$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxEVCF7AAPwF2mwUQAMKubZ1lUw.roa File: uxEVCF7AAPwF2mwUQAMKubZ1lUw.roa (raw, json) Hash identifier: qQqjEZBOsoft5xHMQ9r270+/0KuUTI9ocMEy9tzRhic= Subject key identifier: BB:11:15:08:5E:C0:00:FC:05:DA:6C:14:40:03:0A:B9:B6:75:95:4C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35EB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxEVCF7AAPwF2mwUQAMKubZ1lUw.roa Signing time: Mon 10 Feb 2025 13:53:49 +0000 ROA not before: Mon 10 Feb 2025 13:53:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13803 (0x35eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BB1115085EC000FC05DA6C1440030AB9B675954C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:07:47:f5:b2:c8:11:b0:4b:87:cf:5c:29: d3:1e:19:90:ce:5d:81:e3:32:37:b0:a4:d9:e8:78: 5c:4f:e8:b7:83:ed:76:74:fe:e1:b9:30:4d:c7:eb: 0b:ec:a3:e1:38:09:75:02:c1:11:e3:a3:41:d9:5a: fb:34:f1:ea:10:42:04:57:b7:40:47:26:25:09:a1: 7f:d8:e3:85:d2:b8:fc:57:70:ee:e8:8a:42:db:d1: 1c:5b:b4:a3:79:e7:20:25:af:86:74:78:03:69:40: 30:6a:35:d4:e8:e6:d3:1e:c6:28:d8:2a:16:e6:b4: 96:7a:dc:a8:97:08:c8:f9:f9:1b:8e:a8:ab:6b:2b: c5:21:06:14:6d:ef:b9:2a:0a:98:26:b8:6b:94:0f: f4:89:05:ff:85:10:be:e4:fa:96:db:b9:36:15:c4: 09:ff:4f:72:01:26:6f:32:4c:75:cf:49:bb:0c:7a: f5:84:95:b7:0d:5b:2f:9e:60:86:75:b7:c9:ee:fa: d0:2f:cb:0a:b5:ff:d7:11:8b:ad:e7:a5:65:f9:44: 76:92:c7:37:46:ab:0f:66:66:f4:9a:1c:96:23:21: 4f:a3:d6:06:b5:7c:f4:b3:1c:ce:7d:64:77:c6:6c: 47:97:3d:af:88:e8:87:3b:a4:1d:9c:6f:63:4f:fc: 5d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:11:15:08:5E:C0:00:FC:05:DA:6C:14:40:03:0A:B9:B6:75:95:4C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxEVCF7AAPwF2mwUQAMKubZ1lUw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2c:4c:c1:6c:8e:c7:df:cb:c6:09:cf:07:37:b4:c9:ad:48:3b: 94:3c:35:ab:ff:49:cd:29:93:9d:60:21:97:ec:08:1c:b0:61: 21:90:10:0f:d1:d5:84:2f:e6:ef:b5:c5:48:f6:d3:b7:f8:72: 9e:26:e2:e3:1f:40:aa:c6:a5:d1:b9:13:3b:86:ab:5c:37:3a: 05:70:cb:02:c8:d3:9a:c6:7a:ce:c1:86:cb:da:df:9e:86:5b: 4f:b9:9c:30:c2:40:3f:ce:78:d6:b7:29:2d:e3:84:bd:f6:27: 86:4c:e9:27:6b:95:5b:cc:99:f2:2f:d0:74:07:a3:d8:4d:2c: b7:75:3a:00:32:6d:71:40:92:06:fd:85:d6:00:04:93:6d:7a: e1:15:a1:1d:73:5d:d7:ca:49:cb:cb:30:f0:4f:a0:54:2c:95: 5d:e2:f1:f7:0d:6a:33:f5:c0:94:ca:9c:25:c3:ce:cb:03:40: 3a:61:b1:c0:30:cd:13:b6:72:a1:f0:ab:b1:b0:32:59:8f:bd: a0:9b:27:1d:8a:da:4f:76:14:26:8b:ea:87:cb:d1:e5:f1:4e: d1:3d:5b:ad:ee:01:13:46:b1:c4:82:3c:3b:1c:f0:39:e1:f7: 4f:19:a6:00:9d:f6:53:3c:76:7c:60:7c:09:a0:a6:07:8c:d7: 37:49:c8:47 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJCMTExNTA4NUVDMDAw RkMwNURBNkMxNDQwMDMwQUI5QjY3NTk1NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWKQdH9bLIEbBLh89cKdMeGZDOXYHjMjewpNnoeFxP6LeD7XZ0 /uG5ME3H6wvso+E4CXUCwRHjo0HZWvs08eoQQgRXt0BHJiUJoX/Y44XSuPxXcO7o ikLb0RxbtKN55yAlr4Z0eANpQDBqNdTo5tMexijYKhbmtJZ63KiXCMj5+RuOqKtr K8UhBhRt77kqCpgmuGuUD/SJBf+FEL7k+pbbuTYVxAn/T3IBJm8yTHXPSbsMevWE lbcNWy+eYIZ1t8nu+tAvywq1/9cRi63npWX5RHaSxzdGqw9mZvSaHJYjIU+j1ga1 fPSzHM59ZHfGbEeXPa+I6Ic7pB2cb2NP/F1XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuxEVCF7AAPwF2mwUQAMKubZ1lUwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3V4RVZDRjdBQVB3RjJtd1VR QU1LdWJaMWxVdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd7 wAAwDQYJKoZIhvcNAQELBQADggEBACxMwWyOx9/LxgnPBze0ya1IO5Q8Nav/Sc0p k51gIZfsCBywYSGQEA/R1YQv5u+1xUj207f4cp4m4uMfQKrGpdG5EzuGq1w3OgVw ywLI05rGes7Bhsva356GW0+5nDDCQD/OeNa3KS3jhL32J4ZM6SdrlVvMmfIv0HQH o9hNLLd1OgAybXFAkgb9hdYABJNteuEVoR1zXdfKScvLMPBPoFQslV3i8fcNajP1 wJTKnCXDzssDQDphscAwzRO2cqHwq7GwMlmPvaCbJx2K2k92FCaL6ofL0eXxTtE9 W63uARNGscSCPDsc8Dnh908ZpgCd9lM8dnxgfAmgpgeM1zdJyEc= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:53 2025 by rpki-client on console.sobornost.net