$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z-ItcxQVM_CTxaweuhQwGkPEqJ0.roa File: z-ItcxQVM_CTxaweuhQwGkPEqJ0.roa (raw, json) Hash identifier: al/6W8U1WWTfo0maMAbZDe6EUX1HG3f+h5STp0cd1Vc= Subject key identifier: CF:E2:2D:73:14:15:33:F0:93:C5:AC:1E:BA:14:30:1A:43:C4:A8:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3618 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z-ItcxQVM_CTxaweuhQwGkPEqJ0.roa Signing time: Mon 10 Feb 2025 13:53:58 +0000 ROA not before: Mon 10 Feb 2025 13:53:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13848 (0x3618) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CFE22D73141533F093C5AC1EBA14301A43C4A89D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:af:e6:75:24:6b:23:c5:d7:34:65:83:98: 7c:0b:ed:94:77:08:94:ea:0c:15:ad:89:63:94:a7: a4:d3:9a:e9:47:8e:f9:20:38:63:69:16:4a:70:41: 96:53:c9:98:04:14:80:98:bc:84:fd:35:74:9f:18: 4b:a0:54:a4:b0:17:49:52:92:b8:e4:96:57:da:e5: b1:10:74:8c:74:5c:47:66:69:55:31:6a:ad:fe:5e: af:67:35:72:68:fd:78:9a:22:28:b2:a1:fd:ec:f4: 73:59:1b:25:3d:cd:58:fc:78:5f:bb:ca:73:ed:2c: af:63:e1:77:a1:8e:27:64:fe:ea:5c:f8:63:bd:4f: 1a:ca:33:81:55:7b:a5:74:47:56:db:20:fc:46:8f: 0f:a6:69:65:a9:a4:7a:a7:69:20:cd:83:63:05:45: 74:a7:8d:65:11:f2:b2:d8:03:ca:5b:bc:b0:50:11: b2:9a:30:28:b8:1d:de:27:d5:1b:d5:16:ca:39:2c: b6:20:48:66:04:8b:0f:5d:69:05:2c:3e:9f:40:31: cc:6a:d3:6c:e3:ea:95:90:57:eb:dc:5b:2b:c7:b0: a1:db:5e:7d:ec:b0:a9:42:32:cb:fb:e7:32:fb:c1: af:a8:01:85:37:f4:d2:f2:85:5b:0b:d1:6c:b4:ef: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E2:2D:73:14:15:33:F0:93:C5:AC:1E:BA:14:30:1A:43:C4:A8:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z-ItcxQVM_CTxaweuhQwGkPEqJ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.172.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:58:40:c3:ab:35:3d:cd:4b:50:8a:34:27:2a:21:45:70:47: af:1c:e2:04:27:50:61:56:cf:f2:6f:86:35:72:91:d8:df:74: ad:b2:15:00:87:86:cc:93:10:66:81:42:4b:a7:94:af:cf:69: 5b:45:0b:40:db:8f:bd:6a:79:3d:f6:e9:77:de:3d:41:0d:a7: d0:cd:a1:8c:6a:75:3b:4a:47:09:11:5a:64:71:82:03:92:2f: be:85:4d:43:0c:48:ea:46:99:ab:9b:fd:d0:b6:4c:54:09:90: 21:3b:58:58:70:a4:7d:a4:41:51:82:68:a8:99:b3:3c:e6:aa: 45:a5:1d:63:f0:23:9d:b9:12:80:d0:5e:53:ea:c0:c6:4e:04: 4e:e6:83:d1:35:18:dd:f0:04:34:1b:09:8a:e9:f4:0b:e7:3d: e3:2a:e3:17:4f:f3:eb:80:94:36:0c:1a:85:32:22:f9:b6:20: 10:8a:3e:02:5e:16:3a:b1:de:9e:52:ce:f5:f1:d4:5e:2e:af: c7:53:83:f0:80:a2:63:5a:7f:f6:7b:e3:37:80:ee:82:7d:9f: 2d:45:d7:08:58:53:ed:45:7f:91:45:0e:6f:aa:c1:6c:85:b2: df:3a:7c:22:f7:3b:70:db:25:7f:41:31:83:8b:6c:7e:94:0b: f8:f2:2a:73 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGRTIyRDczMTQxNTMz RjA5M0M1QUMxRUJBMTQzMDFBNDNDNEE4OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCRq/mdSRrI8XXNGWDmHwL7ZR3CJTqDBWtiWOUp6TTmulHjvkg OGNpFkpwQZZTyZgEFICYvIT9NXSfGEugVKSwF0lSkrjkllfa5bEQdIx0XEdmaVUx aq3+Xq9nNXJo/XiaIiiyof3s9HNZGyU9zVj8eF+7ynPtLK9j4Xehjidk/upc+GO9 TxrKM4FVe6V0R1bbIPxGjw+maWWppHqnaSDNg2MFRXSnjWUR8rLYA8pbvLBQEbKa MCi4Hd4n1RvVFso5LLYgSGYEiw9daQUsPp9AMcxq02zj6pWQV+vcWyvHsKHbXn3s sKlCMsv75zL7wa+oAYU39NLyhVsL0Wy070dlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUz+ItcxQVM/CTxaweuhQwGkPEqJ0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3otSXRjeFFWTV9DVHhhd2V1 aFF3R2tQRXFKMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wqwwDQYJKoZIhvcNAQELBQADggEBAI9YQMOrNT3NS1CKNCcqIUVwR68c4gQnUGFW z/JvhjVykdjfdK2yFQCHhsyTEGaBQkunlK/PaVtFC0Dbj71qeT326XfePUENp9DN oYxqdTtKRwkRWmRxggOSL76FTUMMSOpGmaub/dC2TFQJkCE7WFhwpH2kQVGCaKiZ szzmqkWlHWPwI525EoDQXlPqwMZOBE7mg9E1GN3wBDQbCYrp9AvnPeMq4xdP8+uA lDYMGoUyIvm2IBCKPgJeFjqx3p5SzvXx1F4ur8dTg/CAomNaf/Z74zeA7oJ9ny1F 1whYU+1Ff5FFDm+qwWyFst86fCL3O3DbJX9BMYOLbH6UC/jyKnM= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:53 2025 by rpki-client on console.sobornost.net