$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iHHnWOwiS3XNQ1kmC8z0bbmzNpc.roa File: iHHnWOwiS3XNQ1kmC8z0bbmzNpc.roa (raw, json) Hash identifier: Cgld4iWFAwzx+d29IeeQZXh4bBhtCx8YiNLwk08N0RE= Subject key identifier: 88:71:E7:58:EC:22:4B:75:CD:43:59:26:0B:CC:F4:6D:B9:B3:36:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3437 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iHHnWOwiS3XNQ1kmC8z0bbmzNpc.roa Signing time: Mon 10 Feb 2025 13:52:11 +0000 ROA not before: Mon 10 Feb 2025 13:52:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13367 (0x3437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8871E758EC224B75CD4359260BCCF46DB9B33697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:00:9f:5b:2c:2a:45:0c:8d:9c:df:64:74: 86:94:f6:30:dc:92:2b:c2:1e:19:55:a3:ac:46:c7: 8a:23:be:26:31:a6:44:84:5d:06:e7:ba:d0:d9:4b: 86:3e:b8:d1:3b:9a:b3:c0:60:22:97:e9:34:b4:6c: b0:ea:91:eb:d1:99:81:c5:00:30:e1:65:98:c0:22: e6:10:c6:45:f4:d5:86:84:28:44:cc:55:9f:df:2c: d2:96:93:67:13:ed:09:2d:f1:11:09:82:ef:fc:84: 78:e9:a8:d6:2a:c8:ce:78:37:02:f9:ce:ff:9c:8d: 38:81:e7:40:c6:72:e4:5d:b9:49:d6:50:26:13:f2: 3b:6d:8a:ee:ce:38:2d:6a:0c:11:a6:9c:0d:65:37: 04:15:37:5a:8f:c1:4d:12:57:98:d7:42:26:0e:4d: c2:79:df:f4:be:b9:54:a0:e7:f5:e7:d0:e4:e8:17: 4a:d5:7e:a3:89:eb:42:1c:c3:1a:9d:72:ef:52:8e: fb:82:fc:38:10:a1:c3:5c:ea:39:4a:5f:ab:2d:95: c6:a4:73:af:84:50:fb:c9:62:d5:b6:2f:e0:69:49: 24:82:cf:8d:b6:78:da:d3:46:22:26:d4:ac:0c:9b: a6:12:8b:fb:8c:59:c6:50:2b:b3:2f:cf:e9:2d:94: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:71:E7:58:EC:22:4B:75:CD:43:59:26:0B:CC:F4:6D:B9:B3:36:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iHHnWOwiS3XNQ1kmC8z0bbmzNpc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.208.0/21 Signature Algorithm: sha256WithRSAEncryption 79:1f:2a:55:fe:1a:8f:ac:ad:57:cd:83:b7:f5:42:be:77:c6: b1:b3:b3:9b:ac:e8:20:7c:a0:55:f7:54:26:d3:0c:a7:27:9a: ef:65:f7:8d:8f:7d:8a:62:26:87:b7:f7:86:c0:a1:47:9b:91: 7a:1f:79:db:3a:a2:31:16:87:d1:c6:b2:73:9e:db:5f:71:70: 81:76:47:22:d8:2a:42:c2:f2:fd:3c:00:0a:cf:47:21:49:72: 11:c8:2a:9a:e5:38:d5:4e:05:ba:86:a8:7b:d5:7c:c1:6f:65: 03:bf:7b:d8:23:5e:26:34:7d:b9:47:37:3f:89:27:ac:e6:0e: 85:dc:a6:f3:1e:dd:bc:03:92:04:70:86:86:31:29:e1:a2:74: a3:8a:b6:53:d9:66:a3:88:8d:c4:71:08:20:fb:8e:39:cb:1a: e2:f7:5f:8d:1e:c8:7b:36:aa:f3:9e:9c:4f:d1:4a:86:59:f0: 49:4c:d3:ce:f9:bf:ef:25:1e:33:58:83:a7:55:d6:d8:29:bf: da:a5:08:a1:79:b0:e0:ae:52:1d:0e:43:0f:f3:97:70:fb:1f: d1:b6:7d:20:23:e8:66:f4:b7:01:0f:4a:bd:3e:7f:9c:04:4a: 18:81:c2:f2:79:6b:2a:26:03:9c:85:82:18:bb:c6:f3:0a:2b: bd:eb:0b:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4NzFFNzU4RUMyMjRC NzVDRDQzNTkyNjBCQ0NGNDZEQjlCMzM2OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYCwCfWywqRQyNnN9kdIaU9jDckivCHhlVo6xGx4ojviYxpkSE XQbnutDZS4Y+uNE7mrPAYCKX6TS0bLDqkevRmYHFADDhZZjAIuYQxkX01YaEKETM VZ/fLNKWk2cT7Qkt8REJgu/8hHjpqNYqyM54NwL5zv+cjTiB50DGcuRduUnWUCYT 8jttiu7OOC1qDBGmnA1lNwQVN1qPwU0SV5jXQiYOTcJ53/S+uVSg5/Xn0OToF0rV fqOJ60Icwxqdcu9SjvuC/DgQocNc6jlKX6stlcakc6+EUPvJYtW2L+BpSSSCz422 eNrTRiIm1KwMm6YSi/uMWcZQK7Mvz+ktlI7tAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiHHnWOwiS3XNQ1kmC8z0bbmzNpcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lISG5XT3dpUzNYTlExa21D OHowYmJtek5wYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w9AwDQYJKoZIhvcNAQELBQADggEBAHkfKlX+Go+srVfNg7f1Qr53xrGzs5us6CB8 oFX3VCbTDKcnmu9l942PfYpiJoe394bAoUebkXofeds6ojEWh9HGsnOe219xcIF2 RyLYKkLC8v08AArPRyFJchHIKprlONVOBbqGqHvVfMFvZQO/e9gjXiY0fblHNz+J J6zmDoXcpvMe3bwDkgRwhoYxKeGidKOKtlPZZqOIjcRxCCD7jjnLGuL3X40eyHs2 qvOenE/RSoZZ8ElM0875v+8lHjNYg6dV1tgpv9qlCKF5sOCuUh0OQw/zl3D7H9G2 fSAj6Gb0twEPSr0+f5wEShiBwvJ5ayomA5yFghi7xvMKK73rCyk= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:51 2025 by rpki-client on console.sobornost.net