$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SoIzzTXcT0uPNKwgVqmnHRjDKsQ.roa File: SoIzzTXcT0uPNKwgVqmnHRjDKsQ.roa (raw, json) Hash identifier: dR4SrHliIT5PsY1QlGWtNEqb2wVpLnLIfLAAfY2Ox/8= Subject key identifier: 4A:82:33:CD:35:DC:4F:4B:8F:34:AC:20:56:A9:A7:1D:18:C3:2A:C4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36D7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SoIzzTXcT0uPNKwgVqmnHRjDKsQ.roa Signing time: Mon 10 Feb 2025 13:54:44 +0000 ROA not before: Mon 10 Feb 2025 13:54:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.204.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14039 (0x36d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4A8233CD35DC4F4B8F34AC2056A9A71D18C32AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f8:6b:76:c1:e8:26:74:c2:d9:da:11:c4:58: 29:41:b6:08:6c:20:44:7e:e3:8f:c2:0b:28:a9:42: dd:8c:4c:d0:f5:90:4a:85:94:84:44:cf:ef:20:d9: 09:49:a7:d5:7d:5d:1b:90:bf:e2:1e:0e:7d:97:d1: 34:4b:37:02:a8:e7:50:92:38:1f:ec:43:e6:a1:ad: 96:a8:13:ff:97:c2:9b:1d:d8:0c:34:15:ac:e2:bd: 14:eb:40:61:fe:72:7b:64:8b:53:1e:76:1a:6d:7a: 3a:2c:90:c2:66:57:92:6e:0e:c0:b4:89:7b:c5:cc: 69:3b:bf:5e:39:47:a3:28:91:39:b2:a4:fa:1a:67: fe:94:22:7d:9d:f6:95:fa:7d:fe:79:5d:5b:2d:b6: 87:76:d2:26:63:3f:06:a8:e5:47:bf:74:46:13:70: 55:c6:35:c1:4f:b0:73:5c:cc:0b:37:81:22:25:ff: c0:39:2b:cf:eb:34:6e:b4:c9:0a:a2:fd:b3:f1:34: ed:1b:b1:bf:79:c3:46:3e:be:e3:28:f1:33:74:81: 88:bf:b0:68:60:ff:09:ba:cd:51:a6:80:a9:6e:90: 39:51:4d:be:99:80:95:27:5e:cb:df:97:c9:ea:53: 13:c1:1a:f8:3f:2f:c5:26:c9:9f:ed:06:20:2e:3d: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:82:33:CD:35:DC:4F:4B:8F:34:AC:20:56:A9:A7:1D:18:C3:2A:C4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SoIzzTXcT0uPNKwgVqmnHRjDKsQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.204.64/27 Signature Algorithm: sha256WithRSAEncryption 89:10:e8:76:e1:50:4e:9e:a7:de:5e:ee:c6:fe:f1:3b:6b:9c: 67:d7:5f:e0:9e:21:9b:4f:fc:71:02:41:1f:e5:40:34:f1:b1: 90:f4:26:54:c6:88:d0:99:ad:64:af:1b:e9:24:40:46:78:0e: a6:5c:ca:1e:d7:e7:f4:cc:1a:e2:b6:41:02:6e:ab:96:85:2d: d2:30:90:57:d4:23:d3:d0:5e:61:06:36:96:c0:bc:74:81:c4: 04:ff:b0:56:c9:64:7f:9c:96:f7:ca:21:f4:1e:70:f6:18:07: c9:08:84:9f:71:8a:40:fb:af:d6:21:7b:ac:c9:5c:2d:d8:31: 55:ca:c8:ab:31:5e:75:f0:63:83:0d:6b:d6:0a:18:b6:0d:70: 90:71:a2:2f:76:3c:55:70:bc:f5:3d:a4:d3:37:08:b2:28:08: 78:73:86:ca:2f:cf:8d:49:58:18:94:42:90:65:bd:15:ac:4e: 86:31:23:b0:28:c3:0a:85:e3:c4:32:67:8d:45:85:72:d0:cb: bf:66:e9:7e:81:45:a7:8a:16:14:d7:bb:33:4d:f4:e8:d5:02: 40:59:68:6b:82:8b:52:c0:26:ed:0b:22:fe:22:26:b8:3e:10: 76:14:4d:6b:42:43:ab:e7:b8:f8:03:b7:52:0d:68:8a:ca:d5: 48:2d:7e:4f -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICNtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBODIzM0NEMzVEQzRG NEI4RjM0QUMyMDU2QTlBNzFEMThDMzJBQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq+Gt2wegmdMLZ2hHEWClBtghsIER+44/CCyipQt2MTND1kEqF lIREz+8g2QlJp9V9XRuQv+IeDn2X0TRLNwKo51CSOB/sQ+ahrZaoE/+Xwpsd2Aw0 FazivRTrQGH+cntki1MedhptejoskMJmV5JuDsC0iXvFzGk7v145R6MokTmypPoa Z/6UIn2d9pX6ff55XVsttod20iZjPwao5Ue/dEYTcFXGNcFPsHNczAs3gSIl/8A5 K8/rNG60yQqi/bPxNO0bsb95w0Y+vuMo8TN0gYi/sGhg/wm6zVGmgKlukDlRTb6Z gJUnXsvfl8nqUxPBGvg/L8UmyZ/tBiAuPc/TAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUSoIzzTXcT0uPNKwgVqmnHRjDKsQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NvSXp6VFhjVDB1UE5Ld2dW cW1uSFJqREtzUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQV7 wsxAMA0GCSqGSIb3DQEBCwUAA4IBAQCJEOh24VBOnqfeXu7G/vE7a5xn11/gniGb T/xxAkEf5UA08bGQ9CZUxojQma1krxvpJEBGeA6mXMoe1+f0zBritkECbquWhS3S MJBX1CPT0F5hBjaWwLx0gcQE/7BWyWR/nJb3yiH0HnD2GAfJCISfcYpA+6/WIXus yVwt2DFVysirMV518GODDWvWChi2DXCQcaIvdjxVcLz1PaTTNwiyKAh4c4bKL8+N SVgYlEKQZb0VrE6GMSOwKMMKhePEMmeNRYVy0Mu/Zul+gUWnihYU17szTfTo1QJA WWhrgotSwCbtCyL+Iia4PhB2FE1rQkOr57j4A7dSDWiKytVILX5P -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:49 2025 by rpki-client on console.sobornost.net