$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Gk9o0iHoWTDA2S1FrHINovSWnk.roa File: 1Gk9o0iHoWTDA2S1FrHINovSWnk.roa (raw, json) Hash identifier: 58WuwamK60zg7RqJAcJXaWY27B+nxNY94KcPOZK/eV8= Subject key identifier: D4:69:3D:A3:48:87:A1:64:C3:03:64:B5:16:B1:C8:36:8B:D2:5A:79 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 349A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Gk9o0iHoWTDA2S1FrHINovSWnk.roa Signing time: Mon 10 Feb 2025 13:52:32 +0000 ROA not before: Mon 10 Feb 2025 13:52:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13466 (0x349a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D4693DA34887A164C30364B516B1C8368BD25A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:e4:db:00:fd:bc:e1:78:e8:4c:80:f8:7e: a0:eb:c4:b2:cb:34:2d:ea:32:d4:ef:9f:67:0a:79: 22:9b:4d:37:66:ad:3a:63:8f:a7:e5:1f:5d:91:de: 2a:b9:8f:78:07:80:21:f0:09:b7:2f:a9:56:8e:88: c9:cd:a5:51:c5:ed:5c:ed:eb:00:5f:f4:3b:fb:84: 4b:cc:84:dd:83:2c:e5:5e:81:ff:36:0c:00:93:8d: 99:d7:4f:e9:e2:a3:58:bf:fe:a5:6f:da:7d:70:70: 56:80:93:85:fe:6c:75:46:31:cf:c9:d5:fa:e4:6b: 0f:28:a5:ee:f0:1c:ab:2e:e7:d5:1e:8d:ba:9f:72: 50:40:fb:74:f4:98:37:6b:5b:e6:b5:c3:e6:93:99: 3a:b2:e9:db:b1:14:27:cf:bc:29:20:f0:ae:f3:4c: ac:e4:75:dc:9d:e4:51:87:5e:29:0d:3f:da:53:a8: f5:f1:ce:16:85:66:52:16:9c:e9:22:39:b3:f7:23: 6c:e2:fa:d1:96:56:7e:e5:47:cc:cc:70:f5:1e:eb: 77:7c:78:b5:fd:ca:03:d4:c2:98:eb:c5:34:11:ad: cf:27:c8:ec:7e:40:b8:e9:d9:29:9c:ee:ed:c0:07: a9:9b:5a:5c:54:59:a7:73:a3:67:da:3f:08:8e:de: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:69:3D:A3:48:87:A1:64:C3:03:64:B5:16:B1:C8:36:8B:D2:5A:79 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Gk9o0iHoWTDA2S1FrHINovSWnk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.72.0/22 Signature Algorithm: sha256WithRSAEncryption 11:b4:67:02:98:1f:1d:6e:af:93:a5:20:77:0a:b9:a0:ac:23: 17:08:89:f3:4e:5f:3f:25:dd:5b:aa:77:39:85:a8:cf:b3:60: 61:fe:65:bf:0e:99:79:85:07:99:5d:1c:15:51:61:8f:e2:7d: b4:50:b0:a5:d2:4d:42:bd:44:95:bf:87:f7:b4:45:dc:42:24: b7:a5:ad:d9:44:ec:14:2a:09:34:66:b4:db:5c:79:55:07:ab: 11:ef:14:d3:d1:d1:1f:73:40:4b:ef:3a:61:f2:03:26:7a:42: 3b:67:7d:fc:81:5d:55:35:1d:3a:12:cb:6f:c7:32:d7:4e:9e: 89:5b:f4:1d:2c:55:3c:a0:7b:b4:e0:02:ae:60:0a:da:d8:20: 3f:82:53:66:7b:3c:e8:40:45:44:c2:5c:e5:34:c5:64:38:f4: 0d:53:cb:44:9e:78:5a:84:95:cd:0f:99:8a:31:3b:d7:17:c5: ef:60:c4:b1:c8:a7:f5:11:f9:e2:16:d9:96:c2:3c:cf:92:51: 2e:d7:42:2c:40:f1:7c:79:72:df:20:ce:60:84:ba:a3:1d:8c: 14:21:ba:a1:00:0e:b6:6b:ae:80:e7:cf:28:15:1e:1f:4c:dd: 91:4c:cf:2c:4d:e7:ba:b1:e4:da:07:c9:af:2b:61:14:89:4f: 87:bb:f2:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ0NjkzREEzNDg4N0Ex NjRDMzAzNjRCNTE2QjFDODM2OEJEMjVBNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1yOTbAP284XjoTID4fqDrxLLLNC3qMtTvn2cKeSKbTTdmrTpj j6flH12R3iq5j3gHgCHwCbcvqVaOiMnNpVHF7Vzt6wBf9Dv7hEvMhN2DLOVegf82 DACTjZnXT+nio1i//qVv2n1wcFaAk4X+bHVGMc/J1frkaw8ope7wHKsu59Uejbqf clBA+3T0mDdrW+a1w+aTmTqy6duxFCfPvCkg8K7zTKzkddyd5FGHXikNP9pTqPXx zhaFZlIWnOkiObP3I2zi+tGWVn7lR8zMcPUe63d8eLX9ygPUwpjrxTQRrc8nyOx+ QLjp2Smc7u3AB6mbWlxUWadzo2faPwiO3u4rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1Gk9o0iHoWTDA2S1FrHINovSWnkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFHazlvMGlIb1dUREEyUzFG ckhJTm92U1duay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wkgwDQYJKoZIhvcNAQELBQADggEBABG0ZwKYHx1ur5OlIHcKuaCsIxcIifNOXz8l 3VuqdzmFqM+zYGH+Zb8OmXmFB5ldHBVRYY/ifbRQsKXSTUK9RJW/h/e0RdxCJLel rdlE7BQqCTRmtNtceVUHqxHvFNPR0R9zQEvvOmHyAyZ6QjtnffyBXVU1HToSy2/H MtdOnolb9B0sVTyge7TgAq5gCtrYID+CU2Z7POhARUTCXOU0xWQ49A1Ty0SeeFqE lc0PmYoxO9cXxe9gxLHIp/UR+eIW2ZbCPM+SUS7XQixA8Xx5ct8gzmCEuqMdjBQh uqEADrZrroDnzygVHh9M3ZFMzyxN57qx5NoHya8rYRSJT4e78ss= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:45 2025 by rpki-client on console.sobornost.net