$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VCNGkvCtkkjS4LwLI7Wdnq0mn2M.roa File: VCNGkvCtkkjS4LwLI7Wdnq0mn2M.roa (raw, json) Hash identifier: sYfiyawLqmFzG1DZBwkaGLLRS3f93GTp/n3oBGP4NrQ= Subject key identifier: 54:23:46:92:F0:AD:92:48:D2:E0:BC:0B:23:B5:9D:9E:AD:26:9F:63 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3410 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VCNGkvCtkkjS4LwLI7Wdnq0mn2M.roa Signing time: Mon 10 Feb 2025 13:52:03 +0000 ROA not before: Mon 10 Feb 2025 13:52:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13328 (0x3410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=54234692F0AD9248D2E0BC0B23B59D9EAD269F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:bc:76:fc:2d:4f:9f:27:6e:6d:27:f0:5f: 03:33:7e:c7:47:94:ab:26:68:89:e9:9d:c0:99:ef: b2:25:16:37:6c:d2:7d:74:38:21:b2:99:4f:cb:73: 54:b7:af:4e:c2:f4:5c:c5:80:95:43:a6:a6:40:ca: e0:16:26:e6:24:fd:5c:33:c6:66:70:21:d4:e0:5d: 53:6f:fd:32:4c:59:0c:dc:1b:85:79:d4:a7:ba:8a: a2:c8:01:d7:fc:89:85:82:bf:36:63:81:9e:1c:dd: e1:1e:b9:a3:15:f6:22:64:e3:c4:c9:f9:69:97:b1: 7b:6e:87:8d:3d:f3:c7:ed:1d:ee:1c:c9:62:75:64: 19:df:6b:83:4a:b3:ad:15:36:f0:61:1f:47:fb:6f: 8d:97:7e:59:03:9f:68:4c:c6:9c:74:bf:66:97:fe: 90:44:70:9e:dd:81:98:e8:20:cc:26:00:b2:2b:7e: 22:29:c7:d3:38:ee:6a:6e:84:ab:4a:63:56:9d:a1: 4f:65:a1:b8:2c:97:b4:a2:a9:83:f0:da:73:c8:e3: 17:2f:c5:10:0d:19:d0:e7:34:ec:b7:21:60:fc:0e: ec:8e:2f:f2:c9:92:6f:3a:7c:8c:9f:9e:8c:44:2b: 37:36:99:7d:fe:57:27:bf:5e:a9:09:d5:8a:66:26: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:23:46:92:F0:AD:92:48:D2:E0:BC:0B:23:B5:9D:9E:AD:26:9F:63 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VCNGkvCtkkjS4LwLI7Wdnq0mn2M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.188.0/22 Signature Algorithm: sha256WithRSAEncryption 11:a3:aa:6c:5d:b3:13:89:0c:cb:71:f7:17:6a:4e:d0:e2:ad: 52:3b:52:57:ec:80:6e:ed:2f:ef:e4:a4:34:0a:ae:91:9b:b0: 7f:fb:09:2b:e7:16:4f:94:c5:2b:49:f2:62:8e:a6:50:62:2d: e7:1f:fe:96:f6:03:8d:a5:06:fe:b5:f7:64:3f:d7:9c:7e:b1: 82:ac:15:a2:3d:05:f0:2b:a4:62:df:12:9c:73:a2:76:43:e4: 3d:b3:56:d9:4b:f5:1f:79:51:22:d9:40:55:5d:e7:80:40:bf: b4:23:3a:72:b0:2e:41:a9:97:42:20:da:24:e2:82:fd:19:fe: a2:40:ca:5f:7a:cd:af:3f:bb:b8:99:dc:55:2c:4c:03:4f:21: d3:df:8a:fd:cd:79:4a:89:4a:e2:0a:94:66:8d:bc:a5:94:18: 41:8f:ca:f3:0f:d4:3f:ba:0f:ac:e9:4e:17:11:21:e7:a1:28: 92:e3:1e:31:77:ca:37:90:aa:62:56:0a:05:03:0f:22:4d:f3: a9:bc:30:8e:98:79:6d:45:df:56:f2:14:36:8a:9a:04:d7:c9: 39:c8:8a:ce:55:53:78:ae:a3:6e:90:f3:12:17:19:60:b6:ab: 23:9a:aa:84:e5:ae:d4:26:41:71:df:44:ba:f3:89:53:2f:95: be:f7:2e:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0MjM0NjkyRjBBRDky NDhEMkUwQkMwQjIzQjU5RDlFQUQyNjlGNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC03rx2/C1PnydubSfwXwMzfsdHlKsmaInpncCZ77IlFjds0n10 OCGymU/Lc1S3r07C9FzFgJVDpqZAyuAWJuYk/VwzxmZwIdTgXVNv/TJMWQzcG4V5 1Ke6iqLIAdf8iYWCvzZjgZ4c3eEeuaMV9iJk48TJ+WmXsXtuh40988ftHe4cyWJ1 ZBnfa4NKs60VNvBhH0f7b42XflkDn2hMxpx0v2aX/pBEcJ7dgZjoIMwmALIrfiIp x9M47mpuhKtKY1adoU9lobgsl7SiqYPw2nPI4xcvxRANGdDnNOy3IWD8DuyOL/LJ km86fIyfnoxEKzc2mX3+Vye/XqkJ1YpmJsc5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVCNGkvCtkkjS4LwLI7Wdnq0mn2MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZDTkdrdkN0a2tqUzRMd0xJ N1dkbnEwbW4yTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wrwwDQYJKoZIhvcNAQELBQADggEBABGjqmxdsxOJDMtx9xdqTtDirVI7UlfsgG7t L+/kpDQKrpGbsH/7CSvnFk+UxStJ8mKOplBiLecf/pb2A42lBv6192Q/15x+sYKs FaI9BfArpGLfEpxzonZD5D2zVtlL9R95USLZQFVd54BAv7QjOnKwLkGpl0Ig2iTi gv0Z/qJAyl96za8/u7iZ3FUsTANPIdPfiv3NeUqJSuIKlGaNvKWUGEGPyvMP1D+6 D6zpThcRIeehKJLjHjF3yjeQqmJWCgUDDyJN86m8MI6YeW1F31byFDaKmgTXyTnI is5VU3iuo26Q8xIXGWC2qyOaqoTlrtQmQXHfRLrziVMvlb73Luo= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:49 2025 by rpki-client on console.sobornost.net