$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wxvp5OoVQJpr8Huuy4gAwYF4uOo.roa File: wxvp5OoVQJpr8Huuy4gAwYF4uOo.roa (raw, json) Hash identifier: FpfLIx5l/J9KWGjVkxAG3bMUGL70zEpAe6xuTAoYp58= Subject key identifier: C3:1B:E9:E4:EA:15:40:9A:6B:F0:7B:AE:CB:88:00:C1:81:78:B8:EA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3638 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wxvp5OoVQJpr8Huuy4gAwYF4uOo.roa Signing time: Mon 10 Feb 2025 13:54:06 +0000 ROA not before: Mon 10 Feb 2025 13:54:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13880 (0x3638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C31BE9E4EA15409A6BF07BAECB8800C18178B8EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:04:84:b8:07:a3:e8:28:bd:2e:1b:d0:71: 75:1e:f2:ee:ee:e2:0d:a7:12:3a:c1:9c:58:54:8f: fa:ee:50:53:1e:f7:eb:b5:32:f6:32:3e:c5:7c:1e: 09:56:d5:30:ca:f7:b3:20:cf:77:b7:d2:46:3e:39: 62:ec:f7:19:83:84:66:e3:77:73:6f:72:fc:65:f8: 19:58:08:2a:24:8a:cc:d6:6a:99:34:f9:9d:3d:1e: 36:9b:c5:60:6c:94:68:6d:7b:12:59:3c:df:ce:eb: 3b:db:3a:69:96:d5:ef:1c:3c:a6:eb:f2:5a:f0:d4: d4:99:b6:9b:9d:f6:86:ce:be:35:da:6f:4c:de:f2: 94:54:3c:fc:c1:71:90:c7:43:0b:9a:80:b9:00:59: cc:d0:68:0f:42:85:3d:fe:72:8f:bf:d0:7d:0e:96: 3e:4d:17:0e:d5:ad:d5:be:60:e6:56:c8:77:f0:3f: f3:93:a6:40:27:55:d8:e2:c6:d9:41:ee:03:12:e2: 68:ca:e9:cc:1b:91:00:bc:72:a9:7a:c3:21:cd:4b: ae:9d:9e:af:23:43:ea:d3:b2:ee:31:ec:05:e9:8a: b2:d9:46:62:85:bd:43:5b:3c:48:c3:f9:71:92:02: 17:1e:30:b1:6e:cd:2c:15:13:0d:fb:78:05:96:4b: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1B:E9:E4:EA:15:40:9A:6B:F0:7B:AE:CB:88:00:C1:81:78:B8:EA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wxvp5OoVQJpr8Huuy4gAwYF4uOo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.16.0/22 Signature Algorithm: sha256WithRSAEncryption 99:aa:12:c8:64:81:b6:31:63:2c:aa:be:38:89:15:86:6c:1c: d2:5c:e8:e8:6e:30:7f:e1:99:fc:0e:5c:4f:83:76:78:a4:da: 3a:5a:6b:13:d6:74:de:03:92:92:c1:ce:96:fa:9a:53:40:2b: 91:9e:6a:99:b6:c8:9b:63:42:0a:ca:01:5d:b1:6e:96:c4:57: 21:7a:ef:9b:f6:72:a2:3e:07:55:7b:71:b1:64:e1:70:64:41: 08:7a:2b:02:f7:a7:7f:c1:6d:de:df:aa:07:5c:bf:44:2f:d1: 2f:b3:c9:fc:c0:29:1c:a9:20:67:5a:9f:d2:e9:9a:54:db:3e: 5b:de:d4:4d:af:cf:f9:e6:19:2a:2b:e8:65:b4:12:1c:7f:99: d9:9e:89:a9:a5:22:61:b2:eb:b4:50:1b:ec:45:76:f8:a7:d9: c7:6c:03:aa:3f:44:ab:16:fb:20:13:db:36:4c:83:84:fb:50: 87:9f:0e:2e:b7:4d:60:ca:d5:09:8a:f7:20:f8:e8:f3:bf:6d: 60:c5:b9:bf:c5:64:da:f7:27:5a:c8:c6:88:2d:9b:8d:b4:5c: 1e:85:51:76:20:ec:3a:03:fd:97:95:fe:88:93:b7:d6:fe:8d: af:31:4f:91:48:1f:1b:69:a4:75:9a:93:86:24:07:fb:2b:09: e9:12:c2:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMzMUJFOUU0RUExNTQw OUE2QkYwN0JBRUNCODgwMEMxODE3OEI4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4VwSEuAej6Ci9LhvQcXUe8u7u4g2nEjrBnFhUj/ruUFMe9+u1 MvYyPsV8HglW1TDK97Mgz3e30kY+OWLs9xmDhGbjd3Nvcvxl+BlYCCokiszWapk0 +Z09HjabxWBslGhtexJZPN/O6zvbOmmW1e8cPKbr8lrw1NSZtpud9obOvjXab0ze 8pRUPPzBcZDHQwuagLkAWczQaA9ChT3+co+/0H0Olj5NFw7VrdW+YOZWyHfwP/OT pkAnVdjixtlB7gMS4mjK6cwbkQC8cql6wyHNS66dnq8jQ+rTsu4x7AXpirLZRmKF vUNbPEjD+XGSAhceMLFuzSwVEw37eAWWS6IbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwxvp5OoVQJpr8Huuy4gAwYF4uOowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3d4dnA1T29WUUpwcjhIdXV5 NGdBd1lGNHVPby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wxAwDQYJKoZIhvcNAQELBQADggEBAJmqEshkgbYxYyyqvjiJFYZsHNJc6OhuMH/h mfwOXE+Ddnik2jpaaxPWdN4DkpLBzpb6mlNAK5Geapm2yJtjQgrKAV2xbpbEVyF6 75v2cqI+B1V7cbFk4XBkQQh6KwL3p3/Bbd7fqgdcv0Qv0S+zyfzAKRypIGdan9Lp mlTbPlve1E2vz/nmGSor6GW0Ehx/mdmeiamlImGy67RQG+xFdvin2cdsA6o/RKsW +yAT2zZMg4T7UIefDi63TWDK1QmK9yD46PO/bWDFub/FZNr3J1rIxogtm420XB6F UXYg7DoD/ZeV/oiTt9b+ja8xT5FIHxtppHWak4YkB/srCekSws0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:19 2025 by rpki-client