$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGY3KF92aunmf9CgHNX3vJFxkCM.roa File: kGY3KF92aunmf9CgHNX3vJFxkCM.roa (raw, json) Hash identifier: gS8ghbVulPl7MdHgv7DHH4FSfgfm+I9slZQa8pZBbv4= Subject key identifier: 90:66:37:28:5F:76:6A:E9:E6:7F:D0:A0:1C:D5:F7:BC:91:71:90:23 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33C2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGY3KF92aunmf9CgHNX3vJFxkCM.roa Signing time: Mon 10 Feb 2025 13:51:44 +0000 ROA not before: Mon 10 Feb 2025 13:51:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.177.47.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13250 (0x33c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=906637285F766AE9E67FD0A01CD5F7BC91719023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:b1:8c:e9:6a:cf:5a:0b:7d:1e:b9:6a:99: 3e:fa:7b:84:30:65:85:5c:fb:bc:50:3e:a9:95:b2: ba:7e:41:c2:8a:e3:ba:71:27:1b:ee:a9:91:2e:52: e4:5f:45:50:69:9d:89:d0:6f:31:10:d9:f8:16:57: a6:c9:35:e5:75:c9:d8:1a:d0:65:9d:b2:9d:59:d5: de:5a:2c:51:74:7b:01:c7:73:24:b5:cf:7b:4b:bd: 28:7c:7b:60:4e:43:1d:b0:a7:23:8c:78:a9:2c:6d: 23:93:04:a6:97:95:d3:7d:01:5d:c0:ae:07:d8:e5: cf:fc:93:e8:64:03:4e:7b:8e:e4:e0:6b:0a:79:28: 6c:74:8b:37:c5:d4:e7:ea:1f:7b:ea:8b:3c:d0:66: 38:14:43:7e:7e:4d:49:f8:ed:31:3a:30:cc:e7:41: ac:85:0c:04:01:f0:37:5c:40:f3:70:90:84:7b:6a: 3c:3c:45:56:87:f5:8d:e5:5c:60:c0:1e:e2:a1:4d: b4:b4:b0:02:94:67:63:6a:e2:6a:98:7b:59:9a:ab: 32:07:b1:f9:16:91:07:1c:50:83:22:2d:ba:a1:bc: a0:cd:69:3b:e6:9f:b2:69:8d:51:88:bf:e4:86:1a: b9:c6:b5:f2:c0:ba:6c:25:3c:21:71:46:62:50:4c: 7b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:66:37:28:5F:76:6A:E9:E6:7F:D0:A0:1C:D5:F7:BC:91:71:90:23 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGY3KF92aunmf9CgHNX3vJFxkCM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.47.0/26 Signature Algorithm: sha256WithRSAEncryption 95:d9:10:17:e6:31:12:40:05:d5:b6:0d:f8:74:62:c5:99:a2: ff:b7:bc:54:91:d4:64:e3:59:02:38:fa:49:d2:0c:0d:c8:74: f0:08:af:df:47:e6:90:e7:ba:dc:f7:a7:27:fe:20:38:70:a4: e7:ea:de:21:9e:db:1e:48:89:e2:c1:d0:3f:9f:ea:2c:63:5e: bc:46:d0:ae:e5:4a:08:5d:10:3b:d5:72:b8:23:b0:a9:ad:f3: 9b:a9:19:e2:0a:53:69:56:f7:9f:bb:22:62:1f:0c:33:ea:d9: f6:9e:ec:1d:b6:5a:cb:ad:a7:07:a1:81:75:86:71:af:73:29: e0:71:52:c1:61:28:95:d3:52:3e:cd:2d:ad:c1:8f:d6:31:ac: fb:eb:ca:30:42:86:36:b2:8b:f3:22:0e:0a:1a:15:d6:e1:ae: f0:3e:c0:59:a9:89:48:b5:82:49:08:c3:7f:e2:89:1b:3f:b7: 4b:40:b5:1b:77:08:d1:5a:dc:dc:93:fb:c2:3d:a8:3b:07:3e: 5b:61:83:b9:0e:c8:1e:1a:ad:35:2c:9e:c4:24:3e:67:c5:f5: e7:2c:32:af:fe:d3:49:7d:a1:49:4f:36:ae:21:74:c4:a6:f2: b9:a6:8c:b3:6a:f8:af:e4:3f:c7:56:65:2d:f5:f4:b6:3a:b3: c8:b9:ef:97 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICM8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwNjYzNzI4NUY3NjZB RTlFNjdGRDBBMDFDRDVGN0JDOTE3MTkwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClpbGM6WrPWgt9HrlqmT76e4QwZYVc+7xQPqmVsrp+QcKK47px JxvuqZEuUuRfRVBpnYnQbzEQ2fgWV6bJNeV1ydga0GWdsp1Z1d5aLFF0ewHHcyS1 z3tLvSh8e2BOQx2wpyOMeKksbSOTBKaXldN9AV3ArgfY5c/8k+hkA057juTgawp5 KGx0izfF1OfqH3vqizzQZjgUQ35+TUn47TE6MMznQayFDAQB8DdcQPNwkIR7ajw8 RVaH9Y3lXGDAHuKhTbS0sAKUZ2Nq4mqYe1maqzIHsfkWkQccUIMiLbqhvKDNaTvm n7JpjVGIv+SGGrnGtfLAumwlPCFxRmJQTHtLAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUkGY3KF92aunmf9CgHNX3vJFxkCMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tHWTNLRjkyYXVubWY5Q2dI TlgzdkpGeGtDTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQa0 sS8AMA0GCSqGSIb3DQEBCwUAA4IBAQCV2RAX5jESQAXVtg34dGLFmaL/t7xUkdRk 41kCOPpJ0gwNyHTwCK/fR+aQ57rc96cn/iA4cKTn6t4hntseSIniwdA/n+osY168 RtCu5UoIXRA71XK4I7CprfObqRniClNpVvefuyJiHwwz6tn2nuwdtlrLracHoYF1 hnGvcyngcVLBYSiV01I+zS2twY/WMaz768owQoY2sovzIg4KGhXW4a7wPsBZqYlI tYJJCMN/4okbP7dLQLUbdwjRWtzck/vCPag7Bz5bYYO5DsgeGq01LJ7EJD5nxfXn LDKv/tNJfaFJTzauIXTEpvK5poyzaviv5D/HVmUt9fS2OrPIue+X -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:51 2025 by rpki-client on console.sobornost.net