$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JT08bU4JgenTl_QlqPRGEqEdu9o.roa File: JT08bU4JgenTl_QlqPRGEqEdu9o.roa (raw, json) Hash identifier: EUlV9ML6Zm9hwfsAoUNJY7kaBh2pjaxVPF3DH2US12U= Subject key identifier: 25:3D:3C:6D:4E:09:81:E9:D3:97:F4:25:A8:F4:46:12:A1:1D:BB:DA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3693 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JT08bU4JgenTl_QlqPRGEqEdu9o.roa Signing time: Mon 10 Feb 2025 13:54:27 +0000 ROA not before: Mon 10 Feb 2025 13:54:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 12:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13971 (0x3693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=253D3C6D4E0981E9D397F425A8F44612A11DBBDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:13:b8:3a:04:e5:20:73:67:48:32:f2:8b: e7:60:4a:25:b9:cc:22:ae:4a:6c:ec:7f:7a:4d:c7: cd:13:fd:41:1c:99:4c:b6:6e:b3:a4:cb:e3:41:f9: d5:74:d2:cc:be:de:d5:2b:89:7a:35:f9:17:61:6f: 21:7e:c8:2e:d4:a3:02:c2:9c:b0:e5:0e:1f:e8:00: 17:8e:24:10:0d:ce:74:c9:93:03:7a:a0:de:d6:8b: 5e:81:1d:72:33:cb:41:8e:7f:7e:c2:8d:11:89:c8: 55:02:ee:22:62:6d:45:43:ba:8b:65:f6:ea:8d:67: 98:3d:cf:0e:1a:2d:7f:96:dc:4f:cc:2b:89:c8:6f: 56:e0:83:e4:9b:92:b4:7e:87:24:24:ff:e9:fa:6b: 36:61:66:2a:5e:c1:19:c4:c4:f3:36:ab:87:f6:a1: 0e:95:1e:9d:b1:c1:ab:88:40:f5:1d:70:34:c9:ee: f7:cd:30:63:8b:0b:19:9d:23:67:54:6e:a0:13:b9: 18:ab:f1:de:cd:a4:83:51:34:96:85:1d:21:0d:49: 75:64:da:61:2c:7d:66:3b:42:9e:6c:9b:23:14:a2: 80:00:b3:5c:a9:02:b7:2f:5e:4a:1b:81:d4:04:0e: a1:b3:b4:ac:4a:06:b4:63:d5:e6:fb:51:cb:89:6b: b2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3D:3C:6D:4E:09:81:E9:D3:97:F4:25:A8:F4:46:12:A1:1D:BB:DA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JT08bU4JgenTl_QlqPRGEqEdu9o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.68.0/22 Signature Algorithm: sha256WithRSAEncryption 04:9e:0f:ee:df:6e:37:0a:78:e5:e9:85:58:df:0e:5b:97:47: e6:78:ca:f6:4b:2b:c5:15:b0:fc:4d:63:86:01:c6:4d:ab:58: 4a:e7:42:95:cf:03:8c:43:54:71:54:bd:e9:8f:90:15:01:72: 13:92:d8:60:ca:12:98:61:05:f0:20:a3:80:72:f4:74:34:86: 57:e9:8a:40:6f:ff:4f:e1:27:95:68:09:d0:76:1f:1f:80:61: ab:65:f8:da:d6:14:15:1a:21:2f:7b:4f:fe:7a:6c:c3:ac:3f: 4a:73:75:8e:3a:4c:d6:9d:4f:13:21:11:8f:e0:21:a0:bc:8c: a3:07:07:bf:89:9b:aa:d1:a9:dc:ef:c0:85:87:4e:23:52:ff: 2f:b6:7f:a2:c9:31:91:da:7e:6c:d9:23:d4:5a:17:0b:a1:69: d1:90:f8:e8:8a:6c:37:9a:c5:e7:a9:53:c8:1d:24:c4:fd:f2: 7d:d9:da:e9:ad:89:8e:48:26:34:54:d8:60:c7:4c:8f:74:15: d0:8f:01:b7:26:50:57:18:5f:db:a1:e0:d0:18:11:8f:9e:55: 57:39:1e:88:4d:15:d3:23:9d:b3:41:0c:8e:5f:b1:d6:de:d3: 13:20:63:dc:c9:c1:7f:0c:1a:56:28:ac:8a:1b:f1:cf:fb:60: 6b:33:8c:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI1M0QzQzZENEUwOTgx RTlEMzk3RjQyNUE4RjQ0NjEyQTExREJCREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqURO4OgTlIHNnSDLyi+dgSiW5zCKuSmzsf3pNx80T/UEcmUy2 brOky+NB+dV00sy+3tUriXo1+RdhbyF+yC7UowLCnLDlDh/oABeOJBANznTJkwN6 oN7Wi16BHXIzy0GOf37CjRGJyFUC7iJibUVDuotl9uqNZ5g9zw4aLX+W3E/MK4nI b1bgg+SbkrR+hyQk/+n6azZhZipewRnExPM2q4f2oQ6VHp2xwauIQPUdcDTJ7vfN MGOLCxmdI2dUbqATuRir8d7NpINRNJaFHSENSXVk2mEsfWY7Qp5smyMUooAAs1yp ArcvXkobgdQEDqGztKxKBrRj1eb7UcuJa7KzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJT08bU4JgenTl/QlqPRGEqEdu9owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pUMDhiVTRKZ2VuVGxfUWxx UFJHRXFFZHU5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wkQwDQYJKoZIhvcNAQELBQADggEBAASeD+7fbjcKeOXphVjfDluXR+Z4yvZLK8UV sPxNY4YBxk2rWErnQpXPA4xDVHFUvemPkBUBchOS2GDKEphhBfAgo4By9HQ0hlfp ikBv/0/hJ5VoCdB2Hx+AYatl+NrWFBUaIS97T/56bMOsP0pzdY46TNadTxMhEY/g IaC8jKMHB7+Jm6rRqdzvwIWHTiNS/y+2f6LJMZHafmzZI9RaFwuhadGQ+OiKbDea xeepU8gdJMT98n3Z2umtiY5IJjRU2GDHTI90FdCPAbcmUFcYX9uh4NAYEY+eVVc5 HohNFdMjnbNBDI5fsdbe0xMgY9zJwX8MGlYorIob8c/7YGszjGw= -----END CERTIFICATE-----Generated at Tue May 6 08:30:53 2025 by rpki-client