$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Cgk8dyFqWiQJ5UObp9kg_mVVUA.roa File: 7Cgk8dyFqWiQJ5UObp9kg_mVVUA.roa (raw, json) Hash identifier: qcVNVyLpi2NM7z1X+ArKgOl4O2bAlp6m2u4JuRXG2bU= Subject key identifier: EC:28:24:F1:DC:85:A9:68:90:27:95:0E:6E:9F:64:83:F9:95:55:40 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3461 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Cgk8dyFqWiQJ5UObp9kg_mVVUA.roa Signing time: Mon 10 Feb 2025 13:52:19 +0000 ROA not before: Mon 10 Feb 2025 13:52:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13409 (0x3461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EC2824F1DC85A9689027950E6E9F6483F9955540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:09:8e:60:aa:ac:4f:0d:79:65:3e:d1:e2: 46:c0:b6:f2:10:f2:7a:00:30:43:bd:24:0f:3c:22: 29:eb:3a:11:cc:aa:74:21:58:a9:8f:4f:45:73:cf: f2:cb:60:ed:3f:00:f0:ea:e3:70:7f:ac:b9:16:ee: 9d:63:7d:59:ed:54:4f:60:46:9a:50:a2:b2:b9:cc: 32:a3:77:d3:18:69:12:ef:32:f6:8d:c0:53:69:9a: 2c:64:26:24:7f:60:eb:ea:68:c1:76:0c:f0:19:f8: 3f:d3:04:64:c6:4f:06:ba:61:bf:3f:09:3e:40:3c: 50:9e:a5:d4:d6:85:53:0c:7a:3f:e7:ab:4b:5f:99: ec:4c:ae:b9:6d:74:bf:9c:89:64:3f:11:8c:fb:28: b2:5e:95:c4:99:0d:d5:08:e4:77:c5:c1:b6:9a:24: 87:a4:6e:b1:e1:4f:a2:82:f2:31:f4:f4:b2:e1:d6: 9a:17:99:4f:0f:fc:31:fd:a3:30:09:5a:e1:60:48: 6c:70:b2:2b:9c:50:f0:c6:d8:f6:d6:27:6b:d9:da: 58:79:54:30:9c:1b:57:14:6b:68:b5:1a:cb:2a:75: d4:f2:2f:5e:39:f2:3a:60:8d:28:cc:bc:30:d3:da: c5:f6:a6:34:37:dc:35:5b:95:eb:8f:0d:1c:86:4f: d6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:28:24:F1:DC:85:A9:68:90:27:95:0E:6E:9F:64:83:F9:95:55:40 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Cgk8dyFqWiQJ5UObp9kg_mVVUA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.128.0/21 Signature Algorithm: sha256WithRSAEncryption 39:5c:78:93:cb:76:48:c5:1b:6d:34:61:55:3b:c8:ab:94:31: 62:44:ee:0e:2d:49:b1:f1:60:7c:c7:f3:4f:7f:a0:c6:67:2f: 8a:99:30:ce:ac:fd:24:13:f7:28:e9:dd:80:18:4b:7c:2e:2f: 1b:14:d9:a4:4c:d0:27:a4:eb:a6:79:97:20:19:c8:aa:89:82: 28:0b:d8:7e:25:18:94:af:b8:e7:41:4c:a5:34:91:f6:f8:45: df:b1:51:2d:34:05:2b:b5:4f:1b:08:2b:9a:7e:e4:df:ed:88: 4e:30:1d:a5:8f:48:3d:a7:fa:60:99:1b:28:40:71:bb:b3:23: 55:42:f7:e3:6d:b1:eb:e4:17:8a:7f:78:14:cf:60:e4:2e:87: 1e:d6:80:8a:80:f0:93:03:1f:3d:d8:dc:2a:86:12:23:bd:5e: ef:2e:d5:0a:92:cc:fd:26:79:dc:50:3e:1d:14:66:8b:22:05: dd:de:a5:b6:7c:62:10:41:39:a8:fb:1a:c5:50:d7:d1:b9:fb: c5:f6:c9:41:e7:21:d5:8a:21:be:d1:a6:73:4f:f4:77:9f:63: 35:e2:fe:59:a7:a8:ee:1e:08:7a:b9:1f:2e:b8:59:ec:8c:c0: 13:51:d9:b4:df:0d:62:3e:3b:aa:f9:a6:cc:67:c3:fc:79:d1: 20:ea:d8:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNGEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDMjgyNEYxREM4NUE5 Njg5MDI3OTUwRTZFOUY2NDgzRjk5NTU1NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXBgmOYKqsTw15ZT7R4kbAtvIQ8noAMEO9JA88IinrOhHMqnQh WKmPT0Vzz/LLYO0/APDq43B/rLkW7p1jfVntVE9gRppQorK5zDKjd9MYaRLvMvaN wFNpmixkJiR/YOvqaMF2DPAZ+D/TBGTGTwa6Yb8/CT5APFCepdTWhVMMej/nq0tf mexMrrltdL+ciWQ/EYz7KLJelcSZDdUI5HfFwbaaJIekbrHhT6KC8jH09LLh1poX mU8P/DH9ozAJWuFgSGxwsiucUPDG2PbWJ2vZ2lh5VDCcG1cUa2i1GssqddTyL145 8jpgjSjMvDDT2sX2pjQ33DVbleuPDRyGT9YlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7Cgk8dyFqWiQJ5UObp9kg/mVVUAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdDZ2s4ZHlGcVdpUUo1VU9i cDlrZ19tVlZVQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AYAwDQYJKoZIhvcNAQELBQADggEBADlceJPLdkjFG200YVU7yKuUMWJE7g4tSbHx YHzH809/oMZnL4qZMM6s/SQT9yjp3YAYS3wuLxsU2aRM0Cek66Z5lyAZyKqJgigL 2H4lGJSvuOdBTKU0kfb4Rd+xUS00BSu1TxsIK5p+5N/tiE4wHaWPSD2n+mCZGyhA cbuzI1VC9+NtsevkF4p/eBTPYOQuhx7WgIqA8JMDHz3Y3CqGEiO9Xu8u1QqSzP0m edxQPh0UZosiBd3epbZ8YhBBOaj7GsVQ19G5+8X2yUHnIdWKIb7RpnNP9HefYzXi /lmnqO4eCHq5Hy64WeyMwBNR2bTfDWI+O6r5psxnw/x50SDq2GE= -----END CERTIFICATE-----Generated at Fri Apr 18 23:16:34 2025 by rpki-client