$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kXxmBdwU5yupealEAWoDPFIDS0o.roa File: kXxmBdwU5yupealEAWoDPFIDS0o.roa (raw, json) Hash identifier: mc/Bgd5Dcb2qx5YY0j6MloBSED1p8j11a3Rwb45Zfns= Subject key identifier: 91:7C:66:05:DC:14:E7:2B:A9:79:A9:44:01:6A:03:3C:52:03:4B:4A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35CE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kXxmBdwU5yupealEAWoDPFIDS0o.roa Signing time: Mon 10 Feb 2025 13:53:43 +0000 ROA not before: Mon 10 Feb 2025 13:53:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 180.176.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13774 (0x35ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=917C6605DC14E72BA979A944016A033C52034B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:98:d3:03:f1:64:13:c9:b1:0e:41:12:7d: d4:57:91:3d:9e:96:94:bb:4d:81:ea:05:dc:0d:6e: f7:1b:c3:80:3b:27:9a:8d:a5:16:51:3c:31:a3:56: fd:5c:04:e2:d8:57:c3:c4:75:b1:92:69:52:eb:b9: cf:e4:a0:19:0f:08:af:14:af:c2:a0:b0:3e:16:94: e2:1f:1b:7b:73:5d:dd:ed:23:d5:1f:de:cd:4c:92: 00:a0:3e:6f:cc:96:fc:e6:f6:0a:94:7a:ff:aa:c0: fb:58:f0:34:af:67:5e:e3:22:70:b7:0a:9e:15:11: d9:b2:c0:c0:08:d0:6a:67:59:bf:1f:22:27:ce:60: b5:3a:d1:c9:d2:b3:57:09:ae:02:78:cd:9d:ce:2c: 35:fd:0d:50:f5:b8:ef:8d:fc:00:aa:a5:29:33:02: b8:de:f7:07:8d:5a:e0:97:df:9a:38:b0:a4:db:11: bc:00:b1:94:55:e4:cb:2a:8c:ad:5a:e0:ff:a0:08: d6:ec:cd:4e:43:cf:30:79:c5:87:20:a3:68:20:ef: 5f:c4:b3:40:bb:0a:c9:52:59:16:76:05:e0:50:67: 65:6c:7d:0b:ae:a8:e1:98:fc:6b:8c:45:74:60:95: 93:48:3d:07:d3:c0:bf:b5:65:9c:b8:a7:e6:e1:08: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:66:05:DC:14:E7:2B:A9:79:A9:44:01:6A:03:3C:52:03:4B:4A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kXxmBdwU5yupealEAWoDPFIDS0o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.72.0/22 Signature Algorithm: sha256WithRSAEncryption 54:ea:73:01:48:31:5a:da:b3:6e:7f:6c:5c:f7:41:61:55:e6: de:5b:3f:3b:c6:9d:a1:d2:1a:05:ee:a1:9f:21:16:70:9d:99: 29:84:59:ad:7c:d8:fe:d1:32:48:90:fc:29:f0:57:b7:f1:2d: 4c:75:7b:06:53:55:5b:88:1e:b9:1c:cc:65:4a:77:56:38:51: 5b:03:0e:6f:d8:d0:95:26:13:eb:1b:c1:ce:8c:54:99:64:68: 54:54:26:09:c1:df:5e:6f:d7:de:b9:2d:f2:ad:0b:ef:4e:53: 02:33:f0:35:65:cc:29:f5:84:e2:e2:0a:21:61:e0:b3:16:a1: 42:41:09:3b:56:b5:43:f2:0a:b7:12:99:c2:34:96:80:45:28: 7a:ef:38:2c:02:e3:da:db:8d:70:ef:c5:8b:9d:e9:da:63:46: 15:ca:d0:86:63:2a:05:c5:bd:74:f7:b9:cf:c3:0e:71:96:0c: 62:c6:02:44:38:70:f5:ab:02:29:ae:49:31:af:d3:6f:f3:f5: bd:b5:4f:2b:db:73:7c:eb:63:61:02:a8:ac:a2:0a:a9:6c:bc: 70:63:ec:be:a2:f2:4e:76:f1:c5:93:ff:d2:d1:3e:8a:c6:17: a0:49:6d:df:19:05:da:16:34:bc:b8:c3:6e:26:8f:97:92:9d: 21:67:d1:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkxN0M2NjA1REMxNEU3 MkJBOTc5QTk0NDAxNkEwMzNDNTIwMzRCNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDdpjTA/FkE8mxDkESfdRXkT2elpS7TYHqBdwNbvcbw4A7J5qN pRZRPDGjVv1cBOLYV8PEdbGSaVLruc/koBkPCK8Ur8KgsD4WlOIfG3tzXd3tI9Uf 3s1MkgCgPm/Mlvzm9gqUev+qwPtY8DSvZ17jInC3Cp4VEdmywMAI0GpnWb8fIifO YLU60cnSs1cJrgJ4zZ3OLDX9DVD1uO+N/ACqpSkzArje9weNWuCX35o4sKTbEbwA sZRV5MsqjK1a4P+gCNbszU5DzzB5xYcgo2gg71/Es0C7CslSWRZ2BeBQZ2VsfQuu qOGY/GuMRXRglZNIPQfTwL+1ZZy4p+bhCJUrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkXxmBdwU5yupealEAWoDPFIDS0owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tYeG1CZHdVNXl1cGVhbEVB V29EUEZJRFMwby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sEgwDQYJKoZIhvcNAQELBQADggEBAFTqcwFIMVras25/bFz3QWFV5t5bPzvGnaHS GgXuoZ8hFnCdmSmEWa182P7RMkiQ/CnwV7fxLUx1ewZTVVuIHrkczGVKd1Y4UVsD Dm/Y0JUmE+sbwc6MVJlkaFRUJgnB315v1965LfKtC+9OUwIz8DVlzCn1hOLiCiFh 4LMWoUJBCTtWtUPyCrcSmcI0loBFKHrvOCwC49rbjXDvxYud6dpjRhXK0IZjKgXF vXT3uc/DDnGWDGLGAkQ4cPWrAimuSTGv02/z9b21Tyvbc3zrY2ECqKyiCqlsvHBj 7L6i8k528cWT/9LRPorGF6BJbd8ZBdoWNLy4w24mj5eSnSFn0eo= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:51 2025 by rpki-client on console.sobornost.net