$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ODvbuWeKIGyOUvS3sJE5WPinmFY.roa File: ODvbuWeKIGyOUvS3sJE5WPinmFY.roa (raw, json) Hash identifier: u0uUZ0adGz8nUVyVtxVigar5E/RPYhVWrUjEjURvk3A= Subject key identifier: 38:3B:DB:B9:67:8A:20:6C:8E:52:F4:B7:B0:91:39:58:F8:A7:98:56 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35D8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ODvbuWeKIGyOUvS3sJE5WPinmFY.roa Signing time: Mon 10 Feb 2025 13:53:44 +0000 ROA not before: Mon 10 Feb 2025 13:53:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.195.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13784 (0x35d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=383BDBB9678A206C8E52F4B7B0913958F8A79856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f5:a6:e8:3a:97:71:ee:11:c3:5f:16:1c:88: 9b:da:a2:3b:c3:f9:ef:7d:bc:21:f3:5e:2e:37:97: 5b:3b:c1:b1:20:3f:43:11:98:61:43:ff:46:70:bb: ab:04:4f:b1:73:06:ca:9b:d5:4e:0e:4f:4c:62:a0: 27:da:02:2e:15:d1:85:c4:b0:58:18:e4:d5:c0:ab: d0:a6:c5:82:15:ec:fd:31:39:87:5d:61:91:b2:d6: 7b:6e:f9:7c:b8:10:50:e0:7b:35:f5:dc:ca:98:7b: 8b:00:f2:a6:e5:ae:58:9a:3b:b5:70:4f:0b:2d:53: c2:d0:b6:1f:71:b0:cc:7c:8c:79:eb:f2:24:cb:b2: 1e:90:b3:88:8f:46:b7:e8:ae:00:9b:1b:06:30:85: 47:dc:81:f1:24:62:f3:c7:df:3f:ad:53:ca:55:27: 05:dd:52:d9:a1:4d:f8:c5:bb:32:6c:fd:84:02:10: 0f:e7:46:d0:b2:13:84:2f:ba:74:d2:4c:22:ac:2c: e2:62:df:4c:30:58:50:29:0c:e2:b1:d7:d7:9d:8d: c8:26:e9:44:a4:70:43:d2:34:73:45:16:16:79:a9: c4:22:e5:9e:93:6c:fb:7a:bf:c7:12:88:e4:e4:b0: f7:20:0c:ed:29:ec:af:b2:32:fc:e8:f1:b6:0d:5a: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3B:DB:B9:67:8A:20:6C:8E:52:F4:B7:B0:91:39:58:F8:A7:98:56 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ODvbuWeKIGyOUvS3sJE5WPinmFY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.0.0/18 Signature Algorithm: sha256WithRSAEncryption 14:d7:67:28:86:c9:c2:36:bf:ba:b1:4a:57:27:e6:ef:b9:5c: 1f:1b:aa:b9:27:35:7d:e9:31:cc:93:36:54:5b:2e:14:33:f3: 1d:66:2e:8b:92:92:ed:0e:2f:85:17:10:67:c3:c9:8c:6e:64: 29:39:6b:bc:bd:ba:d4:5b:e5:dd:27:9a:b1:be:d0:b7:e7:3d: 3f:04:96:f5:79:70:64:be:ee:f8:1c:2c:b9:50:c7:a8:03:c8: 8b:6a:27:f8:dd:8a:83:29:1f:22:76:11:14:6a:40:3b:4c:a6: c0:f2:64:87:1a:9d:5e:c8:cc:11:f8:98:6b:fb:0b:ce:62:35: 36:02:bc:33:c8:55:d3:a9:fd:50:3b:40:44:43:f4:2a:6b:a3: 49:75:bd:45:fc:0b:a5:b5:bf:55:f8:8f:fd:f4:7e:35:f8:39: 4b:c5:11:80:ce:6f:ab:fe:b2:78:a3:5a:d8:48:70:b0:66:5c: 0a:72:ca:13:fa:05:df:51:6d:27:39:a2:e9:ae:6f:d8:d4:f7: 3c:ec:e6:c0:4a:48:6f:05:d7:db:62:82:c7:30:e2:4d:bb:8d: 47:40:56:eb:6d:9a:19:50:15:dd:df:07:4e:de:2a:9a:b2:aa: 43:21:89:a2:c0:43:f9:af:06:84:56:99:a6:a7:51:38:d8:78: c2:c2:df:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM4M0JEQkI5Njc4QTIw NkM4RTUyRjRCN0IwOTEzOTU4RjhBNzk4NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd9aboOpdx7hHDXxYciJvaojvD+e99vCHzXi43l1s7wbEgP0MR mGFD/0Zwu6sET7FzBsqb1U4OT0xioCfaAi4V0YXEsFgY5NXAq9CmxYIV7P0xOYdd YZGy1ntu+Xy4EFDgezX13MqYe4sA8qblrliaO7VwTwstU8LQth9xsMx8jHnr8iTL sh6Qs4iPRrforgCbGwYwhUfcgfEkYvPH3z+tU8pVJwXdUtmhTfjFuzJs/YQCEA/n RtCyE4QvunTSTCKsLOJi30wwWFApDOKx19edjcgm6USkcEPSNHNFFhZ5qcQi5Z6T bPt6v8cSiOTksPcgDO0p7K+yMvzo8bYNWkxXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUODvbuWeKIGyOUvS3sJE5WPinmFYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09EdmJ1V2VLSUd5T1V2UzNz SkU1V1Bpbm1GWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7 wwAwDQYJKoZIhvcNAQELBQADggEBABTXZyiGycI2v7qxSlcn5u+5XB8bqrknNX3p McyTNlRbLhQz8x1mLouSku0OL4UXEGfDyYxuZCk5a7y9utRb5d0nmrG+0LfnPT8E lvV5cGS+7vgcLLlQx6gDyItqJ/jdioMpHyJ2ERRqQDtMpsDyZIcanV7IzBH4mGv7 C85iNTYCvDPIVdOp/VA7QERD9Cpro0l1vUX8C6W1v1X4j/30fjX4OUvFEYDOb6v+ snijWthIcLBmXApyyhP6Bd9RbSc5oumub9jU9zzs5sBKSG8F19tigscw4k27jUdA VuttmhlQFd3fB07eKpqyqkMhiaLAQ/mvBoRWmaanUTjYeMLC3+w= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:48 2025 by rpki-client on console.sobornost.net