$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pQuZvV8ZloUqNVmUkJeDO16JoSI.roa File: pQuZvV8ZloUqNVmUkJeDO16JoSI.roa (raw, json) Hash identifier: Ysj3ayYS33xhB2Z3T6KUD+4SFHW7We7AOKdAepzhvA4= Subject key identifier: A5:0B:99:BD:5F:19:96:85:2A:35:59:94:90:97:83:3B:5E:89:A1:22 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3539 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pQuZvV8ZloUqNVmUkJeDO16JoSI.roa Signing time: Mon 10 Feb 2025 13:53:08 +0000 ROA not before: Mon 10 Feb 2025 13:53:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13625 (0x3539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A50B99BD5F1996852A3559949097833B5E89A122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:d3:27:ed:10:54:52:e5:f6:b6:b8:44:2b: 97:04:95:35:c3:ae:c0:41:a5:21:6d:6a:7a:73:f2: e8:38:c7:00:46:9a:cf:45:33:6d:94:86:d0:11:49: 4a:0f:79:42:48:a1:29:36:9e:64:fc:a1:df:91:7e: 0a:f0:8c:15:15:66:0e:8e:d7:36:dc:bb:2f:7e:41: 16:44:81:a1:54:9c:7e:54:23:a7:26:00:fc:88:3b: d3:76:78:63:95:21:55:a9:1c:4f:b8:0b:93:a2:ff: b1:e0:3d:df:42:44:2e:15:9a:a1:cb:bb:a9:6c:3a: fc:3d:e2:72:b8:62:2b:cc:9e:09:e3:9a:80:92:3c: b6:e6:35:6b:70:2a:74:fd:89:3f:be:fe:f0:45:c2: 28:8f:c3:2f:59:58:53:67:36:85:e8:ef:86:5a:a7: 58:6c:d2:0e:8c:61:45:ec:a0:aa:e4:60:93:19:ec: b8:2e:cd:bc:5f:af:f1:24:77:ca:cd:37:ea:42:ac: d4:66:aa:ca:2c:79:bc:ed:1f:9b:25:ee:7e:45:4a: 0b:42:1d:84:fe:23:bd:f7:de:10:28:46:21:6b:83: ed:02:29:fb:ce:b9:2d:f3:69:fd:3a:8f:23:c0:a6: a9:19:d9:97:3e:7a:0c:ad:17:6e:94:1a:b5:37:bc: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0B:99:BD:5F:19:96:85:2A:35:59:94:90:97:83:3B:5E:89:A1:22 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pQuZvV8ZloUqNVmUkJeDO16JoSI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.232.0/22 Signature Algorithm: sha256WithRSAEncryption 31:d6:9e:75:a1:d7:81:95:90:ae:15:c1:b7:b7:96:5e:a8:fd: d8:05:1b:4f:83:c5:54:fb:3f:94:d7:7f:1f:3f:33:53:9a:b9: 5e:c5:57:94:c5:4e:a0:c9:11:f7:4c:d6:e1:24:b2:e3:ba:a1: 46:a2:a8:35:6f:cf:3c:2e:6a:18:73:da:0d:ef:6e:44:c4:b1: 88:07:f4:69:45:53:70:91:6a:70:48:e1:8a:fb:7a:0a:3a:60: 7b:c0:ee:ae:d3:2f:94:77:c0:4f:ad:09:4d:59:f0:a0:4d:2b: fd:0e:af:39:78:0f:70:1f:79:8b:ff:be:54:10:00:69:f9:1f: 73:91:01:80:19:ea:65:dd:df:0d:b0:e1:e0:63:e8:c3:f2:31: c5:6b:06:c0:28:03:5a:89:ab:9e:f7:d4:53:ca:62:e5:d5:1b: 9e:d2:6c:5b:86:40:f3:73:5f:30:34:ef:fa:b6:97:1f:87:9a: 34:0c:07:d0:86:66:9c:f7:0e:3b:0d:45:97:39:29:83:2d:b3: 84:3f:a2:29:4e:af:01:48:da:78:3f:55:8d:38:26:59:41:06: c1:31:76:a7:2c:32:e3:ba:a3:8c:f2:2c:08:96:66:52:6e:5c: 6b:26:af:03:94:b7:bc:e6:df:98:7f:0a:56:f6:48:0a:ba:20: 8a:e1:4b:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1MEI5OUJENUYxOTk2 ODUyQTM1NTk5NDkwOTc4MzNCNUU4OUExMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/29Mn7RBUUuX2trhEK5cElTXDrsBBpSFtanpz8ug4xwBGms9F M22UhtARSUoPeUJIoSk2nmT8od+RfgrwjBUVZg6O1zbcuy9+QRZEgaFUnH5UI6cm APyIO9N2eGOVIVWpHE+4C5Oi/7HgPd9CRC4VmqHLu6lsOvw94nK4YivMngnjmoCS PLbmNWtwKnT9iT++/vBFwiiPwy9ZWFNnNoXo74Zap1hs0g6MYUXsoKrkYJMZ7Lgu zbxfr/Ekd8rNN+pCrNRmqsosebztH5sl7n5FSgtCHYT+I7333hAoRiFrg+0CKfvO uS3zaf06jyPApqkZ2Zc+egytF26UGrU3vMTjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpQuZvV8ZloUqNVmUkJeDO16JoSIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BRdVp2VjhabG9VcU5WbVVr SmVETzE2Sm9TSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wOgwDQYJKoZIhvcNAQELBQADggEBADHWnnWh14GVkK4Vwbe3ll6o/dgFG0+DxVT7 P5TXfx8/M1OauV7FV5TFTqDJEfdM1uEksuO6oUaiqDVvzzwuahhz2g3vbkTEsYgH 9GlFU3CRanBI4Yr7ego6YHvA7q7TL5R3wE+tCU1Z8KBNK/0Orzl4D3AfeYv/vlQQ AGn5H3ORAYAZ6mXd3w2w4eBj6MPyMcVrBsAoA1qJq5731FPKYuXVG57SbFuGQPNz XzA07/q2lx+HmjQMB9CGZpz3DjsNRZc5KYMts4Q/oilOrwFI2ng/VY04JllBBsEx dqcsMuO6o4zyLAiWZlJuXGsmrwOUt7zm35h/Clb2SAq6IIrhSwE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:46 2025 by rpki-client