$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JMu6-yRJArQvq8ME5wWxXca7Zgc.roa File: JMu6-yRJArQvq8ME5wWxXca7Zgc.roa (raw, json) Hash identifier: xqKFjw+0h9MCwGd3NSvcEqNCi3uF6Zqm8I2ZvXLT2tI= Subject key identifier: 24:CB:BA:FB:24:49:02:B4:2F:AB:C3:04:E7:05:B1:5D:C6:BB:66:07 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 337E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JMu6-yRJArQvq8ME5wWxXca7Zgc.roa Signing time: Mon 10 Feb 2025 13:51:29 +0000 ROA not before: Mon 10 Feb 2025 13:51:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.16.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13182 (0x337e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=24CBBAFB244902B42FABC304E705B15DC6BB6607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:4e:ba:65:09:14:61:eb:60:81:0f:19:39: 5f:0d:6f:65:da:c7:10:06:cc:20:22:f3:6a:ba:3c: 36:2a:e0:a1:ff:79:42:7f:26:60:11:22:8b:e1:dc: 51:7d:81:44:fe:c9:04:fd:1b:ae:26:3a:d3:4b:b0: 61:b6:c4:ac:03:9d:e5:63:c2:06:76:4d:ab:76:3b: d9:fa:01:eb:d6:d9:55:1f:1f:49:46:59:e8:d7:a0: 84:e4:00:0a:71:bf:6b:08:73:6a:e9:fa:56:fd:2a: db:54:c5:c2:fd:02:72:f8:85:c9:6f:bb:e2:0e:5c: 61:5c:55:24:e4:db:e2:b4:07:16:5a:eb:77:d6:8e: a7:f7:b1:e0:70:06:ce:7d:e6:83:51:4b:cc:cc:5d: f9:aa:ec:0c:ff:ba:05:24:d7:21:db:92:d2:64:4f: 43:63:82:a5:3d:64:19:f8:f4:43:07:84:6d:4f:e8: 98:42:96:5b:e7:e3:f8:1e:20:b9:57:89:37:ca:d8: 0d:37:0e:7d:a0:61:86:f9:58:8d:fe:d1:8f:ab:09: 8e:46:2d:23:a9:15:aa:25:d5:78:0d:a0:d6:59:87: f1:fb:9a:83:4c:12:3e:99:95:1d:eb:92:9e:34:ba: 17:ba:a0:f4:31:7b:4b:08:48:3e:ab:23:af:d4:cd: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CB:BA:FB:24:49:02:B4:2F:AB:C3:04:E7:05:B1:5D:C6:BB:66:07 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JMu6-yRJArQvq8ME5wWxXca7Zgc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.16.0/20 Signature Algorithm: sha256WithRSAEncryption a3:92:08:7b:3e:cf:f7:15:4a:33:4e:6a:e1:cd:85:4f:76:42: 00:41:de:66:a2:5c:32:c9:41:b8:db:a0:0f:9d:c2:45:13:23: 9e:e1:9f:b7:4b:20:57:64:7b:8f:b4:78:c9:d4:a1:91:e4:a8: 5e:46:ad:47:a4:48:19:54:7b:37:6e:ac:01:ea:17:e8:66:f1: 08:d8:3a:87:a1:f5:ec:a8:28:fd:bb:95:64:08:82:6e:c8:fd: ff:ec:90:5e:38:ef:45:dc:82:58:ff:e1:ac:7e:a2:ef:e5:9a: 40:7a:97:2d:07:9f:67:60:68:55:1f:f7:9b:58:b4:f8:60:61: da:bd:1e:90:44:a0:ac:50:a0:c1:96:7d:ad:60:ab:ea:0b:b0: f7:1c:92:81:0c:7a:2e:4d:da:f3:f6:c0:ae:44:26:fa:36:ed: 7c:e6:d0:ad:fa:bd:02:e1:7a:1b:e5:28:c1:03:3f:71:bd:ad: e2:cd:3d:1c:9c:3e:44:b6:99:28:81:fc:77:ec:b0:f0:7b:eb: 0d:86:19:e4:6a:5d:e4:c7:7b:08:d9:4c:47:df:77:43:58:bb: d5:af:c7:e0:22:38:51:82:fe:91:9b:39:59:79:08:d2:5a:c5: 01:7c:61:07:90:80:3e:e9:83:a6:17:aa:b1:b3:a6:0e:02:6f: 55:82:30:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM34wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI0Q0JCQUZCMjQ0OTAy QjQyRkFCQzMwNEU3MDVCMTVEQzZCQjY2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBqU66ZQkUYetggQ8ZOV8Nb2XaxxAGzCAi82q6PDYq4KH/eUJ/ JmARIovh3FF9gUT+yQT9G64mOtNLsGG2xKwDneVjwgZ2Tat2O9n6AevW2VUfH0lG WejXoITkAApxv2sIc2rp+lb9KttUxcL9AnL4hclvu+IOXGFcVSTk2+K0BxZa63fW jqf3seBwBs595oNRS8zMXfmq7Az/ugUk1yHbktJkT0NjgqU9ZBn49EMHhG1P6JhC llvn4/geILlXiTfK2A03Dn2gYYb5WI3+0Y+rCY5GLSOpFaol1XgNoNZZh/H7moNM Ej6ZlR3rkp40uhe6oPQxe0sISD6rI6/UzWq/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJMu6+yRJArQvq8ME5wWxXca7ZgcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pNdTYteVJKQXJRdnE4TUU1 d1d4WGNhN1pnYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 whAwDQYJKoZIhvcNAQELBQADggEBAKOSCHs+z/cVSjNOauHNhU92QgBB3maiXDLJ QbjboA+dwkUTI57hn7dLIFdke4+0eMnUoZHkqF5GrUekSBlUezdurAHqF+hm8QjY Ooeh9eyoKP27lWQIgm7I/f/skF4470Xcglj/4ax+ou/lmkB6ly0Hn2dgaFUf95tY tPhgYdq9HpBEoKxQoMGWfa1gq+oLsPcckoEMei5N2vP2wK5EJvo27Xzm0K36vQLh ehvlKMEDP3G9reLNPRycPkS2mSiB/HfssPB76w2GGeRqXeTHewjZTEffd0NYu9Wv x+AiOFGC/pGbOVl5CNJaxQF8YQeQgD7pg6YXqrGzpg4Cb1WCMDU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:47 2025 by rpki-client on console.sobornost.net