$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/31-wXhNPgCRdr8vX2TgAJztcSpg.roa File: 31-wXhNPgCRdr8vX2TgAJztcSpg.roa (raw, json) Hash identifier: UUjuXiwLNuM27EEvgMF0Pe54w23HyuBfu/9lhCuGTfY= Subject key identifier: DF:5F:B0:5E:13:4F:80:24:5D:AF:CB:D7:D9:38:00:27:3B:5C:4A:98 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35AC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/31-wXhNPgCRdr8vX2TgAJztcSpg.roa Signing time: Mon 10 Feb 2025 13:53:35 +0000 ROA not before: Mon 10 Feb 2025 13:53:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13740 (0x35ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DF5FB05E134F80245DAFCBD7D93800273B5C4A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fe:33:7a:e0:27:e6:3b:1b:4c:7c:01:c9:48: b6:b3:cc:3c:8e:61:b7:27:12:fd:56:da:87:20:60: 4b:fe:be:7c:4f:ac:91:04:a0:21:fd:bc:c1:6c:71: dc:4f:85:7d:e9:8d:26:3a:6b:74:43:b4:e2:12:cb: 72:04:1c:a6:03:83:eb:2d:d5:67:9b:72:1a:ac:57: 03:a6:82:6e:db:3c:15:66:39:8f:06:aa:dc:c2:3b: 5d:ab:76:b8:e2:31:00:0c:55:03:c6:31:b7:76:1d: 3e:6c:e2:81:d6:3e:6d:88:ea:49:50:9c:0e:54:ea: 46:4d:24:43:c8:b9:2c:46:3d:f7:64:1e:d7:be:35: 7b:9a:1c:3d:c4:fc:f4:a3:74:86:15:32:68:52:4c: 86:12:1c:08:c3:45:22:f5:f1:c3:31:89:40:83:30: 3e:4c:36:f5:83:bd:aa:b8:b6:80:1c:a0:88:d3:fd: 5d:5c:e4:38:f3:3f:08:bf:ed:23:ec:b6:ed:fe:f0: 59:c6:80:0a:45:3a:ec:34:a7:40:82:83:fe:51:c6: 7d:ac:c9:a4:3c:02:db:83:64:68:f8:b8:82:5d:26: c7:30:4d:b0:fd:88:e2:a9:62:b3:8a:67:fa:60:d2: c4:14:58:68:96:2f:1e:a2:6a:29:8b:70:f9:e3:ff: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5F:B0:5E:13:4F:80:24:5D:AF:CB:D7:D9:38:00:27:3B:5C:4A:98 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/31-wXhNPgCRdr8vX2TgAJztcSpg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.232.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:23:21:d7:c4:85:29:00:09:0b:f3:04:98:d7:8e:ba:d4:c7: 2e:36:3d:9c:ac:46:69:33:d7:03:61:fa:4a:8e:86:2a:78:73: df:21:cf:e2:35:22:4d:09:24:ac:78:37:ab:94:92:37:24:d0: 82:60:a6:2d:aa:c3:d6:f3:44:d0:6f:d0:09:60:4b:5e:0a:e3: 6e:89:94:b6:35:92:f0:85:2d:80:ed:1d:8d:ea:d6:79:d5:5f: 99:a1:f0:49:29:65:f2:90:44:b7:bb:e7:ea:4a:cb:f8:e3:b8: 3e:bb:96:de:1c:0f:0b:da:c5:04:0a:b7:c3:01:6c:04:5b:9b: 4e:b7:9e:79:90:18:8a:1d:86:a3:0f:75:1c:c7:dc:2a:95:c6: 1e:75:e6:02:0c:85:12:78:b8:23:db:fb:30:1f:ad:7c:69:a3: 95:1d:26:58:9e:e5:9b:3e:00:74:eb:c2:39:b8:76:8a:8f:dc: a6:8b:d5:92:0f:cd:f8:7b:ea:f5:c9:4e:80:bd:01:d4:61:7f: f4:bf:4c:b0:94:03:4c:af:d3:c9:56:34:e1:4c:0f:3c:b1:b8: 65:43:65:d3:64:df:4b:07:9d:ba:7d:51:05:5e:ac:7e:ed:f1: 5a:b5:be:16:04:ec:73:e1:c9:c3:bb:68:f5:34:74:37:6c:ef: 31:49:ee:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGNUZCMDVFMTM0Rjgw MjQ1REFGQ0JEN0Q5MzgwMDI3M0I1QzRBOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl/jN64CfmOxtMfAHJSLazzDyOYbcnEv1W2ocgYEv+vnxPrJEE oCH9vMFscdxPhX3pjSY6a3RDtOISy3IEHKYDg+st1WebchqsVwOmgm7bPBVmOY8G qtzCO12rdrjiMQAMVQPGMbd2HT5s4oHWPm2I6klQnA5U6kZNJEPIuSxGPfdkHte+ NXuaHD3E/PSjdIYVMmhSTIYSHAjDRSL18cMxiUCDMD5MNvWDvaq4toAcoIjT/V1c 5DjzPwi/7SPstu3+8FnGgApFOuw0p0CCg/5Rxn2syaQ8AtuDZGj4uIJdJscwTbD9 iOKpYrOKZ/pg0sQUWGiWLx6iaimLcPnj/6n9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU31+wXhNPgCRdr8vX2TgAJztcSpgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzMxLXdYaE5QZ0NSZHI4dlgy VGdBSnp0Y1NwZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wugwDQYJKoZIhvcNAQELBQADggEBAE4jIdfEhSkACQvzBJjXjrrUxy42PZysRmkz 1wNh+kqOhip4c98hz+I1Ik0JJKx4N6uUkjck0IJgpi2qw9bzRNBv0AlgS14K426J lLY1kvCFLYDtHY3q1nnVX5mh8EkpZfKQRLe75+pKy/jjuD67lt4cDwvaxQQKt8MB bARbm063nnmQGIodhqMPdRzH3CqVxh515gIMhRJ4uCPb+zAfrXxpo5UdJlie5Zs+ AHTrwjm4doqP3KaL1ZIPzfh76vXJToC9AdRhf/S/TLCUA0yv08lWNOFMDzyxuGVD ZdNk30sHnbp9UQVerH7t8Vq1vhYE7HPhycO7aPU0dDds7zFJ7vw= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:45 2025 by rpki-client on console.sobornost.net