$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eSQlBXDdQMDjJ4k-K-pgSLQ7LQ.roa File: 1eSQlBXDdQMDjJ4k-K-pgSLQ7LQ.roa (raw, json) Hash identifier: nsEUh4iFA+DfWVD0gfy7cFe5q+RDqtSmrBjD5THaP+A= Subject key identifier: D5:E4:90:94:15:C3:75:03:03:8C:9E:24:F8:AF:A9:81:22:D0:EC:B4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3379 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eSQlBXDdQMDjJ4k-K-pgSLQ7LQ.roa Signing time: Mon 10 Feb 2025 13:51:28 +0000 ROA not before: Mon 10 Feb 2025 13:51:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13177 (0x3379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D5E4909415C37503038C9E24F8AFA98122D0ECB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:76:3c:9d:21:b2:6e:19:e0:f7:39:aa:56:bf: 01:1c:21:0b:36:66:5a:07:c1:7b:c9:9b:ec:10:78: c2:30:4e:9e:ec:31:b3:be:4d:62:48:1d:ec:50:c7: 5f:dd:bb:50:74:96:88:98:17:82:90:85:be:7e:b9: 9e:08:2a:74:cc:2f:fc:07:c7:dd:37:b9:58:ab:53: 3c:a2:1d:58:bb:6f:f7:6a:ac:19:91:4f:e3:2f:95: 07:62:54:e1:46:49:14:3b:d4:7c:dd:cf:b9:14:e9: 3b:ab:d5:33:18:c0:db:09:3e:86:1a:aa:9d:bf:ef: b7:f6:79:b8:d8:4f:9b:e6:97:7c:93:1d:57:c1:ca: 16:a9:a5:91:ca:66:55:10:4a:3b:d8:54:35:ac:ff: f9:18:4c:06:e0:2b:d7:b9:d3:79:0e:50:95:cc:94: 7d:20:6d:ca:b9:16:29:ed:dc:e1:2a:81:72:10:8e: 5b:05:31:b7:2b:12:6e:b6:cb:1a:0b:2c:f3:fe:52: 48:3b:8a:df:c2:61:3a:fc:ed:41:d5:36:18:bb:ac: 96:e3:27:18:19:bf:2f:36:f9:dc:b4:e2:b8:a8:8c: 00:43:b9:24:a3:60:b2:dd:a8:2f:d3:81:ff:6b:03: a2:46:60:ea:6b:3c:74:02:a2:69:91:09:5d:51:ae: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E4:90:94:15:C3:75:03:03:8C:9E:24:F8:AF:A9:81:22:D0:EC:B4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eSQlBXDdQMDjJ4k-K-pgSLQ7LQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.178.0/24 Signature Algorithm: sha256WithRSAEncryption a2:83:17:15:4d:63:c3:be:88:12:38:54:05:98:cc:a5:af:ce: 31:76:b6:7b:69:d3:87:45:61:ac:3b:ac:ec:ec:a3:29:34:44: db:49:86:ad:1f:4a:1b:da:07:68:63:9f:f2:4a:7b:41:cb:37: 16:8a:f0:14:cc:81:6f:c6:bb:8d:41:f4:3d:0a:70:6c:90:04: 17:5c:5e:62:e1:65:d8:18:4a:10:52:b0:1a:80:12:68:2e:87: 6f:87:d5:e2:aa:ef:8b:15:7d:ea:c7:c9:d4:43:d0:f8:1a:e5: bd:17:38:b0:1c:9b:71:8c:ec:84:4b:a9:a7:76:c2:f3:18:7b: 16:6e:8e:26:c8:85:d9:61:a5:a5:7c:c0:1c:9b:0b:e2:a5:22: cd:af:f4:fd:7a:4d:aa:bc:03:f8:10:77:76:61:43:58:59:59: 40:be:c2:40:5c:43:5d:45:d3:ba:84:90:b9:1b:ff:b4:43:1e: 86:c2:43:19:15:8e:6b:c6:52:27:9f:e6:e9:07:17:85:46:d1: cb:67:93:0b:57:37:94:2c:0c:0c:77:4f:43:95:aa:73:bb:f6: 15:b3:c5:fa:2c:ca:83:54:ef:62:f3:fe:62:ee:ef:61:1a:0c: 7f:26:93:51:a0:29:ef:ba:e4:8a:2e:7e:8d:86:41:e5:9d:4c: 0c:d9:e1:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1RTQ5MDk0MTVDMzc1 MDMwMzhDOUUyNEY4QUZBOTgxMjJEMEVDQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDddjydIbJuGeD3OapWvwEcIQs2ZloHwXvJm+wQeMIwTp7sMbO+ TWJIHexQx1/du1B0loiYF4KQhb5+uZ4IKnTML/wHx903uVirUzyiHVi7b/dqrBmR T+MvlQdiVOFGSRQ71Hzdz7kU6Tur1TMYwNsJPoYaqp2/77f2ebjYT5vml3yTHVfB yhappZHKZlUQSjvYVDWs//kYTAbgK9e503kOUJXMlH0gbcq5Fint3OEqgXIQjlsF MbcrEm62yxoLLPP+Ukg7it/CYTr87UHVNhi7rJbjJxgZvy82+dy04riojABDuSSj YLLdqC/Tgf9rA6JGYOprPHQCommRCV1RrhLjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1eSQlBXDdQMDjJ4k+K+pgSLQ7LQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFlU1FsQlhEZFFNRGpKNGst Sy1wZ1NMUTdMUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6bIwDQYJKoZIhvcNAQELBQADggEBAKKDFxVNY8O+iBI4VAWYzKWvzjF2tntp04dF Yaw7rOzsoyk0RNtJhq0fShvaB2hjn/JKe0HLNxaK8BTMgW/Gu41B9D0KcGyQBBdc XmLhZdgYShBSsBqAEmguh2+H1eKq74sVferHydRD0Pga5b0XOLAcm3GM7IRLqad2 wvMYexZujibIhdlhpaV8wBybC+KlIs2v9P16Taq8A/gQd3ZhQ1hZWUC+wkBcQ11F 07qEkLkb/7RDHobCQxkVjmvGUief5ukHF4VG0ctnkwtXN5QsDAx3T0OVqnO79hWz xfosyoNU72Lz/mLu72EaDH8mk1GgKe+65Ioufo2GQeWdTAzZ4Vg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:45 2025 by rpki-client on console.sobornost.net