$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1-gQYNI8-lYWhd-rSqG33ZZhoUU.roa File: 1-gQYNI8-lYWhd-rSqG33ZZhoUU.roa (raw, json) Hash identifier: fLO/imCa2qwOAMXFF+i0ZfGmmq+O3CWFYQRWmt6ww+0= Subject key identifier: D7:E8:10:60:D2:3C:FA:56:16:85:DF:AB:4A:A1:B7:DD:96:61:A1:45 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33F6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1-gQYNI8-lYWhd-rSqG33ZZhoUU.roa Signing time: Mon 10 Feb 2025 13:51:56 +0000 ROA not before: Mon 10 Feb 2025 13:51:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13302 (0x33f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D7E81060D23CFA561685DFAB4AA1B7DD9661A145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:03:3b:06:4e:9e:8e:da:4c:e1:99:7c:e2: 08:1a:77:28:fd:3b:13:9b:c6:fb:0e:d0:2b:7d:7d: 80:ba:a0:d3:55:4b:78:9b:f3:4c:04:4f:d1:5a:28: fe:1e:2e:cc:29:bb:f9:1b:05:89:f3:8b:75:63:48: 22:2e:e7:83:13:be:1a:a2:85:ac:9d:a5:3d:82:f3: 34:60:77:df:21:a6:cd:d1:71:5c:6d:63:ab:ba:87: 54:7b:36:61:e6:93:06:eb:55:04:2a:cf:5e:57:31: e4:7a:69:bb:05:cf:26:39:fb:66:dd:b4:79:63:04: 73:ac:04:05:2f:9d:50:32:13:b6:13:04:73:6e:69: a5:70:43:37:90:6f:86:73:d6:83:64:dd:1a:02:78: ba:5d:b7:40:fd:3d:46:d1:57:c5:84:f7:13:dd:5c: 55:ba:0f:a0:13:07:28:6c:9f:10:59:ea:9c:63:bf: 5d:e1:74:04:b3:85:0f:4d:27:29:41:d8:db:37:5c: f8:29:d4:28:2f:c3:ad:21:22:34:bd:c3:dc:d9:54: fd:c4:0f:2c:54:4d:88:40:a8:f7:cd:0d:56:05:07: bf:9e:cd:8f:3d:f5:42:6f:75:65:ae:7f:0e:83:e4: f9:c9:75:be:33:4a:d6:50:50:fe:e0:20:64:20:b1: 35:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E8:10:60:D2:3C:FA:56:16:85:DF:AB:4A:A1:B7:DD:96:61:A1:45 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1-gQYNI8-lYWhd-rSqG33ZZhoUU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.40.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:78:0d:f9:7e:cd:52:ca:af:d3:71:52:8d:f0:b5:6e:7a:22: 49:87:b1:14:88:9c:a8:23:e7:80:ed:3f:41:29:c5:d5:d4:2c: bf:a5:d2:0d:d8:b0:03:39:ff:71:2d:88:89:cd:f2:91:2a:06: e5:d0:dc:51:12:7c:88:70:93:05:ae:66:83:80:ff:ea:c0:30: 9b:13:3d:cb:5c:64:e7:2f:71:46:40:0a:19:ba:2e:52:ba:24: 99:27:5e:4b:46:30:6b:4b:7a:9e:b6:d6:e7:62:ed:0d:97:04: 23:32:1f:cf:bb:b7:20:1d:24:f2:1b:91:ca:37:3a:27:9f:4b: e0:a3:c2:73:66:44:99:5c:7f:d8:60:6b:87:97:bc:e9:4c:dd: 2b:bc:e3:b4:71:20:ee:bd:f3:14:cd:cd:e1:bc:e1:a7:24:87: e8:6d:6a:86:60:1a:0c:1d:77:f9:1d:9b:ab:56:4d:64:06:0a: aa:a7:44:5a:5a:28:e2:c5:ec:29:23:b4:35:11:9e:2c:ae:e0: 77:30:0e:80:d4:35:8e:de:a8:ec:7a:06:51:77:e8:bf:28:47: 50:1e:9b:d2:15:7e:53:2b:c1:96:fb:51:7b:a1:b1:9d:22:dd: 18:61:f1:37:1c:9e:74:6f:19:d7:c4:6e:8c:e4:9c:88:d5:f6: 74:d5:63:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM/YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ3RTgxMDYwRDIzQ0ZB NTYxNjg1REZBQjRBQTFCN0REOTY2MUExNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEvgM7Bk6ejtpM4Zl84ggadyj9OxObxvsO0Ct9fYC6oNNVS3ib 80wET9FaKP4eLswpu/kbBYnzi3VjSCIu54MTvhqihaydpT2C8zRgd98hps3RcVxt Y6u6h1R7NmHmkwbrVQQqz15XMeR6absFzyY5+2bdtHljBHOsBAUvnVAyE7YTBHNu aaVwQzeQb4Zz1oNk3RoCeLpdt0D9PUbRV8WE9xPdXFW6D6ATByhsnxBZ6pxjv13h dASzhQ9NJylB2Ns3XPgp1Cgvw60hIjS9w9zZVP3EDyxUTYhAqPfNDVYFB7+ezY89 9UJvdWWufw6D5PnJdb4zStZQUP7gIGQgsTWnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1+gQYNI8+lYWhd+rSqG33ZZhoUUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzEtZ1FZTkk4LWxZV2hkLXJT cUczM1paaG9VVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wygwDQYJKoZIhvcNAQELBQADggEBAIt4Dfl+zVLKr9NxUo3wtW56IkmHsRSInKgj 54DtP0EpxdXULL+l0g3YsAM5/3EtiInN8pEqBuXQ3FESfIhwkwWuZoOA/+rAMJsT PctcZOcvcUZAChm6LlK6JJknXktGMGtLep621udi7Q2XBCMyH8+7tyAdJPIbkco3 OiefS+CjwnNmRJlcf9hga4eXvOlM3Su847RxIO698xTNzeG84ackh+htaoZgGgwd d/kdm6tWTWQGCqqnRFpaKOLF7CkjtDURniyu4HcwDoDUNY7eqOx6BlF36L8oR1Ae m9IVflMrwZb7UXuhsZ0i3Rhh8TccnnRvGdfEbozknIjV9nTVY3Y= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:45 2025 by rpki-client on console.sobornost.net