$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tJ6sxdIruZlmBQhBhZpVjWp2whs.roa File: tJ6sxdIruZlmBQhBhZpVjWp2whs.roa (raw, json) Hash identifier: zTq1n9zFXQyxx31ccUuiz35u0CdadN5676irXhFE0yE= Subject key identifier: B4:9E:AC:C5:D2:2B:B9:99:66:05:08:41:85:9A:55:8D:6A:76:C2:1B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36D6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tJ6sxdIruZlmBQhBhZpVjWp2whs.roa Signing time: Mon 10 Feb 2025 13:54:44 +0000 ROA not before: Mon 10 Feb 2025 13:54:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14038 (0x36d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B49EACC5D22BB99966050841859A558D6A76C21B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:ed:ab:7e:24:5b:c3:a6:98:8f:05:3c:82: 60:b1:40:20:0e:c5:fb:f5:56:07:0b:9f:78:ed:53: 29:30:9d:69:be:85:e4:42:e4:44:a0:02:d3:e8:a2: d5:68:38:bb:8d:3a:4c:65:3c:72:fc:ad:31:e8:50: 51:13:92:a1:06:48:29:9f:81:d9:29:b2:0c:91:59: 50:4c:48:10:29:87:d8:ac:8e:3b:9f:4d:44:17:f5: 74:89:fc:7d:80:9f:4b:b7:b9:55:30:aa:4a:02:28: 0f:e3:7f:b9:b9:27:8c:05:1d:d4:71:68:29:95:72: 44:dc:38:a0:e8:90:68:1b:82:b9:2c:2f:cc:34:8c: b0:47:68:a8:b3:c6:4e:79:8c:f6:85:0f:78:17:e9: 12:b1:b9:8d:33:4c:cd:68:d5:2b:40:d1:9f:9a:e3: 26:93:33:a1:c4:57:7f:30:4a:14:bb:b3:df:78:60: 5b:68:71:ab:a8:0e:16:d9:8d:03:4d:93:9a:ed:8d: 6e:53:f9:f9:cd:83:54:9b:e1:22:3f:6d:13:8e:40: 7c:1b:ea:f6:d8:10:aa:0b:23:35:ab:88:4b:0d:8f: c5:4c:02:a1:d6:62:dc:77:bc:4b:c4:e1:eb:05:fa: 60:1f:ad:59:ab:86:72:e3:fb:a4:c4:ec:cb:c7:75: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9E:AC:C5:D2:2B:B9:99:66:05:08:41:85:9A:55:8D:6A:76:C2:1B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tJ6sxdIruZlmBQhBhZpVjWp2whs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.109.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:ec:59:7f:68:4f:47:40:71:46:1a:7b:9e:85:8e:82:da:40: 59:05:fc:23:03:50:10:40:5e:a6:4e:ec:9c:b8:96:c3:dd:20: d1:6d:a4:e5:3a:3f:45:6b:11:b7:11:c9:3d:0c:79:dd:9a:ec: 91:91:03:5c:9e:16:e1:86:85:5f:cd:e5:7b:4e:22:5e:77:3a: 04:70:9f:63:17:be:34:a4:f4:cc:68:2a:fd:a2:fe:0d:3d:09: 0f:72:af:21:38:11:4d:d2:bf:39:42:4a:ba:e2:27:51:51:8f: 89:ea:b0:78:0c:25:14:0b:61:95:12:2b:e8:b4:cb:3e:16:42: b9:ec:93:b2:07:51:f0:8d:7f:7c:63:7b:b3:5d:52:1b:a9:81: 09:90:f9:99:bb:91:9e:d6:2a:a4:5e:5d:d9:a0:a1:31:e6:2f: f3:96:43:48:fd:31:2a:5f:68:7b:51:2b:ec:09:4c:b8:49:b1: 36:ba:8d:6b:1a:97:bd:e7:5b:0f:2c:1f:91:6d:68:8a:4b:62: ce:d7:b4:b1:0d:f5:6b:52:8e:45:41:21:04:25:38:13:8f:9f: 15:ab:79:34:ad:f2:7c:27:ef:4c:89:d8:fa:b4:26:dd:9f:5a: d3:8a:8c:43:78:8c:85:98:6f:a1:75:a2:30:71:99:76:2f:ff: bc:44:df:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0OUVBQ0M1RDIyQkI5 OTk2NjA1MDg0MTg1OUE1NThENkE3NkMyMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyPO2rfiRbw6aYjwU8gmCxQCAOxfv1VgcLn3jtUykwnWm+heRC 5ESgAtPootVoOLuNOkxlPHL8rTHoUFETkqEGSCmfgdkpsgyRWVBMSBAph9isjjuf TUQX9XSJ/H2An0u3uVUwqkoCKA/jf7m5J4wFHdRxaCmVckTcOKDokGgbgrksL8w0 jLBHaKizxk55jPaFD3gX6RKxuY0zTM1o1StA0Z+a4yaTM6HEV38wShS7s994YFto cauoDhbZjQNNk5rtjW5T+fnNg1Sb4SI/bROOQHwb6vbYEKoLIzWriEsNj8VMAqHW Ytx3vEvE4esF+mAfrVmrhnLj+6TE7MvHdUz3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtJ6sxdIruZlmBQhBhZpVjWp2whswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RKNnN4ZElydVpsbUJRaEJo WnBWaldwMndocy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wW0wDQYJKoZIhvcNAQELBQADggEBAEvsWX9oT0dAcUYae56FjoLaQFkF/CMDUBBA XqZO7Jy4lsPdINFtpOU6P0VrEbcRyT0Med2a7JGRA1yeFuGGhV/N5XtOIl53OgRw n2MXvjSk9MxoKv2i/g09CQ9yryE4EU3SvzlCSrriJ1FRj4nqsHgMJRQLYZUSK+i0 yz4WQrnsk7IHUfCNf3xje7NdUhupgQmQ+Zm7kZ7WKqReXdmgoTHmL/OWQ0j9MSpf aHtRK+wJTLhJsTa6jWsal73nWw8sH5FtaIpLYs7XtLEN9WtSjkVBIQQlOBOPnxWr eTSt8nwn70yJ2Pq0Jt2fWtOKjEN4jIWYb6F1ojBxmXYv/7xE3yA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:32 2025 by rpki-client