$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H36HxhVg9vPMy_q9AzSyoZYLA04.roa File: H36HxhVg9vPMy_q9AzSyoZYLA04.roa (raw, json) Hash identifier: iI8LbApU273J+qNYM5CrjcbY7Bp3H1s/unweGC9qpZk= Subject key identifier: 1F:7E:87:C6:15:60:F6:F3:CC:CB:FA:BD:03:34:B2:A1:96:0B:03:4E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35DA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H36HxhVg9vPMy_q9AzSyoZYLA04.roa Signing time: Mon 10 Feb 2025 13:53:45 +0000 ROA not before: Mon 10 Feb 2025 13:53:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13786 (0x35da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1F7E87C61560F6F3CCCBFABD0334B2A1960B034E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:77:7e:90:b0:7a:d1:36:25:fa:d8:ff:27: ba:82:5d:6e:6c:c4:e8:d3:02:a7:23:0e:0c:ff:c3: 74:7f:97:a8:ff:c2:26:44:90:a0:c8:70:35:3e:80: 57:73:40:21:84:e5:a2:04:4a:94:75:af:43:9c:ee: 53:fa:b6:24:d0:6e:c8:27:b3:13:31:7c:ec:ce:ac: 53:47:02:43:10:3f:df:08:ca:d3:a5:6d:83:79:62: 0c:d8:52:9d:c7:91:a2:5f:b4:0b:20:f2:28:88:c4: b8:fd:c8:bc:b0:9e:64:9b:ac:63:9e:18:30:30:38: 90:83:78:96:d4:32:11:ff:37:5c:0e:16:46:9a:30: fe:f5:6f:78:e3:2a:22:15:32:d1:92:dc:73:65:17: 9f:f6:75:6b:35:8b:67:9a:5c:a2:e7:9b:74:1d:34: ac:09:d1:89:c8:a7:44:3b:25:7e:fc:da:64:60:56: ea:34:b9:12:95:c3:7f:10:a1:5f:ce:25:2e:b0:6c: f7:0e:26:c2:aa:ea:eb:92:f1:42:ce:08:1c:f2:35: 84:ef:01:c9:64:f4:74:0a:0e:a8:96:e6:2a:a7:ca: 02:78:7c:b6:2f:54:6b:7a:5f:5f:e6:d7:e9:95:2e: 7e:49:83:0c:a8:85:1a:9b:9d:56:e6:ad:18:36:2b: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7E:87:C6:15:60:F6:F3:CC:CB:FA:BD:03:34:B2:A1:96:0B:03:4E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H36HxhVg9vPMy_q9AzSyoZYLA04.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.212.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:bc:2a:77:da:41:e3:2f:3d:8b:8f:bf:cb:a1:86:13:bc:f1: 60:c2:11:6e:8e:31:6a:f9:d7:b3:5e:56:2a:c7:8e:a7:e7:38: ba:be:d8:9f:a4:bc:86:6a:af:f0:a2:db:2b:52:78:33:bf:f4: 39:0b:3b:a8:f3:90:ac:42:15:de:52:87:ab:89:2a:61:89:55: 1c:87:46:40:c6:41:b5:40:68:69:bd:eb:77:22:6b:cc:53:37: 8a:6f:19:51:05:f0:11:f1:89:d0:bc:f2:6b:58:e0:e5:04:70: 56:d1:cf:0f:ef:2d:46:87:4a:40:d6:d5:30:27:11:72:0f:4a: 21:68:f3:58:9e:b4:a9:31:8e:ff:f8:af:11:8a:c5:21:04:3e: a2:4a:89:24:4f:f4:8c:70:bf:37:d3:55:66:07:e7:2d:1f:da: d4:ae:05:55:87:40:2e:50:3b:43:c1:e4:5c:a6:d6:72:0e:71: 3f:07:93:38:69:cb:01:89:25:6c:b1:44:63:0b:47:6d:52:3c: 7f:fa:1f:7f:fc:8f:c0:94:a9:b8:86:f8:c4:cc:46:5f:aa:c5: 82:42:2e:e3:79:40:db:41:ab:75:2d:2c:4f:1f:df:7d:27:8f: ed:de:0b:2d:bc:f2:f3:13:bf:79:5c:ce:0c:07:a1:43:67:64: 72:b6:d3:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGN0U4N0M2MTU2MEY2 RjNDQ0NCRkFCRDAzMzRCMkExOTYwQjAzNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMe3d+kLB60TYl+tj/J7qCXW5sxOjTAqcjDgz/w3R/l6j/wiZE kKDIcDU+gFdzQCGE5aIESpR1r0Oc7lP6tiTQbsgnsxMxfOzOrFNHAkMQP98IytOl bYN5YgzYUp3HkaJftAsg8iiIxLj9yLywnmSbrGOeGDAwOJCDeJbUMhH/N1wOFkaa MP71b3jjKiIVMtGS3HNlF5/2dWs1i2eaXKLnm3QdNKwJ0YnIp0Q7JX782mRgVuo0 uRKVw38QoV/OJS6wbPcOJsKq6uuS8ULOCBzyNYTvAclk9HQKDqiW5iqnygJ4fLYv VGt6X1/m1+mVLn5JgwyohRqbnVbmrRg2K46RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUH36HxhVg9vPMy/q9AzSyoZYLA04wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0gzNkh4aFZnOXZQTXlfcTlB elN5b1pZTEEwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq AdQwDQYJKoZIhvcNAQELBQADggEBAI28KnfaQeMvPYuPv8uhhhO88WDCEW6OMWr5 17NeVirHjqfnOLq+2J+kvIZqr/Ci2ytSeDO/9DkLO6jzkKxCFd5Sh6uJKmGJVRyH RkDGQbVAaGm963cia8xTN4pvGVEF8BHxidC88mtY4OUEcFbRzw/vLUaHSkDW1TAn EXIPSiFo81ietKkxjv/4rxGKxSEEPqJKiSRP9IxwvzfTVWYH5y0f2tSuBVWHQC5Q O0PB5Fym1nIOcT8HkzhpywGJJWyxRGMLR21SPH/6H3/8j8CUqbiG+MTMRl+qxYJC LuN5QNtBq3UtLE8f330nj+3eCy288vMTv3lczgwHoUNnZHK2038= -----END CERTIFICATE-----Generated at Wed Apr 23 00:24:40 2025 by rpki-client