$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-LKpCtw7jujmTituVblEpRbGwkg.roa File: -LKpCtw7jujmTituVblEpRbGwkg.roa (raw, json) Hash identifier: Jh2rU7BaS6ZPZDgss3JqoNeKNn7E0s4mIiPxDyPCPOo= Subject key identifier: F8:B2:A9:0A:DC:3B:8E:E8:E6:4E:2B:6E:55:B9:44:A5:16:C6:C2:48 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35FA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-LKpCtw7jujmTituVblEpRbGwkg.roa Signing time: Mon 10 Feb 2025 13:53:52 +0000 ROA not before: Mon 10 Feb 2025 13:53:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13818 (0x35fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F8B2A90ADC3B8EE8E64E2B6E55B944A516C6C248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:91:00:3b:a5:72:80:bc:c1:be:11:b4:91: 2b:ec:7e:96:17:d2:2b:ed:3d:0c:ae:d8:d7:80:0d: a4:e4:bb:51:f2:84:b1:0b:a6:5f:74:ac:c8:52:58: e2:bc:7d:33:bf:1d:32:50:7b:2a:0c:16:c5:6f:47: c7:77:b9:16:81:ef:4e:7a:a5:74:f8:47:99:40:df: 9b:6a:e7:77:30:10:b0:ff:6f:4f:c3:33:a3:53:44: 39:d1:b1:92:1b:bd:7b:59:36:71:5c:e7:dc:97:29: a0:01:ef:03:db:c1:55:98:b8:56:66:c5:bc:af:2e: f0:92:eb:db:71:10:6d:4e:2e:c6:21:0c:70:d3:8a: 1f:c6:37:4f:7f:b5:46:3d:29:58:00:b5:65:b0:c8: c6:de:0f:09:43:c8:e8:f4:58:e7:e9:1b:4f:9e:93: ce:e8:1c:1b:ac:12:40:97:d2:35:f0:db:b7:82:d5: 0f:31:ad:80:59:39:0c:fc:07:f8:81:25:56:db:75: e3:b0:c2:73:f3:4f:e5:4e:10:41:8b:bd:e4:5c:ae: 5a:99:ed:8c:14:39:9b:bd:a8:e1:a4:2e:08:d9:7e: 9e:08:45:e8:ba:1a:1f:c5:3d:c3:29:80:ba:e0:7c: 85:f4:a6:58:2f:a4:77:2d:03:5b:56:c8:6f:e9:c3: e2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B2:A9:0A:DC:3B:8E:E8:E6:4E:2B:6E:55:B9:44:A5:16:C6:C2:48 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-LKpCtw7jujmTituVblEpRbGwkg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.60.0/22 Signature Algorithm: sha256WithRSAEncryption 90:23:8b:17:bb:9b:b8:13:2d:82:58:19:15:3f:77:f4:94:53: c1:0b:49:d7:ed:87:74:17:03:f1:a7:4a:16:ac:02:72:f6:a3: 20:2f:e2:f6:95:ad:fa:fe:79:ee:ae:fe:8a:ee:b9:98:1b:d5: cc:68:18:0d:3c:27:de:a1:4b:7f:3c:23:71:63:08:a8:8f:0a: 84:67:f0:9f:c4:b0:c2:02:da:63:85:df:f1:c6:ac:50:cc:2b: 83:e8:fe:83:ba:0b:5e:e7:b1:e6:c0:14:2e:3d:c5:36:88:12: a1:cc:81:7b:eb:4c:26:56:60:cd:27:a5:47:ed:95:56:c6:5f: 1e:50:32:dd:04:a0:2a:c4:32:c4:80:2b:80:c8:07:ed:56:eb: 22:cf:52:b1:48:8b:72:c7:b9:e8:99:4d:91:ef:ab:a8:09:0b: 42:46:c5:59:2b:21:3e:52:cd:9c:87:d3:75:34:d2:05:bd:5b: 47:b8:a1:85:68:e8:50:39:c5:a3:55:20:4c:2a:5a:e8:d6:13: 43:c1:b4:06:8a:e7:e0:7e:37:0a:f8:0b:92:8b:cb:b4:bf:fb: 19:9c:e2:25:de:3b:1a:17:49:f7:38:37:97:04:37:32:8f:1b: 2c:c2:a2:92:30:3e:2a:58:98:e6:94:05:df:64:5f:b0:14:9c: f1:f2:35:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNfowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY4QjJBOTBBREMzQjhF RThFNjRFMkI2RTU1Qjk0NEE1MTZDNkMyNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/FZEAO6VygLzBvhG0kSvsfpYX0ivtPQyu2NeADaTku1HyhLEL pl90rMhSWOK8fTO/HTJQeyoMFsVvR8d3uRaB7056pXT4R5lA35tq53cwELD/b0/D M6NTRDnRsZIbvXtZNnFc59yXKaAB7wPbwVWYuFZmxbyvLvCS69txEG1OLsYhDHDT ih/GN09/tUY9KVgAtWWwyMbeDwlDyOj0WOfpG0+ek87oHBusEkCX0jXw27eC1Q8x rYBZOQz8B/iBJVbbdeOwwnPzT+VOEEGLveRcrlqZ7YwUOZu9qOGkLgjZfp4IRei6 Gh/FPcMpgLrgfIX0plgvpHctA1tWyG/pw+JHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+LKpCtw7jujmTituVblEpRbGwkgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1MS3BDdHc3anVqbVRpdHVW YmxFcFJiR3drZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6TwwDQYJKoZIhvcNAQELBQADggEBAJAjixe7m7gTLYJYGRU/d/SUU8ELSdfth3QX A/GnShasAnL2oyAv4vaVrfr+ee6u/oruuZgb1cxoGA08J96hS388I3FjCKiPCoRn 8J/EsMIC2mOF3/HGrFDMK4Po/oO6C17nsebAFC49xTaIEqHMgXvrTCZWYM0npUft lVbGXx5QMt0EoCrEMsSAK4DIB+1W6yLPUrFIi3LHueiZTZHvq6gJC0JGxVkrIT5S zZyH03U00gW9W0e4oYVo6FA5xaNVIEwqWujWE0PBtAaK5+B+Nwr4C5KLy7S/+xmc 4iXeOxoXSfc4N5cENzKPGyzCopIwPipYmOaUBd9kX7AUnPHyNdA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net