$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y-ks8PPEMQcwzYvU2VlIMS8GpvE.roa File: Y-ks8PPEMQcwzYvU2VlIMS8GpvE.roa (raw, json) Hash identifier: vS4h7Th6kgcXQcJ3TDSoJp8beHjB4BVBs+dBmp3Yyzc= Subject key identifier: 63:E9:2C:F0:F3:C4:31:07:30:CD:8B:D4:D9:59:48:31:2F:06:A6:F1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3625 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y-ks8PPEMQcwzYvU2VlIMS8GpvE.roa Signing time: Mon 10 Feb 2025 13:54:02 +0000 ROA not before: Mon 10 Feb 2025 13:54:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13861 (0x3625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=63E92CF0F3C4310730CD8BD4D95948312F06A6F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:2b:e1:b6:a8:11:a3:e2:4c:da:ff:1e:0b: 48:fc:94:f3:68:99:b0:e2:78:bc:20:99:6f:a5:5b: 09:e9:65:a9:cf:1e:fc:f8:4e:6f:9b:f2:99:4b:b2: f6:8d:e6:6e:16:03:67:16:32:c4:a5:b7:84:96:f6: b7:c0:d9:a2:e7:d3:52:c3:ac:16:49:91:63:63:51: 24:a0:3d:93:23:58:cb:c9:b4:d0:80:78:f7:cc:9d: e0:c4:dd:c3:57:f8:9b:a1:e2:35:2c:85:49:52:ed: 80:4f:d1:80:9c:2b:33:b5:27:3b:fc:46:ca:c5:4f: 30:7d:f1:5d:b7:35:66:28:d9:73:0f:09:62:7b:ba: 70:9b:16:ee:76:26:35:71:75:3d:d7:c9:bb:6a:d6: 10:01:d8:a3:77:0e:da:e3:f5:90:74:5f:cf:3e:80: d1:1e:ac:0b:d2:71:f0:75:61:19:66:81:ac:92:ea: f4:67:8b:07:fe:cd:16:93:9e:83:a7:e8:ee:46:e4: 97:1b:48:62:77:89:5d:de:63:ea:77:5f:86:e2:02: a7:e2:f2:73:54:5d:84:12:c2:ff:ef:7e:66:de:74: ca:a5:6e:d2:27:fe:81:b4:9e:eb:2c:b3:5a:53:94: 3d:86:4a:68:bd:74:fa:65:d3:0a:70:22:10:17:90: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:2C:F0:F3:C4:31:07:30:CD:8B:D4:D9:59:48:31:2F:06:A6:F1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y-ks8PPEMQcwzYvU2VlIMS8GpvE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.136.0/22 Signature Algorithm: sha256WithRSAEncryption 22:a6:87:0d:15:b6:94:0a:1c:e5:2f:95:f8:9c:6b:4a:04:18: 09:cf:23:cb:56:ca:ce:00:17:ff:9a:d8:66:0d:df:bf:b3:79: 42:fe:c1:2e:b7:87:6f:21:e4:cb:2a:a8:bb:a7:82:91:7b:4c: 4e:a3:81:9e:0f:22:13:5e:43:91:13:09:9a:ad:25:19:73:d8: 3a:7d:06:92:69:68:fc:e7:0d:32:bd:76:94:06:bc:a6:37:18: 5b:0c:ba:ef:38:87:af:03:ba:83:ed:2c:ad:32:5b:24:88:78: 50:5c:2a:46:c5:1a:83:a9:20:8b:cc:46:bd:d7:a5:d6:a4:8b: be:76:69:f8:aa:2b:cb:3b:ab:fd:c4:33:44:4a:0d:61:80:01: 95:c4:f6:b9:11:12:ae:7a:bb:97:c4:70:7e:61:94:1d:3d:50: 73:80:28:c1:95:7a:7a:18:99:59:5c:ab:2d:74:ce:c8:f1:2e: 92:36:be:4f:8a:d3:d2:a8:f4:f4:bd:d5:a9:dd:7f:19:ff:bd: 83:c7:50:85:cf:2d:d1:e1:79:ec:3e:6f:55:5e:08:1f:b0:46: b5:20:54:8c:64:b5:1f:4a:62:fa:18:79:6b:97:00:99:29:64: 6b:f8:4a:a6:fa:72:e1:6d:fe:ae:a8:7f:9a:95:7c:92:19:c4: e4:74:f3:b6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzRTkyQ0YwRjNDNDMx MDczMENEOEJENEQ5NTk0ODMxMkYwNkE2RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkISvhtqgRo+JM2v8eC0j8lPNombDieLwgmW+lWwnpZanPHvz4 Tm+b8plLsvaN5m4WA2cWMsSlt4SW9rfA2aLn01LDrBZJkWNjUSSgPZMjWMvJtNCA ePfMneDE3cNX+Juh4jUshUlS7YBP0YCcKzO1Jzv8RsrFTzB98V23NWYo2XMPCWJ7 unCbFu52JjVxdT3Xybtq1hAB2KN3Dtrj9ZB0X88+gNEerAvScfB1YRlmgayS6vRn iwf+zRaTnoOn6O5G5JcbSGJ3iV3eY+p3X4biAqfi8nNUXYQSwv/vfmbedMqlbtIn /oG0nusss1pTlD2GSmi9dPpl0wpwIhAXkIWzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUY+ks8PPEMQcwzYvU2VlIMS8GpvEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1kta3M4UFBFTVFjd3pZdlUy VmxJTVM4R3B2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sYgwDQYJKoZIhvcNAQELBQADggEBACKmhw0VtpQKHOUvlfica0oEGAnPI8tWys4A F/+a2GYN37+zeUL+wS63h28h5MsqqLungpF7TE6jgZ4PIhNeQ5ETCZqtJRlz2Dp9 BpJpaPznDTK9dpQGvKY3GFsMuu84h68DuoPtLK0yWySIeFBcKkbFGoOpIIvMRr3X pdaki752afiqK8s7q/3EM0RKDWGAAZXE9rkREq56u5fEcH5hlB09UHOAKMGVenoY mVlcqy10zsjxLpI2vk+K09Ko9PS91andfxn/vYPHUIXPLdHheew+b1VeCB+wRrUg VIxktR9KYvoYeWuXAJkpZGv4Sqb6cuFt/q6of5qVfJIZxOR087Y= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:49 2025 by rpki-client on console.sobornost.net