$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJgj97cP6SwRGp0Ax876rCQSCxw.roa File: lJgj97cP6SwRGp0Ax876rCQSCxw.roa (raw, json) Hash identifier: aj+JKsJkmU8Ymjc5L3PO5lkr3Q6fHvV1rlUQof2lrck= Subject key identifier: 94:98:23:F7:B7:0F:E9:2C:11:1A:9D:00:C7:CE:FA:AC:24:12:0B:1C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3391 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJgj97cP6SwRGp0Ax876rCQSCxw.roa Signing time: Mon 10 Feb 2025 13:51:33 +0000 ROA not before: Mon 10 Feb 2025 13:51:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13201 (0x3391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=949823F7B70FE92C111A9D00C7CEFAAC24120B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c9:e7:85:23:7d:ea:16:0d:5f:b0:8a:69:7c: 50:43:ec:e1:ac:fd:fe:07:5d:2f:7f:44:71:8c:8f: dc:34:fd:62:20:f2:7e:9a:31:71:b1:4d:01:38:15: e3:f2:ba:42:ab:0d:61:83:72:ad:d9:6e:76:c2:33: 30:1b:65:1c:88:f4:d5:c8:02:5d:29:96:e5:b5:c1: 86:17:3d:78:40:6f:4a:bc:68:fc:81:9e:48:37:70: 03:fa:43:d5:f7:a9:e8:d3:e7:fa:c2:74:ae:e9:c3: b2:82:f6:d3:36:68:a2:de:3b:a8:1c:a1:b9:11:5c: e3:bc:ae:57:33:92:73:8d:99:41:b7:98:1b:5f:b1: 0f:40:e6:ac:72:47:e8:15:8d:d7:23:78:48:b7:eb: 02:27:06:87:d6:67:48:86:71:35:55:cb:e1:e7:4d: ff:b4:83:0a:6a:1e:ff:d5:8a:71:36:d9:d7:4d:80: 01:85:55:ab:95:7b:8d:d6:db:fd:6a:95:36:51:9c: 1a:38:8f:28:c0:9a:a2:11:9b:ef:6f:ea:d1:dc:2c: c3:41:83:d2:cd:3b:b9:9e:72:9d:78:7c:38:bd:db: 66:97:86:c2:05:3d:6c:47:d4:4b:43:af:14:6e:89: a6:f6:73:e1:a0:b7:7f:88:27:c4:e3:3b:c5:5c:a1: 76:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:98:23:F7:B7:0F:E9:2C:11:1A:9D:00:C7:CE:FA:AC:24:12:0B:1C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJgj97cP6SwRGp0Ax876rCQSCxw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.136.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:03:7f:88:67:7d:73:1c:09:33:34:72:85:8e:81:a3:53:5e: c5:91:1f:a1:2e:a1:80:cb:0d:85:b9:df:21:a0:1d:fe:19:82: ee:d7:7d:c8:ff:ff:7d:5e:29:8e:69:04:3c:61:48:3f:69:5f: 60:00:c4:08:ab:64:60:b0:cc:b3:49:f5:2e:c4:63:d9:1b:59: fb:ee:ab:5d:e8:45:77:1a:43:0b:c9:62:98:29:79:48:88:8a: 1d:dc:46:47:72:f2:46:0a:aa:7c:57:aa:37:2e:03:f0:4b:f9: 58:7d:c1:87:e7:fe:8d:44:bc:71:72:4c:f8:0d:48:8e:50:54: c6:33:bc:d1:83:52:4c:be:78:21:90:77:ea:b3:b6:81:68:c6: 5b:9f:5d:06:59:00:ce:e6:6b:89:95:c4:0c:dd:68:16:5d:50: f2:58:2a:86:41:66:9f:5c:be:0a:5b:f6:b7:f5:7f:14:65:2b: 50:77:1d:58:db:95:7d:d3:d2:29:ec:17:f8:0b:aa:f1:b7:d5: 26:00:b5:09:1a:45:01:e3:21:db:ac:22:05:a9:c4:16:13:c3: 0c:de:2f:41:94:e3:86:44:36:46:3d:ac:f6:40:93:05:84:33: d7:14:1e:82:36:ad:91:d1:ab:de:6f:71:33:8a:5d:ee:36:4a: 7c:dd:ba:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM5EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0OTgyM0Y3QjcwRkU5 MkMxMTFBOUQwMEM3Q0VGQUFDMjQxMjBCMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdyeeFI33qFg1fsIppfFBD7OGs/f4HXS9/RHGMj9w0/WIg8n6a MXGxTQE4FePyukKrDWGDcq3ZbnbCMzAbZRyI9NXIAl0pluW1wYYXPXhAb0q8aPyB nkg3cAP6Q9X3qejT5/rCdK7pw7KC9tM2aKLeO6gcobkRXOO8rlczknONmUG3mBtf sQ9A5qxyR+gVjdcjeEi36wInBofWZ0iGcTVVy+HnTf+0gwpqHv/VinE22ddNgAGF VauVe43W2/1qlTZRnBo4jyjAmqIRm+9v6tHcLMNBg9LNO7mecp14fDi922aXhsIF PWxH1EtDrxRuiab2c+Ggt3+IJ8TjO8VcoXZ1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlJgj97cP6SwRGp0Ax876rCQSCxwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xKZ2o5N2NQNlN3UkdwMEF4 ODc2ckNRU0N4dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wYgwDQYJKoZIhvcNAQELBQADggEBAH0Df4hnfXMcCTM0coWOgaNTXsWRH6EuoYDL DYW53yGgHf4Zgu7Xfcj//31eKY5pBDxhSD9pX2AAxAirZGCwzLNJ9S7EY9kbWfvu q13oRXcaQwvJYpgpeUiIih3cRkdy8kYKqnxXqjcuA/BL+Vh9wYfn/o1EvHFyTPgN SI5QVMYzvNGDUky+eCGQd+qztoFoxlufXQZZAM7ma4mVxAzdaBZdUPJYKoZBZp9c vgpb9rf1fxRlK1B3HVjblX3T0insF/gLqvG31SYAtQkaRQHjIdusIgWpxBYTwwze L0GU44ZENkY9rPZAkwWEM9cUHoI2rZHRq95vcTOKXe42SnzdujE= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:51 2025 by rpki-client on console.sobornost.net