$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ob__XUVz2aKAvji81z3zCgnOSAs.roa File: Ob__XUVz2aKAvji81z3zCgnOSAs.roa (raw, json) Hash identifier: hCuXc2pJs3HsO9w13GpjkMDT0VA4aYDvC+YKhktoy+E= Subject key identifier: 39:BF:FF:5D:45:73:D9:A2:80:BE:38:BC:D7:3D:F3:0A:09:CE:48:0B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33C4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ob__XUVz2aKAvji81z3zCgnOSAs.roa Signing time: Mon 10 Feb 2025 13:51:45 +0000 ROA not before: Mon 10 Feb 2025 13:51:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39BFFF5D4573D9A280BE38BCD73DF30A09CE480B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:f5:38:ab:1c:35:73:7c:a5:a5:d7:fd:56: 06:c6:7e:03:6a:2d:d8:26:56:77:d5:20:f0:2d:01: 59:da:de:c1:a3:58:e5:78:f3:b3:62:0d:c3:25:47: 34:2a:18:9d:32:1e:05:26:ef:0b:21:3f:b2:8d:30: 10:0e:a8:dd:84:d0:d5:28:f5:13:76:99:25:c8:0c: b5:5e:39:e4:be:44:10:3c:e1:a5:7d:d4:fe:5f:ec: 47:c4:12:af:1b:03:dd:63:37:e3:02:4f:19:f3:f6: ec:f1:28:4a:7a:22:da:9f:22:47:ee:20:79:8b:9c: 6d:bd:86:02:5c:29:cc:02:9a:c9:5c:40:11:77:45: c3:05:36:f5:91:32:26:85:15:0a:3c:6d:e0:3c:32: 8f:96:26:e9:2b:d7:77:46:5f:32:67:67:ab:e1:10: 76:30:07:41:94:8f:bf:72:14:bb:05:96:5f:01:b1: 1c:e2:b3:3c:bd:59:4a:bb:af:5a:84:8c:04:84:b1: d5:aa:3d:be:ef:aa:8d:c4:27:a4:76:bf:ee:cc:04: 86:d0:73:b8:eb:78:00:f2:10:a1:d0:2a:33:f0:7c: 90:46:1c:93:9b:88:fc:ec:a7:34:b9:d8:65:26:bc: cd:00:c6:98:6e:4e:39:f1:6b:33:cb:ec:37:88:7e: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BF:FF:5D:45:73:D9:A2:80:BE:38:BC:D7:3D:F3:0A:09:CE:48:0B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ob__XUVz2aKAvji81z3zCgnOSAs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.140.0/22 Signature Algorithm: sha256WithRSAEncryption 97:4e:b3:91:56:4b:5e:e7:16:39:c3:b9:6e:26:2b:03:50:8f: 43:e8:dc:d8:3b:99:a9:70:b0:0f:8a:d0:a3:a7:a7:b6:db:13: 98:11:fd:20:61:c0:0c:ac:05:95:a6:0e:21:1d:4c:36:80:de: 7d:dd:5a:56:4b:50:26:18:97:8e:c1:27:e4:b7:e6:79:c1:f6: 40:5d:a4:98:a8:1a:65:9e:f4:51:e0:97:72:b4:31:ba:3c:e3: ca:b3:9c:e5:29:3e:7a:a6:09:3a:09:9e:67:fd:fe:f1:bd:6c: bd:d4:bd:9d:6b:e8:07:f4:bd:0f:6e:64:b0:4a:59:5d:38:31: 57:fd:93:91:14:45:10:12:f2:da:38:b7:2b:8b:9e:b8:4e:28: c3:2a:f1:ae:2d:d0:0c:ed:8c:78:bd:49:12:28:b4:b1:8a:0f: c4:0a:89:3e:3e:a2:63:77:bf:94:bc:d4:a5:41:df:2e:23:b9: 0b:75:89:6a:15:f6:63:9d:49:54:97:8a:ba:52:71:82:b4:6c: 58:09:f7:ee:a8:e5:c1:1f:89:18:4b:00:31:65:1c:b0:19:31: dc:02:51:df:bc:44:97:34:24:3a:3d:03:d4:93:f3:07:f7:2e: e4:a8:a9:a2:76:d7:59:76:be:4f:69:be:2d:6b:af:42:49:68: 01:52:2f:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5QkZGRjVENDU3M0Q5 QTI4MEJFMzhCQ0Q3M0RGMzBBMDlDRTQ4MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0FPU4qxw1c3ylpdf9VgbGfgNqLdgmVnfVIPAtAVna3sGjWOV4 87NiDcMlRzQqGJ0yHgUm7wshP7KNMBAOqN2E0NUo9RN2mSXIDLVeOeS+RBA84aV9 1P5f7EfEEq8bA91jN+MCTxnz9uzxKEp6ItqfIkfuIHmLnG29hgJcKcwCmslcQBF3 RcMFNvWRMiaFFQo8beA8Mo+WJukr13dGXzJnZ6vhEHYwB0GUj79yFLsFll8BsRzi szy9WUq7r1qEjASEsdWqPb7vqo3EJ6R2v+7MBIbQc7jreADyEKHQKjPwfJBGHJOb iPzspzS52GUmvM0AxphuTjnxazPL7DeIfiqTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOb//XUVz2aKAvji81z3zCgnOSAswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09iX19YVVZ6MmFLQXZqaTgx ejN6Q2duT1NBcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AYwwDQYJKoZIhvcNAQELBQADggEBAJdOs5FWS17nFjnDuW4mKwNQj0Po3Ng7malw sA+K0KOnp7bbE5gR/SBhwAysBZWmDiEdTDaA3n3dWlZLUCYYl47BJ+S35nnB9kBd pJioGmWe9FHgl3K0Mbo848qznOUpPnqmCToJnmf9/vG9bL3UvZ1r6Af0vQ9uZLBK WV04MVf9k5EURRAS8to4tyuLnrhOKMMq8a4t0AztjHi9SRIotLGKD8QKiT4+omN3 v5S81KVB3y4juQt1iWoV9mOdSVSXirpScYK0bFgJ9+6o5cEfiRhLADFlHLAZMdwC Ud+8RJc0JDo9A9ST8wf3LuSoqaJ211l2vk9pvi1rr0JJaAFSLzA= -----END CERTIFICATE-----Generated at Fri Apr 18 22:44:01 2025 by rpki-client