$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HxvCz0bQFMdILCQWL-H9SgOc-pI.roa File: HxvCz0bQFMdILCQWL-H9SgOc-pI.roa (raw, json) Hash identifier: svO4PhCH4K1TmJVb496+rIfGsvDGCWBTPm2rXoM2v0Y= Subject key identifier: 1F:1B:C2:CF:46:D0:14:C7:48:2C:24:16:2F:E1:FD:4A:03:9C:FA:92 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35D1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HxvCz0bQFMdILCQWL-H9SgOc-pI.roa Signing time: Mon 10 Feb 2025 13:53:43 +0000 ROA not before: Mon 10 Feb 2025 13:53:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13777 (0x35d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1F1BC2CF46D014C7482C24162FE1FD4A039CFA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:78:96:22:e1:81:02:2a:4f:92:e9:84:36: e1:e0:4f:93:8d:fa:bd:e3:da:97:c5:07:b2:07:26: fc:c8:e5:01:4d:7d:7d:a3:ba:7e:3c:b5:63:21:ee: 67:a9:74:af:7c:93:5c:92:32:3d:84:3e:ff:7f:97: c0:74:25:c7:16:7d:9d:07:e6:c8:ab:0f:e4:3d:8d: 82:5f:b2:d8:e6:03:4b:7e:7c:f2:af:ac:a0:1e:a2: 61:fe:36:1f:83:b4:42:1a:dd:3c:2b:31:c8:43:a7: e7:1b:6e:4d:be:87:ed:be:81:16:99:c8:51:13:9e: 1a:3b:6b:84:69:8f:d2:c8:62:3c:55:b7:e3:1b:8f: f5:ec:21:da:10:c2:33:6d:17:f9:00:34:37:0d:ed: bd:f4:e6:be:1f:d3:9e:3c:be:f5:f0:57:cc:cd:5f: ca:56:c9:ba:a1:71:e1:d5:b3:33:78:e1:b4:4c:e6: fb:18:4e:64:2d:40:38:d9:de:85:eb:0d:53:a8:10: ba:37:a2:d0:5b:19:64:d5:e3:b6:27:24:d5:43:09: c8:e3:04:41:32:53:ca:b1:5a:f6:83:4f:13:e7:36: 44:2f:3c:67:a9:e1:b2:88:5a:45:38:7b:a3:91:36: eb:d4:5c:4b:30:2c:fc:65:33:c0:8e:bd:19:5c:98: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1B:C2:CF:46:D0:14:C7:48:2C:24:16:2F:E1:FD:4A:03:9C:FA:92 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HxvCz0bQFMdILCQWL-H9SgOc-pI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.166.0/24 Signature Algorithm: sha256WithRSAEncryption 63:93:f0:b3:e9:7b:6c:77:c7:6b:97:0c:95:52:ef:b7:a3:d9: 1b:43:7e:0d:96:0e:f8:77:93:44:36:ee:eb:47:4b:b8:8e:ca: b6:6d:82:ae:65:f6:70:4c:2a:0f:76:29:3f:7b:ae:cd:78:a9: 69:d8:df:63:01:d0:88:3b:67:35:7f:55:3a:ad:8b:a2:23:c1: 5c:d9:c1:72:af:20:bc:73:ee:84:bb:63:59:74:c6:b9:24:ac: e7:9d:20:b7:62:b7:cf:81:24:3d:52:df:1a:3c:a2:9c:ef:72: 97:52:ea:6a:69:1a:fd:85:75:a5:c8:bf:19:1b:9f:39:26:a7: 9e:ba:17:af:5f:f2:1a:b7:01:95:83:09:0d:cd:28:94:c6:ca: 3d:45:c2:27:67:76:5a:e5:44:c9:7e:c4:9f:07:d2:ef:ce:1b: a1:0a:39:9f:34:ca:42:95:63:e0:a4:02:45:af:8d:db:d3:82: 99:f0:d4:24:70:51:4b:ce:12:ee:75:fd:fd:a9:ed:7b:1b:ca: dc:a7:68:95:8d:8a:da:9b:f7:01:8e:11:fb:24:b5:37:85:90: dd:94:e5:14:3d:71:98:1f:39:3e:21:50:f3:ac:fb:03:b1:66: 0c:2d:1d:df:10:65:a4:b8:99:fd:d5:11:6a:1b:4e:fc:4b:bf: 40:b3:30:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGMUJDMkNGNDZEMDE0 Qzc0ODJDMjQxNjJGRTFGRDRBMDM5Q0ZBOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8QniWIuGBAipPkumENuHgT5ON+r3j2pfFB7IHJvzI5QFNfX2j un48tWMh7mepdK98k1ySMj2EPv9/l8B0JccWfZ0H5sirD+Q9jYJfstjmA0t+fPKv rKAeomH+Nh+DtEIa3TwrMchDp+cbbk2+h+2+gRaZyFETnho7a4Rpj9LIYjxVt+Mb j/XsIdoQwjNtF/kANDcN7b305r4f0548vvXwV8zNX8pWybqhceHVszN44bRM5vsY TmQtQDjZ3oXrDVOoELo3otBbGWTV47YnJNVDCcjjBEEyU8qxWvaDTxPnNkQvPGep 4bKIWkU4e6ORNuvUXEswLPxlM8COvRlcmK+JAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHxvCz0bQFMdILCQWL+H9SgOc+pIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0h4dkN6MGJRRk1kSUxDUVdM LUg5U2dPYy1wSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AaYwDQYJKoZIhvcNAQELBQADggEBAGOT8LPpe2x3x2uXDJVS77ej2RtDfg2WDvh3 k0Q27utHS7iOyrZtgq5l9nBMKg92KT97rs14qWnY32MB0Ig7ZzV/VTqti6IjwVzZ wXKvILxz7oS7Y1l0xrkkrOedILdit8+BJD1S3xo8opzvcpdS6mppGv2FdaXIvxkb nzkmp566F69f8hq3AZWDCQ3NKJTGyj1FwidndlrlRMl+xJ8H0u/OG6EKOZ80ykKV Y+CkAkWvjdvTgpnw1CRwUUvOEu51/f2p7XsbytynaJWNitqb9wGOEfsktTeFkN2U 5RQ9cZgfOT4hUPOs+wOxZgwtHd8QZaS4mf3VEWobTvxLv0CzMB8= -----END CERTIFICATE-----Generated at Fri Apr 18 22:31:52 2025 by rpki-client