$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/spqkRC-Safr8ff7L9ZhkBMsT23M.roa File: spqkRC-Safr8ff7L9ZhkBMsT23M.roa (raw, json) Hash identifier: ZvVQMWCrCLgXOs9ibMV3Qsd3nSntB/uGseTtUTB9a8w= Subject key identifier: B2:9A:A4:44:2F:92:69:FA:FC:7D:FE:CB:F5:98:64:04:CB:13:DB:73 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3535 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/spqkRC-Safr8ff7L9ZhkBMsT23M.roa Signing time: Mon 10 Feb 2025 13:53:07 +0000 ROA not before: Mon 10 Feb 2025 13:53:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.193.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13621 (0x3535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B29AA4442F9269FAFC7DFECBF5986404CB13DB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:22:40:b5:6c:26:ac:e1:60:de:d5:df:40: f8:fb:a2:69:fe:09:75:fc:8a:3c:ef:27:10:e2:8d: 62:ce:0e:63:ec:8d:75:21:b6:f9:7e:2c:a1:8a:75: 72:bf:cc:ea:5f:11:95:8a:93:71:80:9c:b2:50:40: 55:0f:e7:1d:fa:d7:44:6d:35:67:11:59:c4:6e:1d: b0:f2:9e:6a:78:03:8b:20:49:b5:c9:1a:00:1a:81: 44:fa:f7:49:25:72:af:16:18:68:fb:b0:c4:1d:72: f9:2a:ca:8c:c9:a9:46:3e:67:75:6e:41:13:44:e9: 9d:94:c2:d0:29:99:67:7c:c7:70:e2:1d:e4:75:98: c4:93:08:a6:87:7a:0b:7e:2c:ad:df:56:da:e5:1e: b9:18:e3:0a:31:53:33:1e:2d:ff:99:2a:0f:0a:7b: c8:b4:3e:05:33:c9:f0:60:60:3f:c0:c0:1f:f4:0e: 1d:c3:20:c6:45:54:ac:57:96:59:06:e8:ac:6d:aa: 6d:cf:6e:44:63:a1:86:22:cd:3e:f0:60:df:8a:11: ed:17:9e:9d:92:21:37:59:40:66:cd:d6:16:48:bf: 89:d5:15:5f:df:06:b5:86:0e:15:f0:c5:df:eb:bc: a6:d8:de:f1:4f:66:6f:52:14:63:1a:46:be:a0:60: 23:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9A:A4:44:2F:92:69:FA:FC:7D:FE:CB:F5:98:64:04:CB:13:DB:73 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/spqkRC-Safr8ff7L9ZhkBMsT23M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.192.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:85:c3:30:16:03:7a:08:ee:b8:2d:b0:52:d6:7a:3a:57:a0: d0:dd:87:f8:92:91:34:04:a3:44:7d:0c:6f:1a:b3:95:53:69: 76:6c:d4:c1:cd:e7:7b:4c:f8:86:4d:68:b3:92:f7:b9:01:b5: 8b:c9:8b:7e:62:71:cc:48:5b:cb:f3:39:39:ba:e4:ea:2f:cc: 31:1f:2a:da:82:d5:e2:64:85:ea:32:1b:31:a6:55:46:d9:45: 48:0a:25:21:07:01:f2:c9:46:ce:e6:6f:2d:d2:22:84:86:bb: 5d:55:14:4c:86:74:fb:4f:cd:88:d4:6a:b5:f6:76:74:3a:a1: b6:63:16:1c:5c:74:9b:f0:d3:b2:b5:64:45:ed:e6:cb:d2:a7: 9c:e2:f8:7a:fe:71:b5:e4:e1:d2:83:e6:6f:3b:97:ce:2f:29: a0:61:20:8d:03:a1:1e:48:03:43:33:06:53:e7:a0:a6:c8:21: f0:1b:0e:b5:38:4a:a6:62:93:30:a9:e9:f6:44:18:a3:8c:d1: f3:db:4c:b6:6f:20:5c:7d:37:29:68:45:d5:9d:38:98:d9:7e: 76:15:a2:1b:c0:e2:42:b7:a4:f0:37:7b:df:62:9e:58:1b:f2: df:40:b3:3c:65:64:77:e2:7e:68:10:70:7c:3b:1c:7f:c5:47: d8:b5:5e:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNTUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyOUFBNDQ0MkY5MjY5 RkFGQzdERkVDQkY1OTg2NDA0Q0IxM0RCNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTHiJAtWwmrOFg3tXfQPj7omn+CXX8ijzvJxDijWLODmPsjXUh tvl+LKGKdXK/zOpfEZWKk3GAnLJQQFUP5x3610RtNWcRWcRuHbDynmp4A4sgSbXJ GgAagUT690klcq8WGGj7sMQdcvkqyozJqUY+Z3VuQRNE6Z2UwtApmWd8x3DiHeR1 mMSTCKaHegt+LK3fVtrlHrkY4woxUzMeLf+ZKg8Ke8i0PgUzyfBgYD/AwB/0Dh3D IMZFVKxXllkG6Kxtqm3PbkRjoYYizT7wYN+KEe0Xnp2SITdZQGbN1hZIv4nVFV/f BrWGDhXwxd/rvKbY3vFPZm9SFGMaRr6gYCNJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUspqkRC+Safr8ff7L9ZhkBMsT23MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NwcWtSQy1TYWZyOGZmN0w5 WmhrQk1zVDIzTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 wcAwDQYJKoZIhvcNAQELBQADggEBADyFwzAWA3oI7rgtsFLWejpXoNDdh/iSkTQE o0R9DG8as5VTaXZs1MHN53tM+IZNaLOS97kBtYvJi35iccxIW8vzOTm65OovzDEf KtqC1eJkheoyGzGmVUbZRUgKJSEHAfLJRs7mby3SIoSGu11VFEyGdPtPzYjUarX2 dnQ6obZjFhxcdJvw07K1ZEXt5svSp5zi+Hr+cbXk4dKD5m87l84vKaBhII0DoR5I A0MzBlPnoKbIIfAbDrU4SqZikzCp6fZEGKOM0fPbTLZvIFx9NyloRdWdOJjZfnYV ohvA4kK3pPA3e99inlgb8t9AszxlZHfifmgQcHw7HH/FR9i1Xoc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:52 2025 by rpki-client