$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JnBL28QXSEoFBxaZ3zzlnPOrFcs.roa File: JnBL28QXSEoFBxaZ3zzlnPOrFcs.roa (raw, json) Hash identifier: cmcCo8cge0XPhvZFCoxdAaOWgNRYu43J+qTo41Oa7M0= Subject key identifier: 26:70:4B:DB:C4:17:48:4A:05:07:16:99:DF:3C:E5:9C:F3:AB:15:CB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36DB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JnBL28QXSEoFBxaZ3zzlnPOrFcs.roa Signing time: Mon 10 Feb 2025 13:54:45 +0000 ROA not before: Mon 10 Feb 2025 13:54:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14043 (0x36db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=26704BDBC417484A05071699DF3CE59CF3AB15CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:57:38:83:9d:78:45:3a:fc:85:9e:80:cf: 83:dc:a4:ca:e3:de:23:c1:46:c8:03:26:6c:02:35: 4e:29:d0:f6:59:62:b1:55:71:c0:e2:d4:9f:5a:f7: 80:b7:f4:15:7d:a7:86:11:a2:6c:b4:1f:92:75:0d: b9:52:4a:b0:35:d6:29:99:d4:f9:7a:b0:71:23:c2: 27:d0:76:b8:46:5e:41:0f:5d:b2:8c:42:b5:a2:3c: b7:a7:79:a1:79:a4:ec:94:ca:47:c4:08:c8:7c:b1: 97:0d:f8:6d:36:97:c9:61:fc:9a:72:8c:41:d3:c7: 49:55:11:d2:52:28:2c:b2:fd:00:28:7a:71:1d:ef: fd:f8:00:7d:89:9b:58:e3:07:a8:56:f5:4b:4f:fe: b9:2d:24:3f:2e:3a:ff:42:7d:0b:13:e6:c4:fe:3e: 88:3c:15:59:59:3f:24:3d:ea:e9:29:26:75:b6:e5: a5:85:9d:72:55:1d:eb:8a:b2:ea:49:ad:42:c8:08: 77:4e:45:17:d0:64:fa:e3:f2:1e:5a:89:f4:c8:f4: 70:56:76:64:14:88:25:10:3c:f9:cd:cf:d6:bd:d3: 15:6f:2e:6e:60:17:65:a7:25:a3:bf:ec:09:d8:3f: b7:39:50:76:8e:04:80:f5:1f:a2:c8:cc:85:a0:f1: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:70:4B:DB:C4:17:48:4A:05:07:16:99:DF:3C:E5:9C:F3:AB:15:CB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JnBL28QXSEoFBxaZ3zzlnPOrFcs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.28.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:05:74:42:e1:6e:2b:c2:b4:ea:f1:26:f8:a0:a4:6f:e9:5c: 57:0d:20:3c:65:63:e7:92:7b:19:83:b2:02:52:7a:b0:fe:da: 62:41:82:19:4d:80:71:69:79:66:cd:e3:80:7c:7f:48:46:87: db:b2:8a:1a:b6:ac:f4:5d:bb:35:a0:aa:52:ba:f1:22:0c:8a: f0:7b:9e:94:96:28:96:bb:79:ef:cc:e9:fe:3a:1c:34:56:ca: 9d:00:b2:b7:c1:72:9f:a8:63:9d:c0:bf:ff:48:31:af:a9:20: 4e:55:b7:35:de:63:46:84:18:5a:dc:aa:7c:ab:fa:cc:35:9b: 74:e9:5a:c0:43:1a:43:aa:57:11:e0:16:2a:ed:91:e3:29:9f: b8:ce:43:a4:45:1a:96:e4:58:9e:32:5c:a5:98:21:75:cb:2d: 52:94:a4:b5:b9:09:ab:23:04:2c:f9:af:3b:cc:82:22:a2:68: 18:1f:55:c3:18:7f:28:c0:19:46:9c:d0:7c:50:37:44:60:47: c2:50:41:1e:8f:0b:c5:95:c7:b3:0e:df:bd:76:c5:b3:f7:4e: 45:0e:19:89:41:4b:6b:d6:24:da:dd:98:1b:f5:31:8a:62:c5: e6:ca:9b:e2:09:bc:ac:b8:3e:36:29:20:49:5b:a0:9e:b5:ef: b0:5a:98:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2NzA0QkRCQzQxNzQ4 NEEwNTA3MTY5OURGM0NFNTlDRjNBQjE1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvclc4g514RTr8hZ6Az4PcpMrj3iPBRsgDJmwCNU4p0PZZYrFV ccDi1J9a94C39BV9p4YRomy0H5J1DblSSrA11imZ1Pl6sHEjwifQdrhGXkEPXbKM QrWiPLeneaF5pOyUykfECMh8sZcN+G02l8lh/JpyjEHTx0lVEdJSKCyy/QAoenEd 7/34AH2Jm1jjB6hW9UtP/rktJD8uOv9CfQsT5sT+Pog8FVlZPyQ96ukpJnW25aWF nXJVHeuKsupJrULICHdORRfQZPrj8h5aifTI9HBWdmQUiCUQPPnNz9a90xVvLm5g F2WnJaO/7AnYP7c5UHaOBID1H6LIzIWg8WPDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJnBL28QXSEoFBxaZ3zzlnPOrFcswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0puQkwyOFFYU0VvRkJ4YVoz enpsblBPckZjcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wxwwDQYJKoZIhvcNAQELBQADggEBAG4FdELhbivCtOrxJvigpG/pXFcNIDxlY+eS exmDsgJSerD+2mJBghlNgHFpeWbN44B8f0hGh9uyihq2rPRduzWgqlK68SIMivB7 npSWKJa7ee/M6f46HDRWyp0AsrfBcp+oY53Av/9IMa+pIE5VtzXeY0aEGFrcqnyr +sw1m3TpWsBDGkOqVxHgFirtkeMpn7jOQ6RFGpbkWJ4yXKWYIXXLLVKUpLW5Casj BCz5rzvMgiKiaBgfVcMYfyjAGUac0HxQN0RgR8JQQR6PC8WVx7MO3712xbP3TkUO GYlBS2vWJNrdmBv1MYpixebKm+IJvKy4PjYpIElboJ6177BamAw= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:47 2025 by rpki-client on console.sobornost.net