$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wszrqeU76EZPTEDB0YAGE5pmqk0.roa File: wszrqeU76EZPTEDB0YAGE5pmqk0.roa (raw, json) Hash identifier: cdcQ1AE/2pOPvffOAJjPqsSzLtdvrDyrg8hU8/NSXDk= Subject key identifier: C2:CC:EB:A9:E5:3B:E8:46:4F:4C:40:C1:D1:80:06:13:9A:66:AA:4D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3657 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wszrqeU76EZPTEDB0YAGE5pmqk0.roa Signing time: Mon 10 Feb 2025 13:54:14 +0000 ROA not before: Mon 10 Feb 2025 13:54:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13911 (0x3657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C2CCEBA9E53BE8464F4C40C1D18006139A66AA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:fd:65:40:e7:fc:b3:e7:47:43:ea:77:69: 7f:30:a8:d4:6b:35:5f:71:81:c6:0a:f5:da:45:6c: 12:62:a7:53:c5:b8:09:2f:e5:66:50:39:73:21:72: 42:28:48:00:72:83:0d:de:a1:61:0a:e2:ac:a9:e9: 36:ea:6b:62:38:23:e0:d0:28:00:31:31:b3:83:83: f8:62:e8:b1:0a:00:ef:ef:c6:2d:42:9f:f6:29:6e: 62:24:ee:4a:93:5a:f5:e4:1e:44:69:91:89:4e:38: 94:3c:17:57:6d:a3:9c:9e:5d:08:d5:16:bf:fd:1b: 08:ab:6f:99:e8:26:a2:0a:7a:62:a8:31:b2:de:f5: 45:7b:e5:92:73:e3:32:0a:24:99:d1:50:ab:9b:1e: a7:21:6b:ba:7e:e3:f7:53:dd:68:ba:f1:39:ee:9d: aa:5d:cf:0d:d2:86:9c:30:c2:72:fe:3b:7b:dc:33: d3:85:80:e1:c3:a1:28:c0:d1:4e:f1:33:31:0d:59: c8:28:09:32:28:1d:31:5d:0c:24:8b:b1:d4:55:6c: 9b:6d:19:a5:a8:96:d7:a2:a8:56:23:cd:b6:29:66: 1c:ac:cb:ec:b8:b3:0f:cf:61:43:c7:d1:2a:25:ba: 97:1c:c0:31:fa:88:63:fc:f4:4a:3a:fa:30:11:f9: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CC:EB:A9:E5:3B:E8:46:4F:4C:40:C1:D1:80:06:13:9A:66:AA:4D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wszrqeU76EZPTEDB0YAGE5pmqk0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:5a:2b:a4:d0:9c:4a:12:68:c4:09:47:48:da:0c:82:86:4c: 4b:30:fc:ce:5d:04:56:c0:01:7d:fc:58:dc:23:9b:21:bc:5e: 3f:bc:5d:74:4d:a3:5c:7f:08:19:c7:af:ba:b0:e0:77:ed:f4: 70:96:d4:ed:ad:bd:62:0c:e2:5b:f1:19:6d:2e:88:17:7b:1a: 38:89:b2:de:f3:fe:f5:fb:bb:cb:12:27:48:5e:c3:6b:fb:9a: 3d:95:22:78:3f:a1:55:20:cb:00:e6:99:83:f6:5b:45:6e:96: c6:18:b4:e4:54:ce:66:c5:47:e0:25:48:16:90:8e:fb:5f:78: 1e:2c:22:c6:52:85:4e:80:aa:f6:52:1f:71:2d:98:61:ab:7d: b4:8e:42:1f:80:f3:7e:ba:3f:33:b4:84:d9:bc:86:d1:fd:5c: 71:5b:7f:99:fb:ef:03:49:43:45:a3:7f:39:8f:e3:99:09:8d: c6:e4:18:77:fe:3d:e3:49:2e:c8:1a:4d:46:c2:e6:22:04:bf: 75:67:25:a8:c3:45:3a:ee:c8:e4:5f:da:b6:e5:0e:82:bc:bf: b8:fe:60:b8:77:b3:d8:de:ac:13:10:c1:ea:89:f7:b8:0d:9a: a7:e2:07:56:45:69:04:e7:57:c3:fa:68:76:73:3f:d8:6c:04: be:3c:16:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyQ0NFQkE5RTUzQkU4 NDY0RjRDNDBDMUQxODAwNjEzOUE2NkFBNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFmP1lQOf8s+dHQ+p3aX8wqNRrNV9xgcYK9dpFbBJip1PFuAkv 5WZQOXMhckIoSABygw3eoWEK4qyp6Tbqa2I4I+DQKAAxMbODg/hi6LEKAO/vxi1C n/YpbmIk7kqTWvXkHkRpkYlOOJQ8F1dto5yeXQjVFr/9Gwirb5noJqIKemKoMbLe 9UV75ZJz4zIKJJnRUKubHqcha7p+4/dT3Wi68Tnunapdzw3ShpwwwnL+O3vcM9OF gOHDoSjA0U7xMzENWcgoCTIoHTFdDCSLsdRVbJttGaWolteiqFYjzbYpZhysy+y4 sw/PYUPH0SolupccwDH6iGP89Eo6+jAR+XPzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwszrqeU76EZPTEDB0YAGE5pmqk0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dzenJxZVU3NkVaUFRFREIw WUFHRTVwbXFrMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpgwDQYJKoZIhvcNAQELBQADggEBAAtaK6TQnEoSaMQJR0jaDIKGTEsw/M5dBFbA AX38WNwjmyG8Xj+8XXRNo1x/CBnHr7qw4Hft9HCW1O2tvWIM4lvxGW0uiBd7GjiJ st7z/vX7u8sSJ0hew2v7mj2VIng/oVUgywDmmYP2W0VulsYYtORUzmbFR+AlSBaQ jvtfeB4sIsZShU6AqvZSH3EtmGGrfbSOQh+A8366PzO0hNm8htH9XHFbf5n77wNJ Q0WjfzmP45kJjcbkGHf+PeNJLsgaTUbC5iIEv3VnJajDRTruyORf2rblDoK8v7j+ YLh3s9jerBMQweqJ97gNmqfiB1ZFaQTnV8P6aHZzP9hsBL48FhE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:38 2025 by rpki-client