$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N8O_SN4K7jUK3mo9XnCANeRkLuA.roa File: N8O_SN4K7jUK3mo9XnCANeRkLuA.roa (raw, json) Hash identifier: rNMP2gpa/GihrGR/Oe7u+sBES96ix3yonlf4J1xGk38= Subject key identifier: 37:C3:BF:48:DE:0A:EE:35:0A:DE:6A:3D:5E:70:80:35:E4:64:2E:E0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35B3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N8O_SN4K7jUK3mo9XnCANeRkLuA.roa Signing time: Mon 10 Feb 2025 13:53:36 +0000 ROA not before: Mon 10 Feb 2025 13:53:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13747 (0x35b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=37C3BF48DE0AEE350ADE6A3D5E708035E4642EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:13:8c:38:6d:23:b6:ec:c4:32:83:be:3b: 81:b1:52:72:83:9b:51:59:21:62:3a:83:da:53:6b: 51:91:40:3f:01:93:d8:e7:27:eb:2a:80:a7:da:29: aa:8f:3d:09:ad:b2:86:d0:59:76:36:f0:7d:ab:10: 90:2b:ce:44:81:cb:d5:90:87:be:8a:e6:28:d9:73: 4f:44:f3:54:50:eb:bf:71:aa:94:97:4c:77:3b:c0: 65:55:19:98:f5:d5:d5:2f:e4:74:e6:47:8c:db:20: 0e:42:eb:b7:c9:fc:88:32:bc:bd:78:55:2f:17:3f: f8:25:54:d1:0c:22:bc:9a:af:f4:0f:53:2a:88:9d: 57:ee:e1:cc:0c:b4:d0:9a:b8:0c:0a:72:ec:bd:f3: c2:26:7a:f8:40:63:f7:c8:03:a1:61:db:28:b0:00: 37:b9:0b:8a:b9:37:47:29:ef:fb:60:cb:21:cd:24: e6:2f:6f:7a:d9:d1:e4:77:96:73:0a:8f:63:3c:3d: cb:35:d0:5f:80:10:47:ba:89:ac:c4:d8:18:c0:00: e0:34:54:31:4c:be:e9:24:39:aa:95:24:2a:4f:2b: a1:14:6c:a6:10:33:1f:d6:7d:c3:29:0c:20:cf:aa: 6c:e2:47:28:79:2b:9c:9b:d7:20:f7:b2:f2:e6:30: db:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C3:BF:48:DE:0A:EE:35:0A:DE:6A:3D:5E:70:80:35:E4:64:2E:E0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N8O_SN4K7jUK3mo9XnCANeRkLuA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.237.0/24 Signature Algorithm: sha256WithRSAEncryption b9:55:6a:8d:3a:81:ac:ac:97:f1:2e:c1:92:02:25:73:bc:42: a7:c5:11:ae:4c:72:14:51:dd:0a:5f:9a:9d:45:7d:90:d0:a2: ec:33:13:22:95:8e:79:4b:75:d0:06:8d:8b:b9:23:77:8e:14: e8:7f:f8:8d:5b:db:ee:50:89:af:79:11:68:57:64:36:54:db: e7:68:7a:97:22:98:67:30:e0:f3:a0:47:22:23:bb:04:2d:8d: 4b:3a:b3:71:85:6c:4f:05:8c:05:05:da:53:13:a8:80:a4:b6: 8c:44:9f:4d:bd:4b:a1:24:3c:b5:c5:1e:2e:2a:68:2f:0a:ef: d1:a7:88:17:02:e5:94:66:d7:55:05:28:81:37:40:10:eb:8f: 76:09:78:21:69:a4:a2:d2:ae:8b:5f:16:5b:f8:2d:08:14:37: 63:e0:56:5e:ae:0d:28:0c:8e:67:b0:dd:91:d4:0d:f2:10:9c: e6:c2:4b:c7:5e:b4:6d:58:15:e0:3d:25:62:d5:64:56:f1:71: 59:55:89:39:cb:11:0b:9a:f2:06:b5:f1:c1:c0:ed:c9:fb:3a: 58:4e:6e:85:2b:78:48:be:f5:62:0f:a2:00:54:3e:c2:77:7a: 51:57:92:b4:4d:4c:f4:a8:60:04:c4:0c:47:27:e0:0e:f7:1c: e6:d9:80:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3QzNCRjQ4REUwQUVF MzUwQURFNkEzRDVFNzA4MDM1RTQ2NDJFRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKdhOMOG0jtuzEMoO+O4GxUnKDm1FZIWI6g9pTa1GRQD8Bk9jn J+sqgKfaKaqPPQmtsobQWXY28H2rEJArzkSBy9WQh76K5ijZc09E81RQ679xqpSX THc7wGVVGZj11dUv5HTmR4zbIA5C67fJ/IgyvL14VS8XP/glVNEMIryar/QPUyqI nVfu4cwMtNCauAwKcuy988ImevhAY/fIA6Fh2yiwADe5C4q5N0cp7/tgyyHNJOYv b3rZ0eR3lnMKj2M8Pcs10F+AEEe6iazE2BjAAOA0VDFMvukkOaqVJCpPK6EUbKYQ Mx/WfcMpDCDPqmziRyh5K5yb1yD3svLmMNvxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUN8O/SN4K7jUK3mo9XnCANeRkLuAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL044T19TTjRLN2pVSzNtbzlY bkNBTmVSa0x1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+0wDQYJKoZIhvcNAQELBQADggEBALlVao06gaysl/EuwZICJXO8QqfFEa5MchRR 3Qpfmp1FfZDQouwzEyKVjnlLddAGjYu5I3eOFOh/+I1b2+5Qia95EWhXZDZU2+do epcimGcw4POgRyIjuwQtjUs6s3GFbE8FjAUF2lMTqICktoxEn029S6EkPLXFHi4q aC8K79GniBcC5ZRm11UFKIE3QBDrj3YJeCFppKLSrotfFlv4LQgUN2PgVl6uDSgM jmew3ZHUDfIQnObCS8detG1YFeA9JWLVZFbxcVlViTnLEQua8ga18cHA7cn7OlhO boUreEi+9WIPogBUPsJ3elFXkrRNTPSoYATEDEcn4A73HObZgK8= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:48 2025 by rpki-client on console.sobornost.net