$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/og1xRszuobP_IYfqYm_tM_Q1EB0.roa File: og1xRszuobP_IYfqYm_tM_Q1EB0.roa (raw, json) Hash identifier: vu8VLR/A/aZpVuv8ZyqAGj8i065AqqgLqC7Oz1nTLqM= Subject key identifier: A2:0D:71:46:CC:EE:A1:B3:FF:21:87:EA:62:6F:ED:33:F4:35:10:1D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3459 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/og1xRszuobP_IYfqYm_tM_Q1EB0.roa Signing time: Mon 10 Feb 2025 13:52:18 +0000 ROA not before: Mon 10 Feb 2025 13:52:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13401 (0x3459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A20D7146CCEEA1B3FF2187EA626FED33F435101D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:56:7f:52:8d:d2:25:67:02:a0:2e:21:1b: e6:ab:ea:02:8f:25:0b:84:5e:7d:f0:49:d0:74:d2: 2c:52:56:f7:75:31:1e:1c:03:88:83:00:73:4d:1b: 28:63:87:2e:e4:96:3b:82:65:a7:e5:8c:a5:a2:10: 34:89:b9:3f:b7:61:64:51:db:e9:6a:0c:d0:9d:fd: 7c:75:3e:aa:95:5f:60:10:03:f4:15:d4:1e:7e:84: 3d:1c:bf:82:03:f7:a6:09:81:ec:a4:7c:e8:33:1f: 12:5e:bc:79:e4:96:91:38:d6:1c:44:38:27:93:5d: 78:eb:b5:bc:a0:20:e9:78:f5:80:08:e4:d9:1a:34: 50:0e:52:72:95:96:2a:c6:c9:17:d1:9c:2d:7b:bc: df:0f:29:dd:47:2a:8c:d4:d6:9f:28:ff:1e:3b:18: bd:68:2c:bc:8c:b9:6c:52:19:41:05:58:6c:bf:bc: c6:b8:ec:72:52:43:fb:45:67:1b:8d:99:46:01:ab: e9:48:a1:d8:af:5b:ae:0c:3f:08:e8:0e:65:a4:8f: 52:64:af:52:32:43:35:ce:20:6a:58:20:ad:f8:05: bb:a2:e5:dc:7f:ab:84:0d:72:96:2a:6d:54:01:45: 4f:f3:28:22:0f:36:b8:ec:c3:ef:82:6e:26:f1:25: 95:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0D:71:46:CC:EE:A1:B3:FF:21:87:EA:62:6F:ED:33:F4:35:10:1D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/og1xRszuobP_IYfqYm_tM_Q1EB0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.149.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:79:55:00:3b:b4:1f:36:be:1b:de:25:b9:78:cc:7a:21:a0: 65:98:45:e3:03:99:4a:8b:8e:e2:4b:c3:b5:43:e9:75:8b:78: d3:ba:b9:25:e8:2c:84:06:d3:18:e0:d0:a1:2f:77:bd:7d:fc: 69:e0:99:c4:68:e0:1e:0d:b7:79:34:1f:44:4a:4a:18:9b:0d: ad:14:71:4e:ef:ef:95:af:f7:38:41:93:fe:66:af:39:57:e3: 69:0f:a0:11:ac:fa:e7:8a:84:de:33:7d:81:72:a4:a7:98:2a: 7f:35:e7:c8:a8:be:51:56:5c:9f:80:ea:fa:0c:7e:49:e0:69: ae:cc:08:27:db:33:72:3b:0f:0b:5a:b0:6b:76:19:2f:12:9a: a8:ee:73:74:1a:7f:c2:f4:7f:15:21:7f:d6:84:30:9f:f8:b5: 8d:dd:0e:94:9d:a4:aa:31:0f:cc:e1:65:36:d2:89:05:c1:62: 15:a5:08:ee:76:0c:21:0d:a0:7c:61:18:c9:c9:2c:da:1c:3c: 49:f1:65:c2:e5:09:fa:20:3a:39:a8:0a:10:8f:78:03:28:6c: df:64:de:d9:26:50:94:35:b7:00:e4:9d:71:c4:8c:a7:35:58: 2f:ec:f6:d6:f5:b6:03:17:bc:7c:8b:79:26:e0:09:8a:77:1c: c5:89:18:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyMEQ3MTQ2Q0NFRUEx QjNGRjIxODdFQTYyNkZFRDMzRjQzNTEwMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC5FZ/Uo3SJWcCoC4hG+ar6gKPJQuEXn3wSdB00ixSVvd1MR4c A4iDAHNNGyhjhy7kljuCZafljKWiEDSJuT+3YWRR2+lqDNCd/Xx1PqqVX2AQA/QV 1B5+hD0cv4ID96YJgeykfOgzHxJevHnklpE41hxEOCeTXXjrtbygIOl49YAI5Nka NFAOUnKVlirGyRfRnC17vN8PKd1HKozU1p8o/x47GL1oLLyMuWxSGUEFWGy/vMa4 7HJSQ/tFZxuNmUYBq+lIodivW64MPwjoDmWkj1Jkr1IyQzXOIGpYIK34Bbui5dx/ q4QNcpYqbVQBRU/zKCIPNrjsw++CbibxJZXzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUog1xRszuobP/IYfqYm/tM/Q1EB0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29nMXhSc3p1b2JQX0lZZnFZ bV90TV9RMUVCMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w5UwDQYJKoZIhvcNAQELBQADggEBAI15VQA7tB82vhveJbl4zHohoGWYReMDmUqL juJLw7VD6XWLeNO6uSXoLIQG0xjg0KEvd719/GngmcRo4B4Nt3k0H0RKShibDa0U cU7v75Wv9zhBk/5mrzlX42kPoBGs+ueKhN4zfYFypKeYKn8158iovlFWXJ+A6voM fkngaa7MCCfbM3I7DwtasGt2GS8Smqjuc3Qaf8L0fxUhf9aEMJ/4tY3dDpSdpKox D8zhZTbSiQXBYhWlCO52DCENoHxhGMnJLNocPEnxZcLlCfogOjmoChCPeAMobN9k 3tkmUJQ1twDknXHEjKc1WC/s9tb1tgMXvHyLeSbgCYp3HMWJGAY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:13 2025 by rpki-client