$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7NHDBSNlshOgsHMvQWkdgR4izU.roa File: E7NHDBSNlshOgsHMvQWkdgR4izU.roa (raw, json) Hash identifier: 7H06BYrYsFbtf47kNQBenleZNs5pBx88EtYeczdJwxo= Subject key identifier: 13:B3:47:0C:14:8D:96:C8:4E:82:C1:CC:BD:05:A4:76:04:78:8B:35 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35AA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7NHDBSNlshOgsHMvQWkdgR4izU.roa Signing time: Mon 10 Feb 2025 13:53:34 +0000 ROA not before: Mon 10 Feb 2025 13:53:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13738 (0x35aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=13B3470C148D96C84E82C1CCBD05A47604788B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:2d:50:a2:99:c8:6c:b6:6f:d7:fe:0b:b8: 58:8a:44:7f:e2:fa:ba:40:65:27:55:f6:14:a1:f8: 1e:70:4e:7b:fd:6e:db:6a:d1:65:ad:2f:b5:27:0c: fb:68:e4:66:ff:91:c6:86:1f:f8:24:00:92:41:54: 06:d7:f3:a6:53:f2:0a:0e:3b:bd:f4:6c:7e:ef:fc: 71:54:a8:ca:62:42:36:9b:12:40:e4:9c:67:7f:30: d4:4c:69:0e:b1:74:d6:09:26:05:37:73:a6:b8:38: 61:6b:79:d3:1b:e5:32:4b:9e:10:aa:10:bf:16:26: 9c:83:3b:f9:fb:aa:89:b4:86:40:32:a1:7e:4b:43: e9:56:38:a8:e0:06:5f:df:7d:44:2f:1d:a9:b8:42: 87:62:d5:ec:db:ab:69:7a:1a:a8:72:14:0f:22:ed: f8:ee:d8:ee:97:fa:e1:d6:26:5b:26:b2:48:70:21: 4e:3f:07:e3:83:b1:3e:35:77:00:b3:dc:62:59:02: 4c:56:ca:52:60:d0:cd:38:cf:99:ef:e8:66:66:94: a6:2e:32:9d:1b:c0:52:81:7d:21:8a:3d:b5:13:ca: 37:a3:2e:a1:d8:ca:5b:cc:fc:a5:5f:89:02:3f:e2: 8a:25:91:df:13:d9:24:74:37:83:7e:9a:2a:a7:65: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B3:47:0C:14:8D:96:C8:4E:82:C1:CC:BD:05:A4:76:04:78:8B:35 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7NHDBSNlshOgsHMvQWkdgR4izU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.224.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:2f:27:ae:d2:ab:6b:39:da:32:b8:e2:67:a6:b0:29:aa:76: b8:2a:4a:af:f6:97:bd:d4:53:7c:9a:08:07:40:ba:a4:c2:63: 5c:fe:f3:20:c1:c8:74:c9:33:95:4d:66:f7:fa:6c:43:fd:15: 7d:43:0c:76:d7:c9:93:f3:5d:98:e4:06:87:b5:7f:8e:ee:eb: da:75:2c:55:78:c2:e0:36:5e:b3:4e:b6:91:d1:e4:ce:43:58: d8:05:83:39:2b:6b:79:8d:25:d6:e3:a5:92:eb:6a:8f:31:1a: 54:57:3a:bc:c8:d0:e2:12:0c:26:ac:86:f6:bd:99:0c:f7:8b: 99:29:5b:8a:55:40:08:0f:55:71:c4:00:06:75:d2:a6:c9:aa: 7e:b9:fd:ed:7d:a6:81:a8:e7:3b:b6:88:a1:39:fe:c4:99:26: f8:94:45:9e:2d:af:34:60:78:3e:d7:9d:2f:1b:4e:8f:c7:3b: 86:72:63:94:11:e6:13:ed:96:c2:34:50:04:c3:ef:85:8a:ce: 2b:25:56:4f:5a:f7:1d:ac:7a:e5:e8:79:0e:0b:3d:2a:4c:eb: bf:e2:b8:da:d3:4c:10:d5:4a:ca:88:b1:d5:f2:2b:e5:41:f4: 99:4d:89:a1:74:25:2a:40:fa:4f:f4:e9:b3:85:09:e4:ab:9d: 8a:74:7a:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzQjM0NzBDMTQ4RDk2 Qzg0RTgyQzFDQ0JEMDVBNDc2MDQ3ODhCMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmSS1QopnIbLZv1/4LuFiKRH/i+rpAZSdV9hSh+B5wTnv9bttq 0WWtL7UnDPto5Gb/kcaGH/gkAJJBVAbX86ZT8goOO730bH7v/HFUqMpiQjabEkDk nGd/MNRMaQ6xdNYJJgU3c6a4OGFredMb5TJLnhCqEL8WJpyDO/n7qom0hkAyoX5L Q+lWOKjgBl/ffUQvHam4Qodi1ezbq2l6GqhyFA8i7fju2O6X+uHWJlsmskhwIU4/ B+ODsT41dwCz3GJZAkxWylJg0M04z5nv6GZmlKYuMp0bwFKBfSGKPbUTyjejLqHY ylvM/KVfiQI/4oolkd8T2SR0N4N+miqnZdJpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUE7NHDBSNlshOgsHMvQWkdgR4izUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0U3TkhEQlNObHNoT2dzSE12 UVdrZGdSNGl6VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sOAwDQYJKoZIhvcNAQELBQADggEBAF0vJ67Sq2s52jK44memsCmqdrgqSq/2l73U U3yaCAdAuqTCY1z+8yDByHTJM5VNZvf6bEP9FX1DDHbXyZPzXZjkBoe1f47u69p1 LFV4wuA2XrNOtpHR5M5DWNgFgzkra3mNJdbjpZLrao8xGlRXOrzI0OISDCashva9 mQz3i5kpW4pVQAgPVXHEAAZ10qbJqn65/e19poGo5zu2iKE5/sSZJviURZ4trzRg eD7XnS8bTo/HO4ZyY5QR5hPtlsI0UATD74WKzislVk9a9x2seuXoeQ4LPSpM67/i uNrTTBDVSsqIsdXyK+VB9JlNiaF0JSpA+k/06bOFCeSrnYp0etY= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:47 2025 by rpki-client on console.sobornost.net