$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VlgSLVqVeD9-iRPi3M9S7HBfSrQ.roa File: VlgSLVqVeD9-iRPi3M9S7HBfSrQ.roa (raw, json) Hash identifier: fYU2rn9p4C5I0fQBh4kJ/cl18BTJjJXRO3MTnXO25+Y= Subject key identifier: 56:58:12:2D:5A:95:78:3F:7E:89:13:E2:DC:CF:52:EC:70:5F:4A:B4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3376 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VlgSLVqVeD9-iRPi3M9S7HBfSrQ.roa Signing time: Mon 10 Feb 2025 13:51:26 +0000 ROA not before: Mon 10 Feb 2025 13:51:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13174 (0x3376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5658122D5A95783F7E8913E2DCCF52EC705F4AB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:f3:f8:72:b1:23:f3:b8:f3:4d:3b:25:14: 1e:85:4e:79:b7:3a:a4:22:b0:5e:ba:01:1a:5b:d5: 37:67:8e:ab:de:19:99:dc:3e:f8:12:db:ed:bf:4c: fa:18:e0:a6:7d:33:9f:fe:75:30:9a:47:f3:45:66: 2f:65:28:46:a4:6f:2c:d1:9d:b2:67:af:b4:88:90: 14:7d:64:55:2c:0d:cb:c8:b7:bf:bb:e3:dd:b5:8b: 80:a4:91:1e:40:b8:39:3b:ab:a7:7f:8f:fc:fd:4e: dc:87:fe:72:c2:8b:12:1e:43:e6:72:11:0c:05:05: 9d:61:83:2f:b1:11:0e:eb:01:f2:a0:b5:c9:3d:fb: ec:8f:3a:e7:a4:c4:ee:ec:ac:34:4d:69:10:e5:7b: d6:4a:bd:45:15:b2:74:35:0f:fc:8c:2a:90:4e:6b: 67:d6:d1:7f:31:de:ad:5d:84:82:65:a2:c1:e2:66: 3f:18:31:97:df:40:1a:69:5d:10:6e:e3:c8:aa:be: 76:09:32:41:f0:1a:9e:d2:7b:a7:5c:c7:db:b0:bb: 8a:02:9e:b2:34:94:4d:2b:0c:d6:91:1b:c7:62:91: 52:be:97:cd:5d:e5:88:f1:b1:a5:fe:8f:24:a5:d9: 12:1a:a6:d5:d0:7f:a7:13:e4:63:ae:63:37:86:5e: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:58:12:2D:5A:95:78:3F:7E:89:13:E2:DC:CF:52:EC:70:5F:4A:B4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VlgSLVqVeD9-iRPi3M9S7HBfSrQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.112.0/21 Signature Algorithm: sha256WithRSAEncryption 18:38:e0:a3:98:ee:28:40:85:4d:5f:ef:2c:5c:2a:fe:29:ea: e2:79:4d:5b:19:44:2e:26:22:2a:67:51:c7:13:80:3d:57:9c: 19:4c:4f:cb:3a:f4:46:9d:2f:00:e6:78:c6:3b:a5:4c:da:6c: 2e:19:be:78:ad:db:cd:00:fb:93:ed:70:f3:14:ac:b2:e9:db: ff:18:a6:73:60:92:08:6c:5c:a2:9d:eb:c8:c1:da:6d:23:6e: 2e:08:e5:f5:15:fc:5a:1c:84:01:e9:72:77:2f:1f:44:98:ed: 35:b8:95:3c:99:0e:ed:be:02:27:44:14:d4:59:26:ed:fc:f3: e9:19:c5:e6:61:76:82:ce:dd:28:cb:b4:e3:00:b7:e0:0d:7f: 48:77:03:66:61:b6:92:a8:24:7c:f0:bb:18:69:e0:6b:2b:31: c2:3c:0d:31:31:6f:d1:2a:79:51:cc:c9:f9:27:85:ca:82:29: fd:78:4a:99:42:4a:12:b0:00:3b:5f:6c:37:c8:2c:af:37:11: df:41:de:17:74:1e:3f:be:5c:0a:6c:5f:ff:f8:50:9b:87:19: 8a:ba:30:fb:f4:7c:8d:bb:89:7d:f8:c9:06:88:90:7a:ca:0b: bc:a3:76:84:d5:be:bc:b5:25:09:79:f1:72:fa:cf:62:34:a3: 12:fb:e6:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU2NTgxMjJENUE5NTc4 M0Y3RTg5MTNFMkRDQ0Y1MkVDNzA1RjRBQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAiPP4crEj87jzTTslFB6FTnm3OqQisF66ARpb1TdnjqveGZnc PvgS2+2/TPoY4KZ9M5/+dTCaR/NFZi9lKEakbyzRnbJnr7SIkBR9ZFUsDcvIt7+7 4921i4CkkR5AuDk7q6d/j/z9TtyH/nLCixIeQ+ZyEQwFBZ1hgy+xEQ7rAfKgtck9 ++yPOuekxO7srDRNaRDle9ZKvUUVsnQ1D/yMKpBOa2fW0X8x3q1dhIJlosHiZj8Y MZffQBppXRBu48iqvnYJMkHwGp7Se6dcx9uwu4oCnrI0lE0rDNaRG8dikVK+l81d 5YjxsaX+jySl2RIaptXQf6cT5GOuYzeGXnjxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVlgSLVqVeD9+iRPi3M9S7HBfSrQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZsZ1NMVnFWZUQ5LWlSUGkz TTlTN0hCZlNyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wXAwDQYJKoZIhvcNAQELBQADggEBABg44KOY7ihAhU1f7yxcKv4p6uJ5TVsZRC4m IipnUccTgD1XnBlMT8s69EadLwDmeMY7pUzabC4Zvnit280A+5PtcPMUrLLp2/8Y pnNgkghsXKKd68jB2m0jbi4I5fUV/FochAHpcncvH0SY7TW4lTyZDu2+AidEFNRZ Ju388+kZxeZhdoLO3SjLtOMAt+ANf0h3A2ZhtpKoJHzwuxhp4GsrMcI8DTExb9Eq eVHMyfknhcqCKf14SplCShKwADtfbDfILK83Ed9B3hd0Hj++XApsX//4UJuHGYq6 MPv0fI27iX34yQaIkHrKC7yjdoTVvry1JQl58XL6z2I0oxL75qA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:49 2025 by rpki-client on console.sobornost.net