$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qawalgKc46ZQyEmnu4_wLx-mM9w.roa File: qawalgKc46ZQyEmnu4_wLx-mM9w.roa (raw, json) Hash identifier: xmmxjykWekQ9WhtFb2zxroKo+7/msM95vYGbDtE9vHw= Subject key identifier: A9:AC:1A:96:02:9C:E3:A6:50:C8:49:A7:BB:8F:F0:2F:1F:A6:33:DC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34F3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qawalgKc46ZQyEmnu4_wLx-mM9w.roa Signing time: Mon 10 Feb 2025 13:52:51 +0000 ROA not before: Mon 10 Feb 2025 13:52:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13555 (0x34f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A9AC1A96029CE3A650C849A7BB8FF02F1FA633DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:c6:5c:60:e5:4b:52:77:06:50:ef:b7:48: b9:76:df:fa:46:65:f6:3d:bd:a5:a7:cd:d9:6b:50: 2c:d3:89:5d:98:f9:6e:26:f0:2f:11:43:2c:fe:39: 3b:7b:bf:09:f5:67:81:f9:7f:92:44:ec:2c:fe:7f: 07:d4:83:0a:4d:f8:b5:00:a0:c6:39:9c:01:70:01: 0c:17:60:58:5c:b4:a3:aa:b9:01:f5:59:89:11:84: 89:d8:02:c5:f8:3d:e5:48:b0:09:f1:2e:3c:c9:43: 7e:6a:e6:5f:b3:16:fb:d0:f1:ed:00:85:3d:89:67: 72:cc:e5:23:17:8c:c9:f7:f1:93:91:cc:ac:89:bd: c4:35:07:d2:f7:8e:39:e9:b0:24:36:8d:51:b8:b7: 19:b5:da:b0:d6:8e:f0:86:03:ea:ca:e7:de:10:c6: 38:54:af:6c:a1:b4:da:f3:9d:a1:ab:7b:a0:ec:79: 36:3d:6f:8e:fd:bb:f1:ee:f0:2d:af:99:0d:4b:4e: 2d:31:4a:08:5f:0c:e7:46:0f:e9:09:a6:74:56:b5: 5e:08:2c:be:51:bd:1c:5d:11:4c:6e:63:09:1d:a7: 2d:45:bf:35:7a:0c:8b:a9:95:49:b1:b2:1f:f4:86: 9f:35:02:76:d6:65:68:dc:bb:c0:d9:69:e1:fc:27: 20:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AC:1A:96:02:9C:E3:A6:50:C8:49:A7:BB:8F:F0:2F:1F:A6:33:DC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qawalgKc46ZQyEmnu4_wLx-mM9w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.152.0/21 Signature Algorithm: sha256WithRSAEncryption b7:cf:ae:e6:ab:94:15:16:bc:4d:84:35:4a:fe:1f:9d:b1:c8: b7:5a:69:cc:83:66:dc:6e:50:ce:3f:92:70:a8:a7:75:83:66: 33:62:11:c6:2f:70:b5:dc:cc:0f:f6:8e:fd:13:ec:a9:77:57: 99:3b:9a:84:9a:51:76:ca:7f:65:97:07:d9:99:9b:4c:36:8e: 6b:db:e6:b2:4a:6e:93:3a:c3:69:70:5b:dc:96:2b:9b:b0:49: 87:3e:0d:90:ec:cd:15:74:55:99:15:1a:e1:ec:aa:55:56:2d: 84:0c:3e:c1:93:1a:7d:89:3d:5e:58:3f:58:89:5c:05:a6:6f: 29:c6:ee:30:1b:0d:4a:ab:4d:52:8c:82:5e:62:fb:5a:42:7d: d5:97:6e:a0:16:86:77:e3:58:8b:15:c8:89:a9:7a:04:11:12: a6:5b:11:42:15:c5:87:e9:0a:32:e0:6c:35:3c:ea:72:42:d4: 34:ff:57:c9:5e:6b:43:8a:89:32:81:36:b6:8e:69:77:b5:f4: 9b:0c:6b:2e:c4:09:79:56:5a:8c:ab:c3:2c:14:75:70:fb:0e: ee:53:20:d8:0c:6c:c0:ba:ab:15:8c:c5:8b:b0:23:0f:71:e6: 04:46:aa:59:5e:2f:45:67:e9:0f:e3:4e:c8:f1:a5:7d:5a:c2: 47:8c:07:03 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE5QUMxQTk2MDI5Q0Uz QTY1MEM4NDlBN0JCOEZGMDJGMUZBNjMzREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOe8ZcYOVLUncGUO+3SLl23/pGZfY9vaWnzdlrUCzTiV2Y+W4m 8C8RQyz+OTt7vwn1Z4H5f5JE7Cz+fwfUgwpN+LUAoMY5nAFwAQwXYFhctKOquQH1 WYkRhInYAsX4PeVIsAnxLjzJQ35q5l+zFvvQ8e0AhT2JZ3LM5SMXjMn38ZORzKyJ vcQ1B9L3jjnpsCQ2jVG4txm12rDWjvCGA+rK594QxjhUr2yhtNrznaGre6DseTY9 b479u/Hu8C2vmQ1LTi0xSghfDOdGD+kJpnRWtV4ILL5RvRxdEUxuYwkdpy1FvzV6 DIuplUmxsh/0hp81AnbWZWjcu8DZaeH8JyBJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqawalgKc46ZQyEmnu4/wLx+mM9wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Fhd2FsZ0tjNDZaUXlFbW51 NF93THgtbU05dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wZgwDQYJKoZIhvcNAQELBQADggEBALfPruarlBUWvE2ENUr+H52xyLdaacyDZtxu UM4/knCop3WDZjNiEcYvcLXczA/2jv0T7Kl3V5k7moSaUXbKf2WXB9mZm0w2jmvb 5rJKbpM6w2lwW9yWK5uwSYc+DZDszRV0VZkVGuHsqlVWLYQMPsGTGn2JPV5YP1iJ XAWmbynG7jAbDUqrTVKMgl5i+1pCfdWXbqAWhnfjWIsVyImpegQREqZbEUIVxYfp CjLgbDU86nJC1DT/V8lea0OKiTKBNraOaXe19JsMay7ECXlWWoyrwywUdXD7Du5T INgMbMC6qxWMxYuwIw9x5gRGqlleL0Vn6Q/jTsjxpX1awkeMBwM= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:52 2025 by rpki-client on console.sobornost.net