$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AKkdgIevXOWNHJjNx9zxPHx3w4o.roa File: AKkdgIevXOWNHJjNx9zxPHx3w4o.roa (raw, json) Hash identifier: gdPrKKWzgAbqy/FiLrodYQ4Cz2D2EwDeFA4z2i2kErE= Subject key identifier: 00:A9:1D:80:87:AF:5C:E5:8D:1C:98:CD:C7:DC:F1:3C:7C:77:C3:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36A3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AKkdgIevXOWNHJjNx9zxPHx3w4o.roa Signing time: Mon 10 Feb 2025 13:54:31 +0000 ROA not before: Mon 10 Feb 2025 13:54:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13987 (0x36a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=00A91D8087AF5CE58D1C98CDC7DCF13C7C77C38A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:13:95:7a:34:83:63:25:46:7d:8a:12:1b: d9:7a:a7:bd:b8:9b:bd:7b:d7:19:8b:1b:10:8c:9c: 76:4a:9a:b7:be:53:a9:15:9a:0f:5e:de:17:a4:b5: eb:db:33:6c:a0:1d:b3:a3:5a:3d:0c:36:99:76:2b: 44:7b:8b:e0:a5:b0:01:2d:68:58:0a:fc:bb:a1:39: 79:60:5a:ab:67:6f:51:e2:18:83:bb:25:f3:bb:71: 49:33:56:2a:17:20:42:ef:47:4a:c7:80:ad:65:e0: d6:f4:f2:92:19:1d:a3:0d:48:9f:d0:b9:6c:1d:df: e9:79:99:8a:78:94:29:77:40:25:c4:8c:19:d3:79: 05:58:9a:5e:22:83:a0:72:62:6e:3c:89:89:c7:c5: 43:04:e0:ff:6e:a7:f2:da:30:70:f5:dd:e9:1b:1b: 1f:3e:ff:9f:cd:9c:71:1d:f3:7d:46:db:fc:2e:b7: 97:20:1e:32:7e:f8:e3:b5:f5:8a:5b:39:0a:98:e5: 0e:a3:95:48:fe:65:8d:56:f6:f0:d9:66:e5:f5:c4: ef:b4:b4:06:dd:60:6e:42:35:83:16:8c:3f:3b:2a: bd:06:f3:4d:2b:2f:3c:f2:5c:e8:f4:7b:13:cd:19: e3:00:dc:4c:d3:a0:4c:0d:bb:4b:4f:46:0e:b5:b1: 34:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A9:1D:80:87:AF:5C:E5:8D:1C:98:CD:C7:DC:F1:3C:7C:77:C3:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AKkdgIevXOWNHJjNx9zxPHx3w4o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.122.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:93:d6:5f:ae:99:9e:1f:05:2a:f8:49:9d:13:75:19:d7:5a: a3:82:84:19:95:50:9f:e4:bc:ba:ea:54:a2:de:97:5a:5b:cc: c1:c5:e7:ff:d6:a4:51:b6:20:ff:c1:6d:77:5d:fd:fd:bc:ff: 25:68:00:66:5e:f6:b0:97:3e:17:09:e6:f0:9c:d3:bb:0c:4e: 02:58:9d:39:38:a6:bc:5a:6c:57:26:17:c3:fc:40:13:29:f8: c0:82:54:da:40:f1:99:18:05:c8:f8:13:cc:78:e9:32:48:fb: e0:d5:0f:7b:5c:0a:07:ca:49:01:96:04:b7:07:58:bb:d2:e0: b4:bc:2d:13:30:9a:64:95:63:1d:57:00:f2:0f:7f:18:98:9d: a5:e8:ba:b1:be:9f:fb:1b:35:3e:85:cc:2f:b5:d6:22:6f:e1: 1e:09:ed:c8:aa:0b:ce:3c:6c:9d:b2:c4:ca:7f:69:31:bb:d9: d1:44:cc:03:ad:b3:bf:be:c6:cc:ad:44:df:e8:b7:0c:32:e1: 6a:51:c6:d3:c2:cc:ef:dd:f9:d7:cd:f7:51:2b:2b:66:7f:c1: e0:91:69:dc:0f:cf:a4:ed:1a:cb:66:03:fb:0a:76:df:2a:11: b0:ae:fd:1e:93:08:48:a6:45:a3:13:af:bf:c1:2f:9f:08:57: 8b:5a:81:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAwQTkxRDgwODdBRjVD RTU4RDFDOThDREM3RENGMTNDN0M3N0MzOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCshOVejSDYyVGfYoSG9l6p724m7171xmLGxCMnHZKmre+U6kV mg9e3hektevbM2ygHbOjWj0MNpl2K0R7i+ClsAEtaFgK/LuhOXlgWqtnb1HiGIO7 JfO7cUkzVioXIELvR0rHgK1l4Nb08pIZHaMNSJ/QuWwd3+l5mYp4lCl3QCXEjBnT eQVYml4ig6ByYm48iYnHxUME4P9up/LaMHD13ekbGx8+/5/NnHEd831G2/wut5cg HjJ++OO19YpbOQqY5Q6jlUj+ZY1W9vDZZuX1xO+0tAbdYG5CNYMWjD87Kr0G800r LzzyXOj0exPNGeMA3EzToEwNu0tPRg61sTQFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAKkdgIevXOWNHJjNx9zxPHx3w4owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FLa2RnSWV2WE9XTkhKak54 OXp4UEh4M3c0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THowDQYJKoZIhvcNAQELBQADggEBAGyT1l+umZ4fBSr4SZ0TdRnXWqOChBmVUJ/k vLrqVKLel1pbzMHF5//WpFG2IP/BbXdd/f28/yVoAGZe9rCXPhcJ5vCc07sMTgJY nTk4prxabFcmF8P8QBMp+MCCVNpA8ZkYBcj4E8x46TJI++DVD3tcCgfKSQGWBLcH WLvS4LS8LRMwmmSVYx1XAPIPfxiYnaXourG+n/sbNT6FzC+11iJv4R4J7ciqC848 bJ2yxMp/aTG72dFEzAOts7++xsytRN/otwwy4WpRxtPCzO/d+dfN91ErK2Z/weCR adwPz6TtGstmA/sKdt8qEbCu/R6TCEimRaMTr7/BL58IV4tagXs= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:46 2025 by rpki-client on console.sobornost.net