$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e_iAmQOPX6MbeDEINiRm91DQl3Y.roa File: e_iAmQOPX6MbeDEINiRm91DQl3Y.roa (raw, json) Hash identifier: 11fxIj1+qagxybRiDedtlO3omMT+DqpguAhi/liomPs= Subject key identifier: 7B:F8:80:99:03:8F:5F:A3:1B:78:31:08:36:24:66:F7:50:D0:97:76 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33A2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e_iAmQOPX6MbeDEINiRm91DQl3Y.roa Signing time: Mon 10 Feb 2025 13:51:36 +0000 ROA not before: Mon 10 Feb 2025 13:51:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.111.192/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13218 (0x33a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7BF88099038F5FA31B783108362466F750D09776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:3f:94:e0:eb:2c:26:49:96:1c:e7:23:09: d9:17:f1:60:43:4a:ba:6a:df:70:33:e4:c5:05:65: 3f:db:34:24:c8:5a:10:a4:8a:be:b2:57:19:d6:13: 5f:48:57:71:13:17:19:77:85:a1:6a:03:89:3d:b8: 85:c4:70:7a:cd:56:37:f2:3c:f3:63:ad:a2:69:37: 94:9f:53:ba:9a:b9:b4:e1:3a:75:00:c1:d8:c4:8e: 4d:71:e0:57:05:f4:7b:97:41:73:83:a8:eb:e1:29: 85:67:f9:60:dc:84:79:69:08:47:61:aa:ee:c4:66: 0d:c3:4f:a7:b9:82:d6:41:6d:9d:f7:b9:b2:53:e7: 29:7e:f1:47:a3:94:f7:1c:ed:6b:29:c8:a3:a1:06: 95:ac:01:14:4d:c6:ef:ad:ca:98:30:8f:c9:12:c3: 2e:5f:a2:77:8a:6a:fe:c3:2f:a1:6e:25:90:50:a7: 14:9b:00:33:79:f9:91:41:ba:df:52:42:8d:74:a9: 45:80:97:36:15:f2:95:7a:19:ac:95:f2:a8:65:8d: d9:19:81:83:30:10:83:87:c1:e5:e0:22:4a:83:ae: 38:c8:09:c0:16:71:b6:12:0b:c1:cb:2a:df:05:a4: 68:14:6a:64:9b:23:b4:00:33:11:c6:c1:9c:18:b3: e8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F8:80:99:03:8F:5F:A3:1B:78:31:08:36:24:66:F7:50:D0:97:76 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e_iAmQOPX6MbeDEINiRm91DQl3Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.111.192/28 Signature Algorithm: sha256WithRSAEncryption 8c:9f:f3:b2:e5:08:f2:65:4b:b5:f3:a6:76:88:f7:bc:e6:94: 30:3c:fa:80:6d:06:d7:83:69:a3:64:07:90:c5:d7:ad:bc:1b: 97:f1:48:33:f8:1d:d1:45:1c:f4:3a:7e:f7:b0:ea:db:51:2f: c4:8b:e3:22:88:12:c3:c0:83:c4:8a:ce:1d:9d:89:20:d4:9a: b1:f3:55:ce:1c:d4:b9:4c:b6:15:dc:b3:f6:81:66:8a:94:94: 53:0c:a2:77:8d:43:6b:99:20:6e:93:16:6c:08:56:5c:fd:65: 65:ae:cc:5c:20:a3:a7:60:a3:4b:3e:87:45:93:c5:06:29:90: e1:ed:1a:e2:1e:c0:4e:fa:c5:cb:aa:fa:c2:4c:6d:c4:eb:42: 32:45:64:d9:6b:0e:22:cb:c3:95:55:36:d4:5d:b7:e6:02:96: d6:b0:b0:ef:dd:e7:15:ac:3c:3b:b8:a9:d0:a6:6b:8d:6d:47: e3:e3:67:a3:fb:fa:b2:27:b4:1e:e3:e0:60:fc:1f:21:3c:80: 67:71:e7:b9:70:50:9b:45:c7:28:33:e0:f3:24:19:9a:78:42: 9e:04:84:d5:f4:b4:f3:fc:62:6b:a9:f4:cc:e6:e3:5f:a2:e3: d9:f4:2f:c2:1f:8b:26:44:fa:1c:40:eb:1c:3f:e1:42:7b:6d: b6:9a:5c:0f -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICM6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdCRjg4MDk5MDM4RjVG QTMxQjc4MzEwODM2MjQ2NkY3NTBEMDk3NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ej+U4OssJkmWHOcjCdkX8WBDSrpq33Az5MUFZT/bNCTIWhCk ir6yVxnWE19IV3ETFxl3haFqA4k9uIXEcHrNVjfyPPNjraJpN5SfU7qaubThOnUA wdjEjk1x4FcF9HuXQXODqOvhKYVn+WDchHlpCEdhqu7EZg3DT6e5gtZBbZ33ubJT 5yl+8UejlPcc7WspyKOhBpWsARRNxu+typgwj8kSwy5foneKav7DL6FuJZBQpxSb ADN5+ZFBut9SQo10qUWAlzYV8pV6GayV8qhljdkZgYMwEIOHweXgIkqDrjjICcAW cbYSC8HLKt8FpGgUamSbI7QAMxHGwZwYs+jNAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUe/iAmQOPX6MbeDEINiRm91DQl3YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VfaUFtUU9QWDZNYmVERUlO aVJtOTFEUWwzWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7 wW/AMA0GCSqGSIb3DQEBCwUAA4IBAQCMn/Oy5QjyZUu186Z2iPe85pQwPPqAbQbX g2mjZAeQxdetvBuX8Ugz+B3RRRz0On73sOrbUS/Ei+MiiBLDwIPEis4dnYkg1Jqx 81XOHNS5TLYV3LP2gWaKlJRTDKJ3jUNrmSBukxZsCFZc/WVlrsxcIKOnYKNLPodF k8UGKZDh7RriHsBO+sXLqvrCTG3E60IyRWTZaw4iy8OVVTbUXbfmApbWsLDv3ecV rDw7uKnQpmuNbUfj42ej+/qyJ7Qe4+Bg/B8hPIBncee5cFCbRccoM+DzJBmaeEKe BITV9LTz/GJrqfTM5uNfouPZ9C/CH4smRPocQOscP+FCe222mlwP -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:50 2025 by rpki-client on console.sobornost.net