$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N8JN2ozGelndKF4nNHYqVCaKMUU.roa File: N8JN2ozGelndKF4nNHYqVCaKMUU.roa (raw, json) Hash identifier: f4Qg5GupM9ju95bKa2CYtsa5PvSwLjGN6tU72RKlVIA= Subject key identifier: 37:C2:4D:DA:8C:C6:7A:59:DD:28:5E:27:34:76:2A:54:26:8A:31:45 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34FA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N8JN2ozGelndKF4nNHYqVCaKMUU.roa Signing time: Mon 10 Feb 2025 13:52:53 +0000 ROA not before: Mon 10 Feb 2025 13:52:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=37C24DDA8CC67A59DD285E2734762A54268A3145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:35:7e:20:01:f8:6f:b1:55:8a:36:14:b3: 5b:69:44:7b:46:40:04:3e:10:99:c3:ee:f3:d7:eb: 4b:49:86:9a:9d:36:e7:f0:80:12:73:9b:78:fa:32: 95:8e:b9:e0:5f:01:3c:e2:e6:4e:0f:d0:3f:ba:96: 5c:67:bb:bc:59:1b:17:36:13:a6:71:66:d5:e8:a9: 19:fe:dd:35:20:ff:0c:de:92:86:2d:85:04:2b:7f: 9d:cf:27:21:1c:23:bc:72:cf:6e:c2:36:58:5b:30: 73:12:4e:a6:db:61:81:b6:27:6d:41:ec:a1:76:37: 1d:87:ca:82:9e:53:fc:69:c3:39:bd:32:1d:60:9b: ab:38:77:28:2a:ba:35:81:6e:aa:58:61:4a:e8:19: 89:18:5e:6f:b1:bb:8b:7e:0f:6c:13:85:b2:e7:1c: a5:5e:d0:15:44:82:73:a3:29:f2:b1:01:9b:fb:73: 81:b6:cd:90:c9:82:3f:e4:1b:fe:32:65:52:41:1f: 91:88:f7:cc:e3:ff:75:f1:a6:25:bb:5a:1e:98:0b: 48:01:2e:4b:22:ea:d7:59:7d:60:32:18:63:b9:49: dc:5d:f9:1f:7e:cf:2e:d1:3c:d0:81:53:2f:9e:3b: 62:4b:ac:4a:3f:23:50:23:e3:64:67:5b:04:e6:3e: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C2:4D:DA:8C:C6:7A:59:DD:28:5E:27:34:76:2A:54:26:8A:31:45 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N8JN2ozGelndKF4nNHYqVCaKMUU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.160.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:00:cc:be:4e:c5:84:ff:46:02:e6:8f:23:59:85:bb:dc:37: a7:fb:0e:49:1c:ca:bb:b7:dc:f7:c8:10:78:53:2a:50:3c:5e: cf:d7:c0:d3:aa:4a:fb:83:dc:c6:36:ce:b0:a9:4e:43:3b:2d: 50:af:ea:1d:08:56:c5:00:0b:51:11:84:e7:29:f5:22:d4:b9: c7:b5:06:4e:cc:8e:a4:51:66:52:d7:a8:03:e9:06:86:74:b5: e9:78:db:67:a4:92:b2:ca:d3:a3:96:d5:1d:25:18:13:d0:62: 26:c2:49:86:50:43:e0:cb:ee:44:42:ca:a0:0e:e7:9c:b7:7f: e3:f0:e4:2a:2c:6f:25:87:06:9a:ed:71:7d:c9:fb:e5:51:f9: 15:a1:82:98:40:70:1d:ae:1d:9f:8a:fd:09:b1:7a:e5:bc:88: c8:07:d0:d8:fa:59:48:0a:84:97:1a:39:d6:46:94:c2:f0:a7: ae:e7:36:3b:78:41:ad:d8:78:17:fe:f4:26:1d:b9:9c:dd:29: b3:33:98:2d:e6:7a:e6:98:f9:47:59:a0:1c:ed:75:58:fe:ef: c9:42:cb:c0:8d:29:f1:04:34:5e:32:a0:c1:48:e2:8b:eb:9c: bd:78:05:91:71:53:79:61:0c:49:55:b5:57:19:f9:37:31:de: c8:91:9c:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3QzI0RERBOENDNjdB NTlERDI4NUUyNzM0NzYyQTU0MjY4QTMxNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZ2DV+IAH4b7FVijYUs1tpRHtGQAQ+EJnD7vPX60tJhpqdNufw gBJzm3j6MpWOueBfATzi5k4P0D+6llxnu7xZGxc2E6ZxZtXoqRn+3TUg/wzekoYt hQQrf53PJyEcI7xyz27CNlhbMHMSTqbbYYG2J21B7KF2Nx2HyoKeU/xpwzm9Mh1g m6s4dygqujWBbqpYYUroGYkYXm+xu4t+D2wThbLnHKVe0BVEgnOjKfKxAZv7c4G2 zZDJgj/kG/4yZVJBH5GI98zj/3XxpiW7Wh6YC0gBLksi6tdZfWAyGGO5Sdxd+R9+ zy7RPNCBUy+eO2JLrEo/I1Aj42RnWwTmPsDbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUN8JN2ozGelndKF4nNHYqVCaKMUUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL044Sk4yb3pHZWxuZEtGNG5O SFlxVkNhS01VVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wqAwDQYJKoZIhvcNAQELBQADggEBAC8AzL5OxYT/RgLmjyNZhbvcN6f7Dkkcyru3 3PfIEHhTKlA8Xs/XwNOqSvuD3MY2zrCpTkM7LVCv6h0IVsUAC1ERhOcp9SLUuce1 Bk7MjqRRZlLXqAPpBoZ0tel422ekkrLK06OW1R0lGBPQYibCSYZQQ+DL7kRCyqAO 55y3f+Pw5CosbyWHBprtcX3J++VR+RWhgphAcB2uHZ+K/QmxeuW8iMgH0Nj6WUgK hJcaOdZGlMLwp67nNjt4Qa3YeBf+9CYduZzdKbMzmC3meuaY+UdZoBztdVj+78lC y8CNKfEENF4yoMFI4ovrnL14BZFxU3lhDElVtVcZ+Tcx3siRnNU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:48 2025 by rpki-client on console.sobornost.net