$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xBTBUmgGocRcIziP8Uu-408Lkf0.roa File: xBTBUmgGocRcIziP8Uu-408Lkf0.roa (raw, json) Hash identifier: /fFggd8l9lQwaGcTphKkLQqU3HEcGK5ez/YldmLC/hg= Subject key identifier: C4:14:C1:52:68:06:A1:C4:5C:23:38:8F:F1:4B:BE:E3:4F:0B:91:FD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35BB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xBTBUmgGocRcIziP8Uu-408Lkf0.roa Signing time: Mon 10 Feb 2025 13:53:38 +0000 ROA not before: Mon 10 Feb 2025 13:53:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.193.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13755 (0x35bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C414C1526806A1C45C23388FF14BBEE34F0B91FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8b:f5:1d:78:0d:b0:28:8e:30:68:a4:6f:63: 0a:f5:6e:39:01:67:cb:93:79:56:2c:74:d9:ad:bd: 29:c1:6d:4b:67:90:3b:b6:5f:d4:2d:32:b6:3c:b8: 81:50:5b:1e:75:04:dc:aa:97:14:35:85:87:5b:b2: e4:6c:a5:8a:3a:37:f4:f6:b2:40:b6:e6:a9:0d:a0: 76:a9:f1:43:46:79:2f:28:5b:cb:ed:64:8c:c2:b1: a1:76:cb:3e:1b:32:a9:c3:05:6d:39:3d:e2:c3:b4: 21:fc:39:14:cf:ba:ec:4b:8b:b6:a8:e0:80:3e:0f: e6:69:45:f7:ba:27:3b:4b:27:a7:99:75:1a:c1:05: e4:61:38:7d:67:b2:5d:29:40:3a:24:d9:f1:fb:0c: 78:df:25:3b:03:be:ae:38:b4:90:bd:6a:4d:96:be: 0b:9b:fe:a7:b0:14:c7:a4:ea:15:af:e9:f6:7e:58: c6:c6:f6:6f:33:1d:fa:26:62:11:5c:fc:ef:26:20: 17:b1:7a:2b:0f:de:fd:b4:7b:0b:5a:f4:4d:29:86: 45:96:a7:5a:74:0b:b5:4d:c3:b5:2d:07:98:3f:2e: da:84:07:3d:ac:d6:ea:5c:c9:c8:07:49:23:d4:f7: 64:ba:83:ce:88:2f:52:fd:6b:07:78:91:08:be:53: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:14:C1:52:68:06:A1:C4:5C:23:38:8F:F1:4B:BE:E3:4F:0B:91:FD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xBTBUmgGocRcIziP8Uu-408Lkf0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.0.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:da:b3:e8:0c:29:50:3b:e3:a0:7d:c8:4c:7d:a5:f6:d7:98: d0:86:31:22:1a:70:9f:3e:4f:be:8a:c5:70:1c:4b:bb:53:2a: 9d:e9:7a:75:a4:36:00:a4:0f:ac:ce:d5:8a:5c:41:21:2c:4c: dd:d7:c7:99:cb:ec:cf:4c:6e:52:b5:96:41:0c:9c:eb:3e:b4: ab:9b:97:65:26:e9:b3:46:3b:e5:91:3c:f1:bc:7f:fb:30:ab: 56:1a:2a:11:58:a3:b2:8e:3a:88:7d:64:83:71:1c:36:8c:90: bf:de:72:9a:2f:c5:b8:7e:05:31:7c:f8:0f:b3:1f:cc:25:48: 2b:a8:d3:46:17:b5:a1:41:e9:01:5a:e6:2c:94:7b:b0:2f:35: c5:c0:b0:3b:60:99:56:92:25:62:7c:4d:66:75:e0:75:36:71: cf:bc:f0:7f:0f:80:12:db:57:9e:6e:da:e5:06:5e:18:a2:7a: c6:fb:58:f5:c2:b2:20:f4:af:ed:f8:6d:8b:0f:02:fd:6c:45: 99:e5:09:25:f6:07:22:15:3c:d8:8b:9a:5c:60:f9:fb:f6:7c: 39:26:75:d9:26:bc:31:fe:4d:bb:55:73:98:0c:fc:8d:00:5d: de:b8:0e:20:22:ad:03:64:d7:57:5a:16:bb:e5:20:d2:c1:88: 1e:76:7b:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0MTRDMTUyNjgwNkEx QzQ1QzIzMzg4RkYxNEJCRUUzNEYwQjkxRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWi/UdeA2wKI4waKRvYwr1bjkBZ8uTeVYsdNmtvSnBbUtnkDu2 X9QtMrY8uIFQWx51BNyqlxQ1hYdbsuRspYo6N/T2skC25qkNoHap8UNGeS8oW8vt ZIzCsaF2yz4bMqnDBW05PeLDtCH8ORTPuuxLi7ao4IA+D+ZpRfe6JztLJ6eZdRrB BeRhOH1nsl0pQDok2fH7DHjfJTsDvq44tJC9ak2Wvgub/qewFMek6hWv6fZ+WMbG 9m8zHfomYhFc/O8mIBexeisP3v20ewta9E0phkWWp1p0C7VNw7UtB5g/LtqEBz2s 1upcycgHSSPU92S6g86IL1L9awd4kQi+U/szAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxBTBUmgGocRcIziP8Uu+408Lkf0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hCVEJVbWdHb2NSY0l6aVA4 VXUtNDA4TGtmMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 wQAwDQYJKoZIhvcNAQELBQADggEBAC3as+gMKVA746B9yEx9pfbXmNCGMSIacJ8+ T76KxXAcS7tTKp3penWkNgCkD6zO1YpcQSEsTN3Xx5nL7M9MblK1lkEMnOs+tKub l2Um6bNGO+WRPPG8f/swq1YaKhFYo7KOOoh9ZINxHDaMkL/ecpovxbh+BTF8+A+z H8wlSCuo00YXtaFB6QFa5iyUe7AvNcXAsDtgmVaSJWJ8TWZ14HU2cc+88H8PgBLb V55u2uUGXhiiesb7WPXCsiD0r+34bYsPAv1sRZnlCSX2ByIVPNiLmlxg+fv2fDkm ddkmvDH+TbtVc5gM/I0AXd64DiAirQNk11daFrvlINLBiB52e+M= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:13 2025 by rpki-client