$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v4yQjQcz_lJjobunwWeRISHtzLU.roa File: v4yQjQcz_lJjobunwWeRISHtzLU.roa (raw, json) Hash identifier: x/4lOUmU2dm3tbOZzQu9x3xM5OahoQXAS4PYGY8RTJ0= Subject key identifier: BF:8C:90:8D:07:33:FE:52:63:A1:BB:A7:C1:67:91:21:21:ED:CC:B5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33AA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v4yQjQcz_lJjobunwWeRISHtzLU.roa Signing time: Mon 10 Feb 2025 13:51:39 +0000 ROA not before: Mon 10 Feb 2025 13:51:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13226 (0x33aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BF8C908D0733FE5263A1BBA7C167912121EDCCB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:b9:83:e8:4f:14:5e:6c:b2:99:ec:68:f5: 2c:57:2f:88:e8:ee:d0:5b:97:66:6d:90:43:6d:e6: 0f:97:ad:21:cc:99:e3:50:7b:67:1f:ba:1d:94:6f: 75:75:16:f2:97:cf:52:ff:6a:f5:2f:9f:59:7c:f5: c2:4f:64:44:c1:89:38:7a:2f:46:6d:59:9b:d4:fd: 65:92:e5:94:c2:22:e0:71:f9:92:e4:35:8a:bc:64: ef:7f:5a:df:72:ff:66:bd:2f:bb:0d:e1:83:e2:00: 3b:8f:10:17:b4:9f:8e:0b:6e:b4:4e:76:63:cc:56: 79:aa:a7:37:44:07:03:c1:96:da:d7:b9:13:11:c6: ee:af:f1:2b:78:59:d3:a8:fa:7c:3d:42:54:1f:08: 25:a6:25:69:bc:b9:4e:8d:23:b3:09:d1:2a:e6:9b: cc:5e:9a:70:ee:e2:47:c6:14:45:67:ee:f4:ce:e0: 5f:6b:e3:74:a7:b8:75:f4:b9:f1:1a:99:21:01:02: d2:db:44:53:da:43:e6:03:e8:07:fb:39:07:66:92: 1f:1d:33:4c:5f:a2:b1:4c:1f:b2:9b:ef:fc:90:32: 48:9f:93:16:0c:8b:77:b4:b9:b4:5b:3a:2a:a3:40: d1:cd:23:36:30:c9:b4:d0:2b:39:82:0d:a4:ba:01: 52:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8C:90:8D:07:33:FE:52:63:A1:BB:A7:C1:67:91:21:21:ED:CC:B5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v4yQjQcz_lJjobunwWeRISHtzLU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.128.0/21 Signature Algorithm: sha256WithRSAEncryption 16:8d:7f:d6:56:b7:66:bb:2f:c6:1e:18:f7:28:df:d7:37:41: 82:d8:65:dc:2c:6e:d6:a8:1d:7e:a8:75:7b:ca:47:52:6f:d0: 80:28:46:39:c5:7d:af:a7:ea:57:84:08:98:a4:e3:94:f5:8d: b8:da:74:53:5a:64:0a:01:a7:7b:e5:61:40:b1:fc:b5:38:45: d4:d9:ac:e9:6c:88:1d:af:a3:cc:d1:f9:cc:0e:33:2a:8a:f1: 23:94:c2:b4:e1:ef:52:89:9e:27:7a:4a:7e:71:f3:bf:6b:e6: 77:c8:cb:c0:8f:31:3a:ac:0a:ba:cb:b2:ed:45:08:25:89:87: 40:eb:ce:d3:99:45:53:a4:83:af:ea:91:88:bb:a5:2d:f0:3c: d1:fd:8d:c0:9a:72:b8:7b:88:69:60:05:38:ea:83:17:e0:37: 6a:45:2a:04:b2:f0:b1:73:5a:11:79:77:d7:c6:27:aa:6b:88: de:7d:8d:2b:b8:ad:f5:54:d8:17:ef:70:95:6f:93:12:e2:11: e1:63:a1:31:8d:8d:ab:4d:56:6c:b6:99:09:97:c4:74:c2:ad: 8a:31:ae:ac:3c:ab:98:3e:b9:4b:41:64:42:f2:70:2f:ce:da: d5:1c:58:db:fb:d8:a9:d9:6e:96:26:76:50:ee:a6:2f:62:96: 75:a0:81:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGOEM5MDhEMDczM0ZF NTI2M0ExQkJBN0MxNjc5MTIxMjFFRENDQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIibmD6E8UXmyymexo9SxXL4jo7tBbl2ZtkENt5g+XrSHMmeNQ e2cfuh2Ub3V1FvKXz1L/avUvn1l89cJPZETBiTh6L0ZtWZvU/WWS5ZTCIuBx+ZLk NYq8ZO9/Wt9y/2a9L7sN4YPiADuPEBe0n44LbrROdmPMVnmqpzdEBwPBltrXuRMR xu6v8St4WdOo+nw9QlQfCCWmJWm8uU6NI7MJ0Srmm8xemnDu4kfGFEVn7vTO4F9r 43SnuHX0ufEamSEBAtLbRFPaQ+YD6Af7OQdmkh8dM0xforFMH7Kb7/yQMkifkxYM i3e0ubRbOiqjQNHNIzYwybTQKzmCDaS6AVJFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUv4yQjQcz/lJjobunwWeRISHtzLUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Y0eVFqUWN6X2xKam9idW53 V2VSSVNIdHpMVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 woAwDQYJKoZIhvcNAQELBQADggEBABaNf9ZWt2a7L8YeGPco39c3QYLYZdwsbtao HX6odXvKR1Jv0IAoRjnFfa+n6leECJik45T1jbjadFNaZAoBp3vlYUCx/LU4RdTZ rOlsiB2vo8zR+cwOMyqK8SOUwrTh71KJnid6Sn5x879r5nfIy8CPMTqsCrrLsu1F CCWJh0DrztOZRVOkg6/qkYi7pS3wPNH9jcCacrh7iGlgBTjqgxfgN2pFKgSy8LFz WhF5d9fGJ6priN59jSu4rfVU2BfvcJVvkxLiEeFjoTGNjatNVmy2mQmXxHTCrYox rqw8q5g+uUtBZELycC/O2tUcWNv72KnZbpYmdlDupi9ilnWggSI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:37 2025 by rpki-client