$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8DPg0c4NqatPySbf0wRqdJzEtgI.roa File: 8DPg0c4NqatPySbf0wRqdJzEtgI.roa (raw, json) Hash identifier: H9vgIvzTDTUgnJj38Kk8Myhnz1MRVrhATtOBvP7W+P8= Subject key identifier: F0:33:E0:D1:CE:0D:A9:AB:4F:C9:26:DF:D3:04:6A:74:9C:C4:B6:02 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 352F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8DPg0c4NqatPySbf0wRqdJzEtgI.roa Signing time: Mon 10 Feb 2025 13:53:06 +0000 ROA not before: Mon 10 Feb 2025 13:53:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13615 (0x352f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F033E0D1CE0DA9AB4FC926DFD3046A749CC4B602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:bb:95:25:a8:12:ea:88:68:06:f4:22:e8: 05:60:a9:03:87:0f:48:72:d6:52:83:22:15:7d:aa: b2:2d:7a:25:b2:0e:10:5d:aa:5a:9d:72:db:e2:43: 01:9c:33:4c:b0:6b:03:5d:4b:99:c8:34:1f:a7:b4: 66:a8:c0:44:16:44:95:32:5a:8d:10:b5:78:c7:e4: 84:cb:a0:78:82:c8:c5:4f:1b:fe:35:66:ec:c6:d3: 8b:c7:05:32:f7:0e:c9:8d:a5:79:c2:aa:7f:a6:a8: 40:86:81:99:6a:0f:31:73:6d:d4:f7:7a:7d:2f:19: f3:e4:95:17:51:c6:d7:03:14:61:f9:35:92:57:f8: 88:f7:85:85:9b:6a:e8:ee:f4:e8:aa:72:2f:8f:4a: f4:6f:06:48:bb:12:cb:84:f2:53:2d:21:23:ca:61: 64:a5:d4:30:a7:28:3b:88:9c:db:bc:38:a0:8e:d6: e9:b2:e2:a4:bc:0d:1b:5d:7f:ca:b2:5c:2e:3b:13: a8:f2:2a:11:e4:40:9b:0b:39:de:91:42:bf:58:ee: c3:b4:51:e3:a9:47:15:18:4e:b9:98:0d:97:9b:d2: 05:da:c3:ee:02:4d:16:c5:fa:18:85:69:63:7c:5c: 6b:1c:82:67:b8:ae:e0:7d:8d:ee:1f:f9:b4:cb:16: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:33:E0:D1:CE:0D:A9:AB:4F:C9:26:DF:D3:04:6A:74:9C:C4:B6:02 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8DPg0c4NqatPySbf0wRqdJzEtgI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.207.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:f2:50:23:28:8a:3d:11:45:70:15:c5:57:4b:be:89:fd:50: f4:8c:01:62:2f:69:37:79:94:5c:79:79:a7:c3:0d:8f:a0:a9: db:c0:71:c4:e7:4d:ec:c7:b9:d6:8c:f6:37:eb:a8:c8:e6:67: b9:63:9e:fa:b1:06:24:6c:f3:7a:11:b7:be:e5:bb:2d:b9:17: 9d:91:88:fa:06:c6:f2:d6:18:6d:05:b3:74:1c:cb:5c:87:a3: 5d:1c:b4:46:83:92:e3:da:92:d0:ac:12:92:06:78:45:1d:67: bc:fa:84:24:f6:65:17:68:e8:6c:f3:bc:33:f6:68:82:4e:ab: 71:52:f5:77:f9:e8:97:bb:10:98:62:35:bb:f3:09:ec:a1:47: 37:d5:b6:8c:ee:5a:0f:09:af:15:08:51:b2:69:45:78:be:5a: f2:bd:e9:88:0e:e8:0f:82:0f:60:02:a7:b7:94:9e:1e:ea:7f: 86:46:8b:ba:f8:9f:c8:1f:4b:29:8f:13:86:71:68:17:fa:53: 0e:d0:73:15:89:d3:2f:2b:bb:d9:78:8a:54:37:82:d4:63:a1: b3:47:c4:90:40:66:6b:9d:34:1b:da:29:d1:dd:91:03:a3:24: 8d:3c:be:6e:1b:be:e7:8a:fe:a3:8e:3e:a3:ad:31:14:e1:ea: 29:4e:cb:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYwMzNFMEQxQ0UwREE5 QUI0RkM5MjZERkQzMDQ2QTc0OUNDNEI2MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8FLuVJagS6ohoBvQi6AVgqQOHD0hy1lKDIhV9qrIteiWyDhBd qlqdctviQwGcM0ywawNdS5nINB+ntGaowEQWRJUyWo0QtXjH5ITLoHiCyMVPG/41 ZuzG04vHBTL3DsmNpXnCqn+mqECGgZlqDzFzbdT3en0vGfPklRdRxtcDFGH5NZJX +Ij3hYWbauju9Oiqci+PSvRvBki7EsuE8lMtISPKYWSl1DCnKDuInNu8OKCO1umy 4qS8DRtdf8qyXC47E6jyKhHkQJsLOd6RQr9Y7sO0UeOpRxUYTrmYDZeb0gXaw+4C TRbF+hiFaWN8XGscgme4ruB9je4f+bTLFqV9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8DPg0c4NqatPySbf0wRqdJzEtgIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhEUGcwYzROcWF0UHlTYmYw d1JxZEp6RXRnSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq Ac8wDQYJKoZIhvcNAQELBQADggEBAG/yUCMoij0RRXAVxVdLvon9UPSMAWIvaTd5 lFx5eafDDY+gqdvAccTnTezHudaM9jfrqMjmZ7ljnvqxBiRs83oRt77luy25F52R iPoGxvLWGG0Fs3Qcy1yHo10ctEaDkuPaktCsEpIGeEUdZ7z6hCT2ZRdo6GzzvDP2 aIJOq3FS9Xf56Je7EJhiNbvzCeyhRzfVtozuWg8JrxUIUbJpRXi+WvK96YgO6A+C D2ACp7eUnh7qf4ZGi7r4n8gfSymPE4ZxaBf6Uw7QcxWJ0y8ru9l4ilQ3gtRjobNH xJBAZmudNBvaKdHdkQOjJI08vm4bvueK/qOOPqOtMRTh6ilOy2o= -----END CERTIFICATE-----Generated at Fri Apr 18 22:26:17 2025 by rpki-client