$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sfiosefNpJ0tJh1EeXMH6-kcaPA.roa File: sfiosefNpJ0tJh1EeXMH6-kcaPA.roa (raw, json) Hash identifier: Kf+I/JO1RzXN1nzLEq6Xb0U+qIGaTJGSE0Zr8aOVNCY= Subject key identifier: B1:F8:A8:B1:E7:CD:A4:9D:2D:26:1D:44:79:73:07:EB:E9:1C:68:F0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3494 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sfiosefNpJ0tJh1EeXMH6-kcaPA.roa Signing time: Mon 10 Feb 2025 13:52:31 +0000 ROA not before: Mon 10 Feb 2025 13:52:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B1F8A8B1E7CDA49D2D261D44797307EBE91C68F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:af:73:55:a6:90:57:80:1a:96:e8:30:3b:7d: 7d:43:67:b4:d0:ed:4a:de:61:55:d9:ab:c8:51:4f: f5:91:bb:4d:01:6f:e3:71:07:f6:9f:f8:51:22:8e: 44:0e:6e:d9:6f:a4:90:ec:e3:e8:e3:01:1b:7c:06: 15:29:0e:3b:f7:97:43:9a:fc:ba:ce:85:8a:67:57: 4c:9b:a8:f6:a8:ac:70:34:38:f0:00:c9:09:ae:a2: e8:f3:c4:c1:49:39:aa:ec:b8:29:65:7a:92:d0:f3: 14:c7:03:9f:af:d3:f1:0f:f1:b4:79:8b:a9:7b:81: df:01:dc:a6:01:1b:93:f2:ef:19:b0:1c:c1:71:f3: 1e:01:5f:52:1b:57:b9:0c:20:04:af:fb:67:41:b2: 7b:5c:b8:c8:63:32:60:cc:35:2a:49:e5:fc:49:d9: bf:ba:cf:63:75:47:46:56:9c:40:66:49:68:a6:98: 62:dc:97:93:4a:4d:6c:81:02:63:41:77:3c:86:76: 8e:75:cb:26:70:14:b3:75:7b:16:33:72:04:ab:db: ce:cc:31:2c:3e:b7:c1:0f:a1:88:3d:76:7e:74:29: 39:52:a4:55:8c:56:e8:53:c6:dd:63:59:3e:9c:35: d5:27:fc:56:40:68:7b:2d:e4:70:5f:2b:60:e1:36: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F8:A8:B1:E7:CD:A4:9D:2D:26:1D:44:79:73:07:EB:E9:1C:68:F0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sfiosefNpJ0tJh1EeXMH6-kcaPA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.156.0/22 Signature Algorithm: sha256WithRSAEncryption 65:c9:a3:09:c9:0e:21:15:4b:53:32:bb:1c:43:62:52:83:47: 31:65:ff:4b:4e:1e:72:4b:3c:f8:2e:22:47:b0:b0:30:a7:f3: 40:df:7c:63:fa:45:4b:f5:7b:c7:01:dc:0d:c2:1e:f0:bd:a6: 8b:cd:37:47:fb:3b:71:95:c6:6b:25:f2:96:7e:f9:e5:97:22: e6:de:56:6f:9f:86:ae:1c:36:ac:c4:d5:18:6c:ca:13:99:80: a6:c6:84:f7:6e:e1:c3:f6:9c:63:a6:60:5e:0e:3a:a9:16:b2: d0:10:fb:a0:f4:1b:a9:a4:e1:30:bc:41:64:59:e7:99:d1:13: 77:ea:1d:e0:68:0e:2c:6f:7f:ab:bc:0c:58:5b:88:8f:bf:4f: b4:63:52:9f:0c:d6:b4:97:44:dd:59:6a:d7:dd:ae:e7:ab:02: d2:70:e4:f5:26:57:f0:f3:01:67:d5:18:7b:f4:89:6c:69:b3: 71:65:41:8c:0e:3f:8d:2a:8e:d3:7d:55:3c:e1:39:58:4b:41: ce:a9:df:0b:b9:d0:35:26:7b:30:a5:6d:93:61:67:fa:b0:5e: ea:b1:82:e0:7f:91:5d:8a:47:7d:58:de:09:b1:19:da:95:8e: ce:35:b1:d5:e0:75:58:f7:70:cf:b7:2f:9f:44:69:78:8a:e4: 2d:37:55:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxRjhBOEIxRTdDREE0 OUQyRDI2MUQ0NDc5NzMwN0VCRTkxQzY4RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmr3NVppBXgBqW6DA7fX1DZ7TQ7UreYVXZq8hRT/WRu00Bb+Nx B/af+FEijkQObtlvpJDs4+jjARt8BhUpDjv3l0Oa/LrOhYpnV0ybqPaorHA0OPAA yQmuoujzxMFJOarsuCllepLQ8xTHA5+v0/EP8bR5i6l7gd8B3KYBG5Py7xmwHMFx 8x4BX1IbV7kMIASv+2dBsntcuMhjMmDMNSpJ5fxJ2b+6z2N1R0ZWnEBmSWimmGLc l5NKTWyBAmNBdzyGdo51yyZwFLN1exYzcgSr287MMSw+t8EPoYg9dn50KTlSpFWM VuhTxt1jWT6cNdUn/FZAaHst5HBfK2DhNiStAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsfiosefNpJ0tJh1EeXMH6+kcaPAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NmaW9zZWZOcEowdEpoMUVl WE1INi1rY2FQQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpwwDQYJKoZIhvcNAQELBQADggEBAGXJownJDiEVS1MyuxxDYlKDRzFl/0tOHnJL PPguIkewsDCn80DffGP6RUv1e8cB3A3CHvC9povNN0f7O3GVxmsl8pZ++eWXIube Vm+fhq4cNqzE1RhsyhOZgKbGhPdu4cP2nGOmYF4OOqkWstAQ+6D0G6mk4TC8QWRZ 55nRE3fqHeBoDixvf6u8DFhbiI+/T7RjUp8M1rSXRN1ZatfdruerAtJw5PUmV/Dz AWfVGHv0iWxps3FlQYwOP40qjtN9VTzhOVhLQc6p3wu50DUmezClbZNhZ/qwXuqx guB/kV2KR31Y3gmxGdqVjs41sdXgdVj3cM+3L59EaXiK5C03Vf4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:52 2025 by rpki-client on console.sobornost.net