$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YAjolhZqRKGG39jramtb35kS278.roa File: YAjolhZqRKGG39jramtb35kS278.roa (raw, json) Hash identifier: buZWveI0pZnKaDPI1ySTrmCI++MckCN2yzSbDyOgiuE= Subject key identifier: 60:08:E8:96:16:6A:44:A1:86:DF:D8:EB:6A:6B:5B:DF:99:12:DB:BF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 343D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YAjolhZqRKGG39jramtb35kS278.roa Signing time: Mon 10 Feb 2025 13:52:11 +0000 ROA not before: Mon 10 Feb 2025 13:52:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13373 (0x343d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6008E896166A44A186DFD8EB6A6B5BDF9912DBBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:aa:ca:d9:74:17:00:da:c0:55:04:b2:a5: 5d:6d:19:6e:40:7f:8b:10:73:6e:38:3b:94:08:3e: b1:36:d4:ce:c2:a4:69:40:2a:cd:17:1a:b5:e0:83: a2:89:d6:79:6c:60:2f:d1:16:b7:d1:d8:5e:fd:59: e8:22:af:6e:4d:dc:a7:d7:82:84:1d:4c:9e:f1:0b: 4e:88:c9:9d:36:63:2d:46:ef:92:06:fb:f0:13:b1: bf:27:0b:c0:4b:3a:3b:f6:33:f1:b5:ca:57:f8:32: ba:97:55:ff:d3:82:ea:8c:65:20:6d:dd:b4:91:44: 3a:de:cd:39:92:93:00:66:8d:ba:f4:0f:2f:86:01: cf:09:8a:1f:bb:f0:e9:c2:3e:50:42:22:c5:0f:18: d0:ac:8b:ab:86:0b:4c:eb:19:f7:d5:84:9c:b2:81: ac:e6:6b:22:4c:e4:28:41:78:17:8e:cf:4c:b0:a6: 89:23:c5:39:cc:1f:4a:70:c0:4f:9c:fc:0a:17:4a: 08:df:6f:2f:67:0e:ef:9a:ca:2e:a3:9e:28:46:11: d9:68:39:02:8a:b1:49:72:e2:fb:3b:d2:84:ee:04: 3e:3c:32:19:2b:21:aa:b4:a1:b3:ef:80:a8:3e:16: 09:94:6f:c9:17:23:92:99:8a:87:10:13:8a:10:c6: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:E8:96:16:6A:44:A1:86:DF:D8:EB:6A:6B:5B:DF:99:12:DB:BF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YAjolhZqRKGG39jramtb35kS278.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.92.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:b0:6a:62:1f:21:b1:f2:91:aa:7b:89:cd:c5:1f:23:be:89: 16:bf:75:13:49:b6:01:f3:87:32:42:83:1f:5a:10:85:bb:35: 6f:bc:f4:f8:14:9e:10:e4:2a:cf:fe:90:52:dd:c6:16:b6:0a: 51:0b:7b:41:60:da:89:7a:03:e1:c5:03:3f:0d:11:25:30:14: d6:74:1e:72:30:7d:40:09:bf:60:18:91:4a:17:ad:81:10:d8: be:cc:89:43:f2:b5:46:d0:7f:6f:c1:44:72:0f:f0:a0:9c:63: 89:d7:4d:35:9d:07:0d:74:2f:13:bf:0c:e9:dc:10:bb:74:bd: 73:b9:96:5d:6f:48:c7:c8:98:9e:fa:48:8e:d4:c5:f6:6b:08: cb:ca:21:48:d4:34:38:e1:b9:ef:24:65:80:2e:25:9e:b0:f9: 0f:7e:0b:10:55:0d:29:4c:47:05:35:91:bc:0b:9f:50:1c:8c: e8:90:e7:7e:47:2d:f2:04:67:cd:bb:1e:59:54:ac:8b:f5:5e: 6d:ec:1b:9c:70:3e:9b:2c:b9:a5:c9:70:6b:cd:89:c9:91:56: 1d:d9:07:1f:c8:bd:dc:4d:7e:98:2d:ed:d6:17:c9:e5:4a:e7: d2:7b:d1:72:6a:f5:82:fa:a0:df:6e:aa:70:7c:ad:ff:f1:4e: 4d:85:56:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICND0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwMDhFODk2MTY2QTQ0 QTE4NkRGRDhFQjZBNkI1QkRGOTkxMkRCQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAEqrK2XQXANrAVQSypV1tGW5Af4sQc244O5QIPrE21M7CpGlA Ks0XGrXgg6KJ1nlsYC/RFrfR2F79Wegir25N3KfXgoQdTJ7xC06IyZ02Yy1G75IG +/ATsb8nC8BLOjv2M/G1ylf4MrqXVf/TguqMZSBt3bSRRDrezTmSkwBmjbr0Dy+G Ac8Jih+78OnCPlBCIsUPGNCsi6uGC0zrGffVhJyygazmayJM5ChBeBeOz0ywpokj xTnMH0pwwE+c/AoXSgjfby9nDu+ayi6jnihGEdloOQKKsUly4vs70oTuBD48Mhkr Iaq0obPvgKg+FgmUb8kXI5KZiocQE4oQxqalAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYAjolhZqRKGG39jramtb35kS278wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lBam9saFpxUktHRzM5anJh bXRiMzVrUzI3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wVwwDQYJKoZIhvcNAQELBQADggEBAG+wamIfIbHykap7ic3FHyO+iRa/dRNJtgHz hzJCgx9aEIW7NW+89PgUnhDkKs/+kFLdxha2ClELe0Fg2ol6A+HFAz8NESUwFNZ0 HnIwfUAJv2AYkUoXrYEQ2L7MiUPytUbQf2/BRHIP8KCcY4nXTTWdBw10LxO/DOnc ELt0vXO5ll1vSMfImJ76SI7UxfZrCMvKIUjUNDjhue8kZYAuJZ6w+Q9+CxBVDSlM RwU1kbwLn1AcjOiQ535HLfIEZ827HllUrIv1Xm3sG5xwPpssuaXJcGvNicmRVh3Z Bx/IvdxNfpgt7dYXyeVK59J70XJq9YL6oN9uqnB8rf/xTk2FVnQ= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:49 2025 by rpki-client on console.sobornost.net