$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8wUzbhhF1FuIWIoJeL8wPDjbyxc.roa File: 8wUzbhhF1FuIWIoJeL8wPDjbyxc.roa (raw, json) Hash identifier: cTMhfcTryFtA5ryYPs9eR4E18bbo+T3iAjt9spauS0g= Subject key identifier: F3:05:33:6E:18:45:D4:5B:88:58:8A:09:78:BF:30:3C:38:DB:CB:17 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3669 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8wUzbhhF1FuIWIoJeL8wPDjbyxc.roa Signing time: Mon 10 Feb 2025 13:54:18 +0000 ROA not before: Mon 10 Feb 2025 13:54:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13929 (0x3669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F305336E1845D45B88588A0978BF303C38DBCB17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:64:c8:8f:2c:6b:49:6a:05:18:83:59:e0: 0e:67:51:1b:10:1c:2d:09:7f:a0:8b:37:0e:4b:00: da:90:e5:fc:d9:2f:ef:21:ee:77:57:77:3a:e8:86: 52:b8:23:c0:2c:de:11:3e:b9:16:4d:4f:a2:79:d4: 69:30:7f:1d:55:de:12:46:87:a2:67:05:42:22:47: 64:e6:66:e1:00:14:b2:a4:90:28:8a:42:bd:d7:ff: 89:51:40:14:c1:47:a7:ee:29:87:25:18:19:22:b5: d6:15:d3:47:4a:ff:0f:50:6e:70:fe:13:42:52:cf: 50:7b:2b:42:29:b9:53:0a:9a:67:5d:23:01:1a:e0: be:11:32:77:04:61:a9:b9:5a:31:f5:09:96:d8:a1: db:21:66:1b:90:f3:5e:50:e8:7b:30:73:36:d6:86: 97:68:ae:f5:32:b7:ea:c9:c3:74:a3:8e:6a:4d:0f: e6:09:30:53:07:a4:fd:91:de:78:83:1b:a1:e4:e8: 7b:a7:cf:c7:fc:09:64:48:56:3b:2b:4c:49:da:3b: 7a:af:58:1b:1b:f4:ab:1c:08:d9:51:d5:c4:cd:77: 98:0b:4f:57:fe:ab:1c:03:40:bd:62:92:d9:88:ae: ef:ff:a5:ab:82:89:29:d9:73:6f:e7:a2:27:85:a3: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:05:33:6E:18:45:D4:5B:88:58:8A:09:78:BF:30:3C:38:DB:CB:17 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8wUzbhhF1FuIWIoJeL8wPDjbyxc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.224.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:df:46:5a:0f:c4:0d:6b:ab:9d:b7:d7:dd:58:b7:7b:22:54: d5:d1:6e:4e:79:79:ec:52:7f:d5:d3:5c:30:90:f5:1a:3e:b2: 62:d8:62:4e:d5:42:17:d3:62:ad:94:2a:48:46:5f:d0:7a:88: ae:35:48:67:d3:21:1d:9a:67:d4:86:ae:07:87:e0:98:ed:e0: 77:34:38:f5:85:09:5e:75:ad:5b:c5:97:37:1a:cc:41:8b:33: 7e:bc:29:f3:d0:a6:1f:13:16:88:5a:e0:f1:f3:d5:fa:c0:dd: a3:56:fc:6b:b2:c5:f3:12:58:05:12:ae:c3:32:00:45:79:6a: 3b:9c:1e:19:c3:1c:f4:2c:ae:bb:ad:e4:8f:fb:38:ce:db:55: fa:aa:68:c9:44:9e:fe:5c:c6:0c:70:2f:61:6e:14:1e:8c:38: 54:0d:fd:9a:62:02:ed:fc:03:63:03:5f:ad:5d:e4:1c:37:96: 49:a6:4b:b0:4b:ba:55:ac:57:43:2b:6c:5d:72:d9:39:89:8f: 4b:fe:b8:aa:ea:fb:f3:94:a2:c7:1c:eb:c2:ce:c0:dc:2a:06: b8:1b:d1:1a:b7:2f:b6:43:c6:97:6a:14:90:2e:57:54:5e:4e: 8f:ab:a7:2c:a4:d3:89:51:a1:85:fe:ae:63:fe:74:eb:54:51: 80:b3:dd:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzMDUzMzZFMTg0NUQ0 NUI4ODU4OEEwOTc4QkYzMDNDMzhEQkNCMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQaGTIjyxrSWoFGINZ4A5nURsQHC0Jf6CLNw5LANqQ5fzZL+8h 7ndXdzrohlK4I8As3hE+uRZNT6J51Gkwfx1V3hJGh6JnBUIiR2TmZuEAFLKkkCiK Qr3X/4lRQBTBR6fuKYclGBkitdYV00dK/w9QbnD+E0JSz1B7K0IpuVMKmmddIwEa 4L4RMncEYam5WjH1CZbYodshZhuQ815Q6HswczbWhpdorvUyt+rJw3SjjmpND+YJ MFMHpP2R3niDG6Hk6Hunz8f8CWRIVjsrTEnaO3qvWBsb9KscCNlR1cTNd5gLT1f+ qxwDQL1iktmIru//pauCiSnZc2/noieFo4dDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8wUzbhhF1FuIWIoJeL8wPDjbyxcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzh3VXpiaGhGMUZ1SVdJb0pl TDh3UERqYnl4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AeAwDQYJKoZIhvcNAQELBQADggEBAJ3fRloPxA1rq523191Yt3siVNXRbk55eexS f9XTXDCQ9Ro+smLYYk7VQhfTYq2UKkhGX9B6iK41SGfTIR2aZ9SGrgeH4Jjt4Hc0 OPWFCV51rVvFlzcazEGLM368KfPQph8TFoha4PHz1frA3aNW/GuyxfMSWAUSrsMy AEV5ajucHhnDHPQsrrut5I/7OM7bVfqqaMlEnv5cxgxwL2FuFB6MOFQN/ZpiAu38 A2MDX61d5Bw3lkmmS7BLulWsV0MrbF1y2TmJj0v+uKrq+/OUoscc68LOwNwqBrgb 0Rq3L7ZDxpdqFJAuV1ReTo+rpyyk04lRoYX+rmP+dOtUUYCz3ZA= -----END CERTIFICATE-----Generated at Wed Apr 23 00:40:02 2025 by rpki-client