$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhjZtg5V0mD_LQElO9MnFYzVZVY.roa File: MhjZtg5V0mD_LQElO9MnFYzVZVY.roa (raw, json) Hash identifier: p3Epk19HqdYJvDlmzC55v1ImNKg+wf3jmPZFE5IRGqA= Subject key identifier: 32:18:D9:B6:0E:55:D2:60:FF:2D:01:25:3B:D3:27:15:8C:D5:65:56 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 344C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhjZtg5V0mD_LQElO9MnFYzVZVY.roa Signing time: Mon 10 Feb 2025 13:52:15 +0000 ROA not before: Mon 10 Feb 2025 13:52:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13388 (0x344c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3218D9B60E55D260FF2D01253BD327158CD56556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:7e:aa:df:18:dd:ab:af:4d:fa:bf:4b:c8: d3:44:63:90:ce:93:e1:29:0d:3d:5e:75:89:38:23: ea:dd:ce:08:df:d5:6c:6a:67:18:f8:49:83:8b:96: 0c:1b:26:22:bd:1e:c9:77:17:59:a4:fc:1e:d5:4c: 3b:98:eb:38:b2:c1:2b:25:0b:95:0e:60:8d:de:8c: 65:a1:43:9b:c7:1a:70:7a:19:76:f6:7f:1d:60:eb: 23:13:24:2f:78:7b:25:a6:2a:76:f4:df:41:b2:96: 41:7a:4b:55:52:3c:cf:63:48:31:77:cb:68:f0:fe: 18:91:fb:23:f5:90:cc:0e:76:e0:9d:4f:7d:28:47: 2d:3a:c0:b4:d6:04:33:e7:c5:b9:58:c5:d5:38:c5: 8c:43:8d:11:6e:c2:08:57:7f:3a:67:e9:d5:fc:0a: 5a:ec:58:4a:72:10:4e:66:cb:30:24:76:ab:3b:f1: 7c:09:48:18:88:a5:87:6b:3c:dd:b2:cb:b9:03:57: 48:99:c0:e2:54:ae:e9:e0:77:9d:06:75:90:ef:c9: 17:30:88:8c:3a:cd:d1:75:76:d8:e1:b9:74:5c:ed: 73:d5:f3:49:80:15:09:c8:44:b1:b3:19:3e:0f:9a: 6f:02:b2:1d:45:46:6d:26:e8:eb:f2:16:eb:34:ba: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:18:D9:B6:0E:55:D2:60:FF:2D:01:25:3B:D3:27:15:8C:D5:65:56 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhjZtg5V0mD_LQElO9MnFYzVZVY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.152.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:56:4c:97:d7:37:b1:f5:fa:72:83:1e:12:cd:71:90:b0:a1: e5:3a:62:04:67:16:0d:19:57:ed:ea:2e:90:7f:36:53:ea:96: 29:7e:ed:9d:e2:25:0d:ca:b9:9f:a3:df:12:34:e6:90:54:35: 91:e8:69:d7:5b:22:3c:b1:56:d5:90:82:4e:00:6b:1c:1a:da: 85:b9:c8:42:9a:67:80:b2:b9:1a:d4:44:c3:c7:aa:81:7f:ef: 60:f9:82:cd:57:d9:ed:80:2a:31:2c:43:ed:53:a3:ff:aa:71: c3:c1:5d:30:21:51:38:22:c1:2f:17:28:2a:35:a0:20:ea:36: 0a:c9:c1:6b:15:87:34:28:82:a4:73:48:4f:24:4c:86:49:20: ea:36:10:4c:b4:20:de:a1:13:51:a7:ac:7a:9d:79:da:5a:6f: 74:ea:3c:40:ac:93:99:49:ab:1b:d6:7d:95:06:be:99:2b:af: 82:89:64:dd:31:9e:d6:4d:31:55:eb:fe:ca:23:f2:f3:dd:07: eb:26:f3:c9:8c:b6:dd:9c:cf:45:10:e2:9a:d1:de:c4:d3:c0: 6f:fd:f1:d3:0e:fa:fb:91:fc:af:9d:83:4f:28:33:bb:2c:10: a1:e5:7b:82:af:8f:b5:4d:63:0a:33:35:11:4a:60:69:3c:15: 22:3f:c8:12 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyMThEOUI2MEU1NUQy NjBGRjJEMDEyNTNCRDMyNzE1OENENTY1NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/6X6q3xjdq69N+r9LyNNEY5DOk+EpDT1edYk4I+rdzgjf1Wxq Zxj4SYOLlgwbJiK9Hsl3F1mk/B7VTDuY6ziywSslC5UOYI3ejGWhQ5vHGnB6GXb2 fx1g6yMTJC94eyWmKnb030GylkF6S1VSPM9jSDF3y2jw/hiR+yP1kMwOduCdT30o Ry06wLTWBDPnxblYxdU4xYxDjRFuwghXfzpn6dX8ClrsWEpyEE5myzAkdqs78XwJ SBiIpYdrPN2yy7kDV0iZwOJUrungd50GdZDvyRcwiIw6zdF1dtjhuXRc7XPV80mA FQnIRLGzGT4Pmm8Csh1FRm0m6OvyFus0uqebAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMhjZtg5V0mD/LQElO9MnFYzVZVYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01oalp0ZzVWMG1EX0xRRWxP OU1uRll6VlpWWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AZgwDQYJKoZIhvcNAQELBQADggEBAEtWTJfXN7H1+nKDHhLNcZCwoeU6YgRnFg0Z V+3qLpB/NlPqlil+7Z3iJQ3KuZ+j3xI05pBUNZHoaddbIjyxVtWQgk4Aaxwa2oW5 yEKaZ4CyuRrURMPHqoF/72D5gs1X2e2AKjEsQ+1To/+qccPBXTAhUTgiwS8XKCo1 oCDqNgrJwWsVhzQogqRzSE8kTIZJIOo2EEy0IN6hE1GnrHqdedpab3TqPECsk5lJ qxvWfZUGvpkrr4KJZN0xntZNMVXr/soj8vPdB+sm88mMtt2cz0UQ4prR3sTTwG/9 8dMO+vuR/K+dg08oM7ssEKHle4Kvj7VNYwozNRFKYGk8FSI/yBI= -----END CERTIFICATE-----Generated at Fri Apr 18 23:19:33 2025 by rpki-client