$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HF8O1B3lVZQbv_KUx2hYFOVnYNs.roa File: HF8O1B3lVZQbv_KUx2hYFOVnYNs.roa (raw, json) Hash identifier: 5x9SmbGbDkU1udMd882PWOOvYr3vjYL/o6jRNR/gQ1U= Subject key identifier: 1C:5F:0E:D4:1D:E5:55:94:1B:BF:F2:94:C7:68:58:14:E5:67:60:DB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3399 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HF8O1B3lVZQbv_KUx2hYFOVnYNs.roa Signing time: Mon 10 Feb 2025 13:51:35 +0000 ROA not before: Mon 10 Feb 2025 13:51:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13209 (0x3399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1C5F0ED41DE555941BBFF294C7685814E56760DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:42:41:55:fa:b1:92:b6:80:7c:94:ac:3a: 6a:1d:ff:f2:7b:78:ab:e2:a3:7a:1d:0f:50:2d:e7: e4:19:e5:7d:62:6e:ff:91:f0:ef:49:4e:a9:f8:7c: 5e:63:bc:98:38:2f:f3:f6:14:38:d3:aa:f7:91:a6: e2:11:43:ff:46:a8:62:7b:77:8e:ec:b1:7d:1c:32: 9d:a9:93:31:80:67:86:71:d5:c6:e2:2e:7e:e1:8a: 93:a1:59:19:a0:e5:5d:93:73:59:67:a0:b9:2a:6f: 9c:1e:9b:f9:83:10:d7:85:8f:29:58:12:a1:40:99: b9:c4:db:e9:cb:44:78:6c:60:a5:96:9b:6f:37:81: 68:36:68:9b:65:72:5c:63:f2:15:02:df:36:b0:0c: 9d:0f:4b:dc:7a:84:d7:33:66:60:e7:3c:55:2d:10: 47:03:43:b4:72:c0:0e:f7:12:69:dc:b3:e0:4c:b3: 77:87:af:37:f8:d8:56:fe:4b:d7:ee:c2:05:e9:ff: 14:ce:90:10:eb:b7:dc:1c:e5:e9:46:41:b3:08:9f: 4f:8e:68:51:76:89:2d:32:e0:4a:15:0a:f9:ed:4c: 3e:6b:8a:fa:37:0d:f5:35:55:68:ae:ed:c1:e9:70: 5d:c7:8d:47:0f:12:79:5b:07:bb:3f:d8:b4:b0:65: db:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5F:0E:D4:1D:E5:55:94:1B:BF:F2:94:C7:68:58:14:E5:67:60:DB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HF8O1B3lVZQbv_KUx2hYFOVnYNs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.47.0/24 Signature Algorithm: sha256WithRSAEncryption a3:ac:0a:8b:58:dc:22:f8:cd:df:69:62:a7:e8:a9:5b:00:c4: ea:cb:d8:9b:8d:f9:a6:3a:2e:ae:42:db:ef:34:7c:f5:b0:75: 01:4c:25:5b:4d:fa:6c:d5:97:b8:ad:bf:9c:82:15:93:3b:ee: 5e:34:aa:50:0d:be:fb:27:32:b3:83:bb:dd:1e:9c:6a:38:68: 48:b1:04:70:98:00:2b:f9:50:b0:32:24:e8:35:45:97:dc:0b: 71:ab:67:b3:2c:21:b9:18:01:c5:db:e4:08:eb:66:1d:67:9b: 3b:31:6b:28:0e:8c:b2:8d:4e:a7:51:5e:c3:a2:a1:de:9e:12: dc:ce:df:91:60:33:9b:a2:a7:3e:4d:58:5d:8c:9e:47:f0:8f: b0:d8:64:c4:22:6a:20:10:bd:66:31:58:8f:95:e1:4c:9d:b2: ad:6f:ff:45:f1:f5:48:a0:39:99:50:a6:b9:03:f4:63:f9:09: c2:dc:e4:e9:de:c3:cb:c4:96:6f:48:06:85:39:11:3d:0f:f4: ed:c2:47:73:6a:ce:47:1d:b7:40:02:6d:38:48:8b:33:6a:64: 15:2b:19:92:78:68:e9:fd:3c:6c:a1:69:1d:2d:fc:03:da:05: c9:86:54:3a:82:42:b5:cb:c5:a4:f3:a3:ec:3f:a9:bf:d8:5e: 94:e4:5e:08 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFDNUYwRUQ0MURFNTU1 OTQxQkJGRjI5NEM3Njg1ODE0RTU2NzYwREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXAEJBVfqxkraAfJSsOmod//J7eKvio3odD1At5+QZ5X1ibv+R 8O9JTqn4fF5jvJg4L/P2FDjTqveRpuIRQ/9GqGJ7d47ssX0cMp2pkzGAZ4Zx1cbi Ln7hipOhWRmg5V2Tc1lnoLkqb5wem/mDENeFjylYEqFAmbnE2+nLRHhsYKWWm283 gWg2aJtlclxj8hUC3zawDJ0PS9x6hNczZmDnPFUtEEcDQ7RywA73Emncs+BMs3eH rzf42Fb+S9fuwgXp/xTOkBDrt9wc5elGQbMIn0+OaFF2iS0y4EoVCvntTD5rivo3 DfU1VWiu7cHpcF3HjUcPEnlbB7s/2LSwZduzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHF8O1B3lVZQbv/KUx2hYFOVnYNswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hGOE8xQjNsVlpRYnZfS1V4 MmhZRk9WbllOcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AS8wDQYJKoZIhvcNAQELBQADggEBAKOsCotY3CL4zd9pYqfoqVsAxOrL2JuN+aY6 Lq5C2+80fPWwdQFMJVtN+mzVl7itv5yCFZM77l40qlANvvsnMrODu90enGo4aEix BHCYACv5ULAyJOg1RZfcC3GrZ7MsIbkYAcXb5AjrZh1nmzsxaygOjLKNTqdRXsOi od6eEtzO35FgM5uipz5NWF2Mnkfwj7DYZMQiaiAQvWYxWI+V4Uydsq1v/0Xx9Uig OZlQprkD9GP5CcLc5Onew8vElm9IBoU5ET0P9O3CR3Nqzkcdt0ACbThIizNqZBUr GZJ4aOn9PGyhaR0t/APaBcmGVDqCQrXLxaTzo+w/qb/YXpTkXgg= -----END CERTIFICATE-----Generated at Wed Apr 23 04:41:24 2025 by rpki-client