$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/73WQJdCzLfD9OFALIJzF5iCuH84.roa File: 73WQJdCzLfD9OFALIJzF5iCuH84.roa (raw, json) Hash identifier: l3QxahSpWFLHW3AGcdFRc7CGtqzbTmN6WyfR5pPES3M= Subject key identifier: EF:75:90:25:D0:B3:2D:F0:FD:38:50:0B:20:9C:C5:E6:20:AE:1F:CE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3454 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/73WQJdCzLfD9OFALIJzF5iCuH84.roa Signing time: Mon 10 Feb 2025 13:52:16 +0000 ROA not before: Mon 10 Feb 2025 13:52:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13396 (0x3454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EF759025D0B32DF0FD38500B209CC5E620AE1FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:e8:47:76:93:dc:2c:4f:13:98:82:57:ec: 9d:06:44:2c:dd:a9:92:fc:0e:87:c1:ee:1e:60:8e: 34:96:c7:16:ec:14:fb:e9:66:a3:6e:65:42:a4:50: 8c:03:10:97:1b:cf:a6:79:1e:46:58:3d:ad:d9:ac: 03:e3:6f:7f:c4:e5:1c:c1:98:da:c1:ad:0f:cf:36: 1e:3b:22:8d:75:c3:ea:cf:ed:58:15:a2:d2:14:9a: 0c:ff:35:90:7e:8f:14:71:40:60:cc:d0:d5:db:bd: a0:64:b1:55:23:5c:45:cc:e0:e9:69:44:2a:6b:58: ae:44:1d:b4:65:c6:07:d6:67:0a:b9:d0:0f:25:17: a7:4d:7b:d5:61:c7:e4:dc:49:fa:ea:ab:4c:43:16: ad:62:0e:56:84:35:fa:ed:7b:24:c2:15:b9:45:97: 6a:12:92:5f:91:77:55:1c:1f:3b:f0:37:b0:85:76: f1:01:82:16:e7:ce:1f:d0:97:f6:9f:0d:5b:2f:fa: 75:59:12:4a:34:fe:74:be:d3:0d:30:8e:bf:79:c5: 92:a3:a8:0e:c3:6f:e1:7e:41:85:cc:27:c3:b0:4d: af:2a:d7:42:02:c3:c5:4a:8a:bb:6e:b8:92:4c:a1: 22:49:51:7f:8d:57:fd:63:bd:38:9d:6f:45:37:31: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:75:90:25:D0:B3:2D:F0:FD:38:50:0B:20:9C:C5:E6:20:AE:1F:CE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/73WQJdCzLfD9OFALIJzF5iCuH84.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.176.0/21 Signature Algorithm: sha256WithRSAEncryption 81:a7:2f:5c:d6:f4:77:00:81:b7:06:94:98:6e:d0:6e:65:c2: a7:8b:2a:a0:97:47:7e:ec:88:29:4c:1a:d5:a5:12:6e:12:74: 56:01:5e:67:89:93:47:73:78:00:ff:a2:80:1f:68:29:22:60: 71:dc:4b:39:8a:cd:64:b2:bc:27:3f:33:c4:3c:d4:40:f5:eb: eb:6a:75:ef:42:4e:cc:18:e5:8d:fc:08:f1:f1:f2:7d:cd:1b: 7b:f0:dc:f2:ee:93:3d:e5:9d:3c:5d:76:b9:6b:ee:f0:0d:5d: 79:4d:3d:3b:6c:a1:a3:75:9c:f2:40:aa:45:a6:bb:20:a7:84: 3e:3b:a2:2e:d4:3f:ba:d1:bc:d8:fa:af:54:95:82:8e:a3:18: 68:ce:df:5a:2a:3c:7c:8a:18:01:65:46:83:c8:08:ab:6e:e3: 51:10:ef:56:ee:7a:bc:12:12:e3:34:5b:48:3e:3d:10:39:7d: 9b:76:32:26:9a:87:4e:2c:70:8d:c9:9d:6f:f8:b5:31:ea:73: d5:ae:14:46:85:96:08:ee:14:60:31:a9:ae:de:ff:41:5f:e1: 4c:60:71:83:14:1b:b7:13:be:7a:8d:f4:07:2c:f6:cc:39:10: 76:14:b1:46:c3:25:e8:16:89:ce:6a:fb:e0:af:ce:74:6d:43: fb:67:a6:8e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVGNzU5MDI1RDBCMzJE RjBGRDM4NTAwQjIwOUNDNUU2MjBBRTFGQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoF+hHdpPcLE8TmIJX7J0GRCzdqZL8DofB7h5gjjSWxxbsFPvp ZqNuZUKkUIwDEJcbz6Z5HkZYPa3ZrAPjb3/E5RzBmNrBrQ/PNh47Io11w+rP7VgV otIUmgz/NZB+jxRxQGDM0NXbvaBksVUjXEXM4OlpRCprWK5EHbRlxgfWZwq50A8l F6dNe9Vhx+TcSfrqq0xDFq1iDlaENfrteyTCFblFl2oSkl+Rd1UcHzvwN7CFdvEB ghbnzh/Ql/afDVsv+nVZEko0/nS+0w0wjr95xZKjqA7Db+F+QYXMJ8OwTa8q10IC w8VKirtuuJJMoSJJUX+NV/1jvTidb0U3MXejAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU73WQJdCzLfD9OFALIJzF5iCuH84wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzczV1FKZEN6TGZEOU9GQUxJ SnpGNWlDdUg4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wrAwDQYJKoZIhvcNAQELBQADggEBAIGnL1zW9HcAgbcGlJhu0G5lwqeLKqCXR37s iClMGtWlEm4SdFYBXmeJk0dzeAD/ooAfaCkiYHHcSzmKzWSyvCc/M8Q81ED16+tq de9CTswY5Y38CPHx8n3NG3vw3PLukz3lnTxddrlr7vANXXlNPTtsoaN1nPJAqkWm uyCnhD47oi7UP7rRvNj6r1SVgo6jGGjO31oqPHyKGAFlRoPICKtu41EQ71buerwS EuM0W0g+PRA5fZt2Miaah04scI3JnW/4tTHqc9WuFEaFlgjuFGAxqa7e/0Ff4Uxg cYMUG7cTvnqN9Acs9sw5EHYUsUbDJegWic5q++CvznRtQ/tnpo4= -----END CERTIFICATE-----Generated at Wed May 7 23:54:53 2025 by rpki-client