$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5ykJgd1kPOuONK7CJBueW_EwlM.roa File: S5ykJgd1kPOuONK7CJBueW_EwlM.roa (raw, json) Hash identifier: tLcKyJd26avu5U5+tZqD3G2D5XKTAM2mEKveZ8XQLP0= Subject key identifier: 4B:9C:A4:26:07:75:90:F3:AE:38:D2:BB:08:90:6E:79:6F:C4:C2:53 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3558 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5ykJgd1kPOuONK7CJBueW_EwlM.roa Signing time: Mon 10 Feb 2025 13:53:15 +0000 ROA not before: Mon 10 Feb 2025 13:53:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.228.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13656 (0x3558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4B9CA426077590F3AE38D2BB08906E796FC4C253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:03:3b:1c:e7:a8:41:de:b8:4c:92:12:4a: 8a:7d:cc:8f:e9:b1:08:72:53:8d:29:32:14:55:2b: f8:89:d8:97:09:0b:b0:b7:d4:c2:7a:cb:ff:11:99: 13:88:40:eb:75:da:d3:21:8a:13:6e:06:4f:a8:da: 34:44:99:8d:42:7d:44:ce:ae:bd:99:81:b7:07:a1: fb:89:84:7f:94:b0:ae:6e:b0:06:eb:85:d0:3a:cb: 99:d3:b9:73:1a:fe:0e:68:1b:8c:28:09:75:fb:7a: 25:61:2d:6e:c7:e9:38:a7:b0:d3:7f:bf:b8:52:55: b8:ae:50:1a:0a:43:20:a4:d3:6e:9a:05:0d:ea:d3: 34:37:65:dd:77:50:8d:6b:3c:d7:9d:97:37:ef:2c: 10:c2:6a:7d:3a:ac:a5:53:45:85:59:77:ca:0f:9d: 29:ef:75:2a:6f:90:d8:36:31:11:4d:55:c4:18:21: bb:7b:cf:29:6f:14:88:dc:e5:37:db:66:77:03:6e: d4:a2:e9:f9:bb:31:80:17:01:ea:e8:1e:54:98:40: 92:2c:89:bc:21:04:ac:46:b1:5f:3c:93:c6:d4:7b: b4:fc:8e:65:8e:06:b5:ee:4f:88:4a:0a:5b:fe:38: 09:56:5b:d4:05:1f:12:c6:78:ba:69:b3:93:4a:e8: 2e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9C:A4:26:07:75:90:F3:AE:38:D2:BB:08:90:6E:79:6F:C4:C2:53 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5ykJgd1kPOuONK7CJBueW_EwlM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.228.0/22 Signature Algorithm: sha256WithRSAEncryption 42:83:f0:b5:e3:e1:6f:3d:ae:ad:d3:fb:f9:89:e7:bf:26:87: fc:15:68:d5:0f:b2:23:00:de:ff:a7:85:61:82:ab:92:3d:6b: d2:52:a5:9f:27:a6:ea:23:72:88:cf:c0:95:92:56:1e:35:d2: 6e:98:36:96:65:f8:64:dc:b4:0d:1c:37:90:05:80:da:87:f5: 4d:8c:92:36:cf:45:ed:c2:0b:c1:79:d8:dc:27:07:70:8c:46: a3:bf:4f:1d:9b:26:42:3a:5a:d4:19:96:e6:72:89:ed:06:0e: 0e:df:0a:2b:4e:b1:c2:c4:40:0e:0f:d5:06:70:67:91:b9:d8: bd:de:51:fb:f4:26:ed:12:d6:48:b7:f0:ae:fe:9e:f0:86:b1: 4f:cc:d6:e6:d9:32:37:18:a5:cf:cc:84:e0:10:a1:38:5c:45: 52:a8:2b:07:31:0d:31:fd:94:ed:f7:73:b3:b4:e2:e4:20:92: 9b:e1:56:00:86:ad:e6:85:96:7a:93:f7:66:93:67:d5:64:32: e7:ad:61:eb:2e:a1:c0:9e:83:88:c8:08:d0:b1:45:79:85:bd: 36:31:50:94:36:ad:7f:b4:a5:bb:3b:d9:e1:73:fa:8c:fe:3d: 3d:6b:da:a4:5f:0a:25:87:2b:5f:b2:fa:10:68:4f:94:82:36: 6d:31:75:55 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCOUNBNDI2MDc3NTkw RjNBRTM4RDJCQjA4OTA2RTc5NkZDNEMyNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNMwM7HOeoQd64TJISSop9zI/psQhyU40pMhRVK/iJ2JcJC7C3 1MJ6y/8RmROIQOt12tMhihNuBk+o2jREmY1CfUTOrr2ZgbcHofuJhH+UsK5usAbr hdA6y5nTuXMa/g5oG4woCXX7eiVhLW7H6TinsNN/v7hSVbiuUBoKQyCk026aBQ3q 0zQ3Zd13UI1rPNedlzfvLBDCan06rKVTRYVZd8oPnSnvdSpvkNg2MRFNVcQYIbt7 zylvFIjc5TfbZncDbtSi6fm7MYAXAeroHlSYQJIsibwhBKxGsV88k8bUe7T8jmWO BrXuT4hKClv+OAlWW9QFHxLGeLpps5NK6C7pAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUS5ykJgd1kPOuONK7CJBueW/EwlMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1M1eWtKZ2Qxa1BPdU9OSzdD SkJ1ZVdfRXdsTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 seQwDQYJKoZIhvcNAQELBQADggEBAEKD8LXj4W89rq3T+/mJ578mh/wVaNUPsiMA 3v+nhWGCq5I9a9JSpZ8npuojcojPwJWSVh410m6YNpZl+GTctA0cN5AFgNqH9U2M kjbPRe3CC8F52NwnB3CMRqO/Tx2bJkI6WtQZluZyie0GDg7fCitOscLEQA4P1QZw Z5G52L3eUfv0Ju0S1ki38K7+nvCGsU/M1ubZMjcYpc/MhOAQoThcRVKoKwcxDTH9 lO33c7O04uQgkpvhVgCGreaFlnqT92aTZ9VkMuetYesuocCeg4jICNCxRXmFvTYx UJQ2rX+0pbs72eFz+oz+PT1r2qRfCiWHK1+y+hBoT5SCNm0xdVU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:49 2025 by rpki-client on console.sobornost.net