$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ConFkz5zLsS2Ox6SgRACzDSTMdw.roa File: ConFkz5zLsS2Ox6SgRACzDSTMdw.roa (raw, json) Hash identifier: vuMcTF/MOZKdkvI+CT5V8futIwF6prre307x4YH4QUQ= Subject key identifier: 0A:89:C5:93:3E:73:2E:C4:B6:3B:1E:92:81:10:02:CC:34:93:31:DC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36AD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ConFkz5zLsS2Ox6SgRACzDSTMdw.roa Signing time: Mon 10 Feb 2025 13:54:34 +0000 ROA not before: Mon 10 Feb 2025 13:54:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13997 (0x36ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0A89C5933E732EC4B63B1E92811002CC349331DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:60:39:d6:89:f2:d9:63:c6:bb:57:23:3e:6d: ea:a0:59:e6:ca:86:c1:8d:07:f2:ae:ac:f6:11:b6: 1f:e0:a4:f8:22:5e:e5:09:61:29:d0:f4:b8:32:8e: b9:ad:61:5b:35:8d:b9:58:dc:c3:e4:ee:97:4c:34: 93:85:62:3b:15:d0:a2:80:c7:41:96:f3:57:eb:4c: 87:60:ea:a9:73:e8:38:cb:57:9b:3f:25:da:86:ba: ad:de:ae:15:d2:06:43:85:98:b0:46:74:fc:69:9f: 07:7d:ba:74:d1:1f:4c:d3:bd:f6:98:e5:39:58:52: 21:15:32:60:39:54:c1:51:22:16:d7:03:95:45:a8: 99:b6:cc:fd:82:2c:f6:65:e2:6d:16:bf:86:bc:c9: e8:fc:22:57:ab:e8:ae:ef:ad:a7:c5:82:61:48:8e: d4:be:db:7e:e4:aa:73:2e:b7:94:ef:82:2b:ec:f6: 42:ef:bf:fd:62:31:67:a8:33:5a:12:ec:78:b3:d6: 98:38:df:39:6c:a5:52:60:27:57:d5:e9:91:0c:26: 3e:f5:74:38:4c:22:05:5c:79:a5:bb:f6:b5:05:01: 41:94:85:08:f4:50:92:77:a5:29:84:a2:ce:1c:6b: 61:63:86:44:9d:8e:4d:50:2f:79:05:44:b1:fd:b6: a8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:89:C5:93:3E:73:2E:C4:B6:3B:1E:92:81:10:02:CC:34:93:31:DC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ConFkz5zLsS2Ox6SgRACzDSTMdw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.112.0/21 Signature Algorithm: sha256WithRSAEncryption 60:20:b1:3b:36:26:e9:d9:17:3e:b8:da:48:63:a7:3c:ad:f8: 1d:25:63:fc:00:6f:57:77:58:61:fe:79:96:00:6a:7b:8f:cc: 05:11:ff:12:46:cb:ee:a8:d3:79:0a:54:b9:a8:ca:75:95:6e: d0:dd:58:64:09:27:5c:fa:16:6c:48:fd:68:c6:43:97:3f:67: 48:da:b7:c9:06:67:45:2e:4e:b2:b6:35:c0:13:d4:be:b2:54: 07:a4:71:99:c3:da:a7:b6:82:b2:ed:6e:c7:91:50:59:e9:f8: 08:29:ac:f8:ee:06:fd:c1:61:fb:c8:e0:86:0b:67:c0:51:3c: 98:e3:ef:fc:1a:51:63:f0:a7:93:a2:9e:eb:cf:91:b8:d5:2f: e3:3c:c0:39:19:3e:8b:f5:29:d2:46:ca:25:05:5c:e7:5d:37: 1d:03:fc:72:9e:5f:22:65:69:05:cc:e9:a6:b4:11:4e:cc:49: 34:6e:ea:5e:44:6c:b7:8d:b5:0c:3b:3f:d2:10:f3:35:4b:f7: b7:bd:52:20:4a:52:b5:2a:4b:12:ab:87:9d:d7:74:e0:5f:a2: ae:0a:0f:69:07:51:95:d5:e5:3c:99:10:29:52:8f:e0:45:40: 76:e1:dc:7a:29:31:e0:09:e8:e1:dd:31:52:a0:aa:a1:4d:c1: 20:4e:c0:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBODlDNTkzM0U3MzJF QzRCNjNCMUU5MjgxMTAwMkNDMzQ5MzMxREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpYDnWifLZY8a7VyM+beqgWebKhsGNB/KurPYRth/gpPgiXuUJ YSnQ9LgyjrmtYVs1jblY3MPk7pdMNJOFYjsV0KKAx0GW81frTIdg6qlz6DjLV5s/ JdqGuq3erhXSBkOFmLBGdPxpnwd9unTRH0zTvfaY5TlYUiEVMmA5VMFRIhbXA5VF qJm2zP2CLPZl4m0Wv4a8yej8Iler6K7vrafFgmFIjtS+237kqnMut5Tvgivs9kLv v/1iMWeoM1oS7Hiz1pg43zlspVJgJ1fV6ZEMJj71dDhMIgVceaW79rUFAUGUhQj0 UJJ3pSmEos4ca2FjhkSdjk1QL3kFRLH9tqi3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUConFkz5zLsS2Ox6SgRACzDSTMdwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NvbkZrejV6THNTMk94NlNn UkFDekRTVE1kdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0 sXAwDQYJKoZIhvcNAQELBQADggEBAGAgsTs2JunZFz642khjpzyt+B0lY/wAb1d3 WGH+eZYAanuPzAUR/xJGy+6o03kKVLmoynWVbtDdWGQJJ1z6FmxI/WjGQ5c/Z0ja t8kGZ0UuTrK2NcAT1L6yVAekcZnD2qe2grLtbseRUFnp+AgprPjuBv3BYfvI4IYL Z8BRPJjj7/waUWPwp5OinuvPkbjVL+M8wDkZPov1KdJGyiUFXOddNx0D/HKeXyJl aQXM6aa0EU7MSTRu6l5EbLeNtQw7P9IQ8zVL97e9UiBKUrUqSxKrh53XdOBfoq4K D2kHUZXV5TyZEClSj+BFQHbh3HopMeAJ6OHdMVKgqqFNwSBOwCA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:46 2025 by rpki-client on console.sobornost.net