$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aR6XYJksiVOGUZ99s6Bqu_ty5RY.roa File: aR6XYJksiVOGUZ99s6Bqu_ty5RY.roa (raw, json) Hash identifier: Locb6ycPYOiesyesHB9JnK97OKsZCMGgU7LSDrMAy+U= Subject key identifier: 69:1E:97:60:99:2C:89:53:86:51:9F:7D:B3:A0:6A:BB:FB:72:E5:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3649 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aR6XYJksiVOGUZ99s6Bqu_ty5RY.roa Signing time: Mon 10 Feb 2025 13:54:11 +0000 ROA not before: Mon 10 Feb 2025 13:54:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13897 (0x3649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=691E9760992C895386519F7DB3A06ABBFB72E516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e2:30:ab:33:e0:b9:95:dd:ac:0b:04:d1:fb: c1:29:8b:85:97:a2:0b:ba:33:d1:4c:f0:67:2a:69: 20:2e:d8:67:c3:17:e0:10:da:fe:59:83:3f:f7:e6: 87:bd:41:b5:8d:23:aa:b1:d6:e0:af:40:5f:a3:7b: 50:9d:e6:13:81:a0:7e:f6:59:c3:73:2c:af:45:1d: 3b:d3:6f:94:51:4e:64:a0:2c:76:95:9e:d0:fb:29: f9:ae:58:39:0d:70:d7:92:89:3c:05:f2:0d:34:2e: eb:ec:b9:0e:f2:0c:29:42:8a:cc:f1:84:38:a0:c5: 96:f4:4b:0b:23:7e:27:10:84:d8:eb:7d:9f:04:a2: 8c:49:78:94:4e:47:7c:cd:bc:65:ec:15:1c:f7:8d: e5:3e:f0:c7:e6:a6:24:80:15:91:b9:71:96:b4:ed: 6c:ae:1b:87:bc:00:8d:6c:08:9b:59:ec:3b:10:62: eb:e2:71:77:5b:51:a4:53:3a:5a:b1:85:06:1c:28: 03:ed:b6:03:34:c9:35:02:20:9a:87:77:7e:7c:6b: 5c:98:5a:34:cf:fe:5c:ed:0f:cb:dd:38:45:0a:6a: 40:af:1c:83:69:bf:03:57:17:44:11:f0:92:b6:ee: 75:64:5e:4c:ff:05:40:c3:8b:83:f9:53:0c:69:bf: ed:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1E:97:60:99:2C:89:53:86:51:9F:7D:B3:A0:6A:BB:FB:72:E5:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aR6XYJksiVOGUZ99s6Bqu_ty5RY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:df:14:2e:a7:a7:38:7d:f4:ce:66:53:7a:4d:77:e2:41:1c: 0a:78:49:43:fc:32:e8:2b:12:24:c2:2f:9b:1d:49:14:f0:65: c2:bf:5b:22:70:9b:92:ba:50:ba:4a:dd:9c:28:9d:e6:9c:92: 09:ba:ee:8c:dc:48:c0:6a:50:ed:03:e0:6a:9c:d4:08:3d:35: d4:d6:73:6b:a2:c9:3b:8f:10:6e:6e:3e:82:ec:70:26:f0:de: 0f:47:1e:da:58:62:30:e4:6f:66:d5:26:29:ff:38:1d:04:a1: e8:13:3f:06:a3:7f:6b:8e:82:bf:e2:da:6b:19:c2:0d:d0:59: 42:24:26:42:cd:1b:d1:08:48:82:cf:d1:ea:e5:7a:30:0e:91: c8:ea:34:0e:c9:dd:e7:75:3e:a3:ed:91:89:58:83:e1:39:70: 9a:fd:ee:4f:61:dd:5c:08:15:aa:b5:78:f0:02:c3:a5:78:cc: 2d:45:cf:74:2b:b4:58:08:67:88:1b:a9:e0:9c:92:16:dc:79: d1:d8:4a:44:36:73:55:09:b4:0c:45:d4:fe:dc:87:34:a4:1e: 3a:7a:b8:4d:b3:0f:b6:01:b8:29:d1:cb:cf:b3:a7:80:36:70: c4:21:2a:45:f3:ce:95:ca:79:48:3e:49:ce:ff:30:41:ed:9d: a6:42:9c:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY5MUU5NzYwOTkyQzg5 NTM4NjUxOUY3REIzQTA2QUJCRkI3MkU1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDm4jCrM+C5ld2sCwTR+8Epi4WXogu6M9FM8GcqaSAu2GfDF+AQ 2v5Zgz/35oe9QbWNI6qx1uCvQF+je1Cd5hOBoH72WcNzLK9FHTvTb5RRTmSgLHaV ntD7KfmuWDkNcNeSiTwF8g00LuvsuQ7yDClCiszxhDigxZb0SwsjficQhNjrfZ8E ooxJeJROR3zNvGXsFRz3jeU+8MfmpiSAFZG5cZa07WyuG4e8AI1sCJtZ7DsQYuvi cXdbUaRTOlqxhQYcKAPttgM0yTUCIJqHd358a1yYWjTP/lztD8vdOEUKakCvHINp vwNXF0QR8JK27nVkXkz/BUDDi4P5Uwxpv+0PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaR6XYJksiVOGUZ99s6Bqu/ty5RYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FSNlhZSmtzaVZPR1VaOTlz NkJxdV90eTVSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpAwDQYJKoZIhvcNAQELBQADggEBAG/fFC6npzh99M5mU3pNd+JBHAp4SUP8Mugr EiTCL5sdSRTwZcK/WyJwm5K6ULpK3Zwoneackgm67ozcSMBqUO0D4Gqc1Ag9NdTW c2uiyTuPEG5uPoLscCbw3g9HHtpYYjDkb2bVJin/OB0EoegTPwajf2uOgr/i2msZ wg3QWUIkJkLNG9EISILP0erlejAOkcjqNA7J3ed1PqPtkYlYg+E5cJr97k9h3VwI Faq1ePACw6V4zC1Fz3QrtFgIZ4gbqeCckhbcedHYSkQ2c1UJtAxF1P7chzSkHjp6 uE2zD7YBuCnRy8+zp4A2cMQhKkXzzpXKeUg+Sc7/MEHtnaZCnEI= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:50 2025 by rpki-client on console.sobornost.net