$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/otbxqpnh9lCtKQKS7ia3nCM2g50.roa File: otbxqpnh9lCtKQKS7ia3nCM2g50.roa (raw, json) Hash identifier: Aor1fVow1v/GR+IWoYjnXmvykeBggXIbYnSq9KuRkK0= Subject key identifier: A2:D6:F1:AA:99:E1:F6:50:AD:29:02:92:EE:26:B7:9C:23:36:83:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 352E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/otbxqpnh9lCtKQKS7ia3nCM2g50.roa Signing time: Mon 10 Feb 2025 13:53:06 +0000 ROA not before: Mon 10 Feb 2025 13:53:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13614 (0x352e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A2D6F1AA99E1F650AD290292EE26B79C2336839D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:e2:27:c7:b3:bf:bc:82:97:71:9e:1a:57: d9:b1:36:32:b7:e1:a4:d4:00:1e:c1:e8:86:fc:5e: 35:07:98:a0:d2:48:bd:6a:a4:07:0d:81:dc:40:05: 71:d2:25:b9:d7:8b:59:b3:28:58:28:1c:b7:1c:ea: 5f:e3:28:96:90:35:12:73:90:ed:a9:74:bf:14:27: 44:52:9e:ce:08:df:81:25:04:25:72:00:77:cf:77: 5e:88:bd:7b:e7:7c:dc:48:b4:2d:cb:ef:0d:15:36: 20:1c:60:7c:9b:27:f6:df:40:89:33:99:66:a8:44: 2b:99:01:f8:48:96:69:af:4a:c3:80:6a:89:e9:28: c0:5f:41:ec:73:35:81:2e:d7:54:76:68:b1:5b:de: 69:2f:93:58:5f:42:6a:d8:95:17:cc:df:a8:7b:b7: 06:20:69:17:63:9d:53:90:75:ce:43:c6:d5:bb:e7: 20:12:26:d0:23:da:45:1f:df:a8:c6:18:51:51:b7: 46:af:d3:08:00:da:3b:59:fa:4b:82:43:5d:46:8b: 57:a2:fa:f3:6f:ff:15:45:f6:97:8a:47:1d:3f:5c: 7a:44:10:08:6f:87:7e:a7:84:9d:6c:c1:91:cf:af: f4:b3:1b:e6:a3:f1:c4:ff:f2:9a:a6:c3:45:c6:3f: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D6:F1:AA:99:E1:F6:50:AD:29:02:92:EE:26:B7:9C:23:36:83:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/otbxqpnh9lCtKQKS7ia3nCM2g50.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.0/21 Signature Algorithm: sha256WithRSAEncryption 39:1f:db:c0:55:dc:60:8f:e1:c7:60:16:f5:d1:4c:b3:d7:20: 8d:ff:82:79:a8:4d:59:8d:b2:43:37:c5:d1:a1:58:72:fc:7b: 59:a7:eb:ed:2a:85:6b:7b:e3:e2:d5:37:0d:5c:dc:f2:74:19: 61:40:b3:cf:82:12:07:6c:ee:53:4c:ec:4d:ea:4b:f8:d8:38: 13:d5:3e:f8:49:c2:40:07:b1:84:a5:9e:f0:85:e4:81:0a:c5: 1b:f5:42:f8:5b:5c:01:48:b8:4e:66:dd:78:18:e1:62:d8:78: 56:b5:eb:d0:50:5e:1d:7c:35:4d:59:39:53:00:36:66:13:fd: 77:ea:ee:29:89:96:f4:78:f3:fb:df:a4:1b:18:25:d4:af:9b: 6a:35:9b:c4:0a:4b:47:fd:0c:02:d6:c0:42:fe:1a:0b:16:70: ec:33:59:e6:c3:0f:8f:69:62:56:ea:1e:e7:d5:c1:78:5e:74: ea:2e:a3:f1:d1:38:00:f0:a3:e9:78:7c:e5:eb:4b:29:93:e4: 7a:f6:86:f4:70:da:41:2b:79:8d:47:18:cd:3c:fc:44:27:80: f3:f2:ee:39:0f:c4:5d:d5:19:46:17:54:6d:af:ed:13:12:02: da:c4:ef:35:90:66:12:7d:72:6e:b5:10:28:6e:24:5d:ff:3b: 55:f7:82:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyRDZGMUFBOTlFMUY2 NTBBRDI5MDI5MkVFMjZCNzlDMjMzNjgzOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF6+Inx7O/vIKXcZ4aV9mxNjK34aTUAB7B6Ib8XjUHmKDSSL1q pAcNgdxABXHSJbnXi1mzKFgoHLcc6l/jKJaQNRJzkO2pdL8UJ0RSns4I34ElBCVy AHfPd16IvXvnfNxItC3L7w0VNiAcYHybJ/bfQIkzmWaoRCuZAfhIlmmvSsOAaonp KMBfQexzNYEu11R2aLFb3mkvk1hfQmrYlRfM36h7twYgaRdjnVOQdc5DxtW75yAS JtAj2kUf36jGGFFRt0av0wgA2jtZ+kuCQ11Gi1ei+vNv/xVF9peKRx0/XHpEEAhv h36nhJ1swZHPr/SzG+aj8cT/8pqmw0XGP2g3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUotbxqpnh9lCtKQKS7ia3nCM2g50wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL290YnhxcG5oOWxDdEtRS1M3 aWEzbkNNMmc1MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wJAwDQYJKoZIhvcNAQELBQADggEBADkf28BV3GCP4cdgFvXRTLPXII3/gnmoTVmN skM3xdGhWHL8e1mn6+0qhWt74+LVNw1c3PJ0GWFAs8+CEgds7lNM7E3qS/jYOBPV PvhJwkAHsYSlnvCF5IEKxRv1QvhbXAFIuE5m3XgY4WLYeFa169BQXh18NU1ZOVMA NmYT/Xfq7imJlvR48/vfpBsYJdSvm2o1m8QKS0f9DALWwEL+GgsWcOwzWebDD49p YlbqHufVwXhedOouo/HROADwo+l4fOXrSymT5Hr2hvRw2kEreY1HGM08/EQngPPy 7jkPxF3VGUYXVG2v7RMSAtrE7zWQZhJ9cm61EChuJF3/O1X3giI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:05 2025 by rpki-client