0b:0e:b1:82:49:b7: a0:8e:00:7b:a7:19:ee:9b:65:33:f9:45:7e:82:37: d3:ef:37:b5:83:86:40:80:15:3c:09:12:68:58:7d: 3e:5f:1f:6d:6b:d0:42:62:8f:18:19:96:2f:e8:43: 81:46:59:90:07:d1:2f:1b:80:11:86:bc:f4:5e:3f: aa:67:e9:47:a6:16:04:bb:06:fc:e5:99:e4:4b:79: 7e:60:15:27:c7:48:88:ce:9c:12:80:54:43:46:fa: 8f:ef:73:21:ce:db:62:b1:c3:10:a3:3e:07:a2:f3: 42:7e:68:be:99:2a:01:39:f0:24:35:ec:b1:74:3b: 4c:3e:38:1c:40:1b:c3:4d:10:be:cd:ab:ae:a5:d3: d2:84:68:06:1c:eb:16:b7:99:96:c2:3e:99:e7:fc: f5:f4:ba:ef:3e:ed:dd:64:ef:9e:7c:99:e9:7f:cc: 69:dd:88:78:60:c1:1d:0e:2b:42:55:d9:cd:af:2e: 07:1e:77:7a:87:07:aa:d6:d2:88:04:d4:fb:12:4b: ef:5f:39:0b:42:e1:13:4b:0a:a6:d1:00:76:42:7d: 88:5c:7b:a2:0b:04:de:69:02:1e:0e:1a:38:6e:ff: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:74:3B:7F:55:3B:5E:DF:84:43:7A:CA:FD:30:52:EF:F0:19:68:71 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nnQ7f1U7Xt-EQ3rK_TBS7_AZaHE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.8.0/21 Signature Algorithm: sha256WithRSAEncryption 84:aa:f2:74:74:c7:9f:84:a7:00:72:95:f5:3e:76:3b:f8:21: 40:dc:7e:f1:37:ea:22:62:ae:a6:1f:be:04:b3:a0:f5:f0:eb: 40:ef:ea:c1:06:af:92:51:cc:6d:c3:6f:43:5e:6c:62:55:f5: 39:23:63:12:91:36:16:a5:09:5d:c7:7c:8b:a2:c3:2f:f2:22: 92:01:b6:1e:ac:89:7a:78:dc:1b:02:ee:4e:32:12:26:9f:83: b5:72:01:1e:c6:51:50:d3:47:a1:bd:21:b1:fc:c9:21:74:1f: ea:9c:c3:b1:7e:5c:a7:43:4c:0e:67:ba:d1:ea:be:b0:89:df: 32:9f:3c:d9:fb:7e:96:32:12:ee:e2:dc:2d:7a:8e:20:d2:d4: 18:f4:9e:5c:e9:f5:04:f3:6b:2b:12:28:0c:78:0f:9f:de:6e: 73:ac:f8:8d:0a:dc:22:71:03:66:b5:c8:e5:ad:9f:2a:11:7b: 88:61:97:44:13:1e:2a:55:8f:46:0b:8a:23:c9:0a:c9:b8:24: a5:f9:99:e0:48:84:a5:32:14:de:e7:c5:80:bd:e9:05:0a:4e: 88:e7:78:da:e6:ff:42:c9:62:78:d7:99:37:79:e7:7a:5f:fe: 3e:06:cf:b3:9c:a1:b7:7b:69:f6:bd:3b:f3:4d:cf:7e:79:63: 84:7f:d1:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlFNzQzQjdGNTUzQjVF REY4NDQzN0FDQUZEMzA1MkVGRjAxOTY4NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL0Pp1dmzkQFEMeuH+9MmwShcY+dfODgsOsYJJt6COAHunGe6b ZTP5RX6CN9PvN7WDhkCAFTwJEmhYfT5fH21r0EJijxgZli/oQ4FGWZAH0S8bgBGG vPReP6pn6UemFgS7BvzlmeRLeX5gFSfHSIjOnBKAVENG+o/vcyHO22KxwxCjPgei 80J+aL6ZKgE58CQ17LF0O0w+OBxAG8NNEL7Nq66l09KEaAYc6xa3mZbCPpnn/PX0 uu8+7d1k7558mel/zGndiHhgwR0OK0JV2c2vLgced3qHB6rW0ogE1PsSS+9fOQtC 4RNLCqbRAHZCfYhce6ILBN5pAh4OGjhu/13DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnnQ7f1U7Xt+EQ3rK/TBS7/AZaHEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25uUTdmMVU3WHQtRVEzcktf VEJTN19BWmFIRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wAgwDQYJKoZIhvcNAQELBQADggEBAISq8nR0x5+EpwBylfU+djv4IUDcfvE36iJi rqYfvgSzoPXw60Dv6sEGr5JRzG3Db0NebGJV9TkjYxKRNhalCV3HfIuiwy/yIpIB th6siXp43BsC7k4yEiafg7VyAR7GUVDTR6G9IbH8ySF0H+qcw7F+XKdDTA5nutHq vrCJ3zKfPNn7fpYyEu7i3C16jiDS1Bj0nlzp9QTzaysSKAx4D5/ebnOs+I0K3CJx A2a1yOWtnyoRe4hhl0QTHipVj0YLiiPJCsm4JKX5meBIhKUyFN7nxYC96QUKTojn eNrm/0LJYnjXmTd553pf/j4Gz7Ocobd7afa9O/NNz355Y4R/0Z8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:35 2025 by rpki-client