$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s_U5xXlQxFK2t8enBFcc3x-P7pE.roa File: s_U5xXlQxFK2t8enBFcc3x-P7pE.roa (raw, json) Hash identifier: UOcK2bJZppLVA/vpe+peUE17drAnXFwtpfIlKZVJf+g= Subject key identifier: B3:F5:39:C5:79:50:C4:52:B6:B7:C7:A7:04:57:1C:DF:1F:8F:EE:91 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34A1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s_U5xXlQxFK2t8enBFcc3x-P7pE.roa Signing time: Mon 10 Feb 2025 13:52:34 +0000 ROA not before: Mon 10 Feb 2025 13:52:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B3F539C57950C452B6B7C7A704571CDF1F8FEE91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:07:07:61:6c:bb:06:01:c6:55:b8:d9:00: 8a:7e:de:c3:e0:a7:6d:61:69:ce:06:30:a3:27:0a: 55:43:7f:a2:1b:97:48:24:be:34:9f:dc:1f:d9:98: f6:69:43:4f:77:41:73:a0:8c:5a:a6:ef:d0:8f:3e: 4f:51:83:9a:f6:c5:b2:7e:0e:42:01:c2:a0:30:78: 35:48:6f:5d:58:67:5d:c2:a2:62:c6:0e:87:56:e6: bc:56:56:85:bc:f3:10:ee:08:0d:29:b7:64:2d:3d: 60:00:0d:a8:d7:9d:2a:38:92:5b:63:1b:c4:21:3e: 82:6c:d2:6f:d7:36:c2:5d:45:f8:63:e0:36:3f:79: 3f:c1:56:ed:9b:26:ac:96:35:9c:a9:60:bc:43:87: 3b:26:a7:19:08:13:ee:81:38:a7:ff:1a:28:aa:9b: de:67:f2:a4:e9:8f:05:ed:27:c2:17:e0:d0:9c:6a: 61:a4:82:0b:86:a8:60:db:8a:20:19:29:d0:ec:c9: 87:5a:8f:a6:47:f1:7d:1b:66:26:36:54:6d:c5:f5: 9c:f6:e3:7b:f5:9a:52:3e:47:42:5b:04:e8:be:85: ef:7d:be:07:ef:08:c9:74:59:02:44:86:bb:8e:27: a0:b9:74:72:8d:7b:2f:ed:9d:ea:e2:48:01:47:50: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F5:39:C5:79:50:C4:52:B6:B7:C7:A7:04:57:1C:DF:1F:8F:EE:91 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s_U5xXlQxFK2t8enBFcc3x-P7pE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.132.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:2a:6f:7d:04:cc:fd:21:28:1c:23:a5:3d:00:1d:15:f3:12: e1:12:47:74:cd:ba:96:10:fd:bc:b9:cd:b0:fd:7a:88:0a:65: 5d:f2:5b:25:12:06:15:0f:3d:01:04:57:28:83:1b:7e:7c:9d: c9:31:20:80:a2:f4:94:d2:0d:b4:72:8f:2f:2a:25:4c:6a:56: 9e:09:b8:e1:ae:1b:d8:a1:85:de:87:ca:7f:33:70:3e:75:77: 03:39:18:1e:7d:b7:9d:e0:55:5a:0b:87:e2:94:c1:22:43:bd: a5:d5:61:51:52:f1:7a:97:9c:e0:48:90:32:c9:71:d4:f6:b6: f6:96:3d:ff:95:70:6a:dc:0d:d6:fa:b6:14:ac:cf:85:80:6f: 3f:8b:b2:29:bf:34:05:d2:0c:6f:33:44:3b:87:61:c0:10:d7: 7f:20:47:f1:2b:a7:83:47:48:0e:af:ec:c8:68:41:86:0a:c2: b5:eb:12:ae:d4:71:47:71:8c:44:85:ab:a4:de:c8:f2:d9:de: 8d:2d:29:d3:80:6f:16:f6:a6:86:56:4e:4d:e8:93:b5:c7:3b: 61:bc:7e:c3:2c:ea:10:5f:14:b2:d7:cf:9b:33:12:b2:ef:66: b5:c1:7f:33:95:7e:10:ae:35:07:8b:99:7e:a1:e3:c3:81:67: 07:e7:48:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIzRjUzOUM1Nzk1MEM0 NTJCNkI3QzdBNzA0NTcxQ0RGMUY4RkVFOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmAgcHYWy7BgHGVbjZAIp+3sPgp21hac4GMKMnClVDf6Ibl0gk vjSf3B/ZmPZpQ093QXOgjFqm79CPPk9Rg5r2xbJ+DkIBwqAweDVIb11YZ13ComLG DodW5rxWVoW88xDuCA0pt2QtPWAADajXnSo4kltjG8QhPoJs0m/XNsJdRfhj4DY/ eT/BVu2bJqyWNZypYLxDhzsmpxkIE+6BOKf/Giiqm95n8qTpjwXtJ8IX4NCcamGk gguGqGDbiiAZKdDsyYdaj6ZH8X0bZiY2VG3F9Zz243v1mlI+R0JbBOi+he99vgfv CMl0WQJEhruOJ6C5dHKNey/tneriSAFHUPJRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUs/U5xXlQxFK2t8enBFcc3x+P7pEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NfVTV4WGxReEZLMnQ4ZW5C RmNjM3gtUDdwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wYQwDQYJKoZIhvcNAQELBQADggEBABwqb30EzP0hKBwjpT0AHRXzEuESR3TNupYQ /by5zbD9eogKZV3yWyUSBhUPPQEEVyiDG358nckxIICi9JTSDbRyjy8qJUxqVp4J uOGuG9ihhd6Hyn8zcD51dwM5GB59t53gVVoLh+KUwSJDvaXVYVFS8XqXnOBIkDLJ cdT2tvaWPf+VcGrcDdb6thSsz4WAbz+Lsim/NAXSDG8zRDuHYcAQ138gR/Erp4NH SA6v7MhoQYYKwrXrEq7UcUdxjESFq6TeyPLZ3o0tKdOAbxb2poZWTk3ok7XHO2G8 fsMs6hBfFLLXz5szErLvZrXBfzOVfhCuNQeLmX6h48OBZwfnSGM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:13 2025 by rpki-client