$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/za7T2OdltfwQ9rLxSYP-T0ioc64.roa File: za7T2OdltfwQ9rLxSYP-T0ioc64.roa (raw, json) Hash identifier: ZvdgQZc7LTzd4oudrh2x20wMKbnRFDUPFy3HF0dGm4s= Subject key identifier: CD:AE:D3:D8:E7:65:B5:FC:10:F6:B2:F1:49:83:FE:4F:48:A8:73:AE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35E0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/za7T2OdltfwQ9rLxSYP-T0ioc64.roa Signing time: Mon 10 Feb 2025 13:53:46 +0000 ROA not before: Mon 10 Feb 2025 13:53:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13792 (0x35e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CDAED3D8E765B5FC10F6B2F14983FE4F48A873AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:37:75:47:cd:fe:0d:f4:ff:c2:e9:0a:70: f9:e1:45:0c:33:b2:f0:5f:59:b5:38:42:71:ee:ad: dd:bd:bf:01:b9:64:63:4a:3f:a1:d0:dc:43:44:04: bd:a3:b8:bb:f9:31:c8:12:96:79:48:66:72:65:8c: e6:8a:66:42:e3:b1:03:f6:a1:85:ce:e0:58:9d:d5: 99:a2:ce:f8:41:c0:de:02:60:67:3c:4b:03:81:69: d4:94:f9:4c:5c:66:80:19:31:1f:98:76:d4:3c:e9: f3:4b:d7:27:c0:8c:1e:50:68:75:14:87:61:17:ef: 92:5d:00:57:fa:f3:05:55:7a:ce:5e:f1:a6:ca:44: 20:fb:78:fb:e6:cf:55:38:a4:5a:9f:c4:13:29:21: fb:cb:ec:1d:96:e3:2c:26:77:cf:2e:27:2f:e4:ff: 81:76:f1:80:9f:03:23:15:10:a3:65:d0:50:33:09: f0:00:31:f2:80:b8:83:a6:cc:0b:46:88:aa:12:40: 45:b9:ff:8f:7b:d2:38:d9:42:cf:b6:9f:e8:42:a2: 94:70:44:1b:ca:0d:5a:39:aa:c6:6a:bf:a8:5b:48: c2:e1:1c:b1:56:d9:e9:45:80:3b:9b:8e:1d:67:d6: e7:d6:43:ec:a2:39:af:e0:2c:e6:1f:b8:85:a0:f1: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AE:D3:D8:E7:65:B5:FC:10:F6:B2:F1:49:83:FE:4F:48:A8:73:AE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/za7T2OdltfwQ9rLxSYP-T0ioc64.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.112.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:a2:5c:f5:0e:88:83:17:dd:d0:e7:92:9e:93:bf:f6:66:11: 31:3a:22:5c:dd:41:29:55:f9:8a:97:59:db:03:4e:f6:77:14: 2a:59:de:74:cc:b3:81:19:e8:a4:cb:81:d2:70:0e:11:d4:c6: 8b:5f:34:21:4a:88:bf:b1:2a:48:64:7e:9a:3e:db:29:80:ef: 35:6c:0a:77:7c:99:92:8a:24:a6:56:08:79:7a:d0:12:74:5b: 5f:79:5e:7a:60:12:e4:d8:a1:12:99:91:07:f8:de:c5:ad:1d: 82:db:af:a3:59:5e:27:f7:7f:37:75:07:4f:c5:5f:31:f0:08: 4e:da:7e:bb:e0:82:b1:42:32:97:1f:0b:f7:16:65:e1:38:2c: ed:a5:f2:96:d7:dc:61:db:31:46:6c:03:a8:cd:de:c7:0c:dc: ab:0b:f1:ee:c4:0d:2d:50:41:20:6f:b9:0a:8f:67:81:15:99: c6:4f:09:23:36:73:79:db:66:82:de:ff:ac:0c:f6:57:ad:95: 47:01:cb:9b:88:39:b7:83:d7:81:73:4a:01:24:d4:7e:bc:a1: f8:93:76:9a:d6:29:db:1b:c2:02:5a:d7:25:c8:a7:dc:ff:81: c1:dc:19:b4:d4:c0:0c:00:ad:29:78:63:75:5d:2d:c3:6c:ee: 6c:ee:6c:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENEQUVEM0Q4RTc2NUI1 RkMxMEY2QjJGMTQ5ODNGRTRGNDhBODczQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeqTd1R83+DfT/wukKcPnhRQwzsvBfWbU4QnHurd29vwG5ZGNK P6HQ3ENEBL2juLv5McgSlnlIZnJljOaKZkLjsQP2oYXO4Fid1ZmizvhBwN4CYGc8 SwOBadSU+UxcZoAZMR+YdtQ86fNL1yfAjB5QaHUUh2EX75JdAFf68wVVes5e8abK RCD7ePvmz1U4pFqfxBMpIfvL7B2W4ywmd88uJy/k/4F28YCfAyMVEKNl0FAzCfAA MfKAuIOmzAtGiKoSQEW5/4970jjZQs+2n+hCopRwRBvKDVo5qsZqv6hbSMLhHLFW 2elFgDubjh1n1ufWQ+yiOa/gLOYfuIWg8QiVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUza7T2OdltfwQ9rLxSYP+T0ioc64wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3phN1QyT2RsdGZ3UTlyTHhT WVAtVDBpb2M2NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w3AwDQYJKoZIhvcNAQELBQADggEBADuiXPUOiIMX3dDnkp6Tv/ZmETE6IlzdQSlV +YqXWdsDTvZ3FCpZ3nTMs4EZ6KTLgdJwDhHUxotfNCFKiL+xKkhkfpo+2ymA7zVs Cnd8mZKKJKZWCHl60BJ0W195XnpgEuTYoRKZkQf43sWtHYLbr6NZXif3fzd1B0/F XzHwCE7afrvggrFCMpcfC/cWZeE4LO2l8pbX3GHbMUZsA6jN3scM3KsL8e7EDS1Q QSBvuQqPZ4EVmcZPCSM2c3nbZoLe/6wM9letlUcBy5uIObeD14FzSgEk1H68ofiT dprWKdsbwgJa1yXIp9z/gcHcGbTUwAwArSl4Y3VdLcNs7mzubNg= -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:21 2025 by rpki-client