$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hL9XuYsEdJ1gzYXVl0h8KHfac8A.roa File: hL9XuYsEdJ1gzYXVl0h8KHfac8A.roa (raw, json) Hash identifier: 8j42wzoPGq6+lse3R/gBeEeMz6d7ScxFWQHKddRZ824= Subject key identifier: 84:BF:57:B9:8B:04:74:9D:60:CD:85:D5:97:48:7C:28:77:DA:73:C0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34EF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hL9XuYsEdJ1gzYXVl0h8KHfac8A.roa Signing time: Mon 10 Feb 2025 13:52:50 +0000 ROA not before: Mon 10 Feb 2025 13:52:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=84BF57B98B04749D60CD85D597487C2877DA73C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:b5:0e:1a:89:39:4f:ba:ab:cd:9c:63:3d: a6:2d:4e:12:0e:06:d3:b2:59:5f:ee:d5:39:d8:55: 68:ea:ce:52:99:23:fd:6e:93:cb:28:bd:0f:31:7d: 06:f6:0f:c6:26:47:45:24:93:4e:cf:74:e6:02:8b: 67:c1:10:c9:5b:f2:81:24:6e:9d:0f:08:94:20:bb: 96:2a:9d:2c:01:7e:36:2a:b0:d5:e4:80:8f:dd:87: a8:1d:94:cc:a0:7b:ec:dd:98:1a:fa:19:6f:a6:ee: 5b:61:8b:9a:81:b9:97:d7:ff:e9:47:1f:ab:32:44: 7b:ea:5b:85:08:64:34:3e:d8:31:5e:9a:54:1b:56: cd:fe:f9:df:74:ea:02:d7:c4:20:81:c5:4a:91:ac: 35:e7:c0:64:ee:b4:63:0e:2e:13:e1:2c:c6:23:41: 77:1e:2a:9c:00:b1:88:db:ad:cd:6a:81:1b:b0:d7: 37:c2:76:ae:a9:30:83:0b:14:e7:07:74:2f:65:63: 87:2d:59:d9:4c:54:ff:72:b0:b8:bf:5b:c6:b5:ce: b8:d1:e0:3e:f2:6f:4b:dc:6c:3d:35:5c:af:b8:68: 44:ab:b9:9c:fd:5f:a4:57:5e:36:3e:b9:ab:f0:96: 8f:da:59:a7:47:06:f2:63:30:53:7f:3c:81:f7:0d: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:57:B9:8B:04:74:9D:60:CD:85:D5:97:48:7C:28:77:DA:73:C0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hL9XuYsEdJ1gzYXVl0h8KHfac8A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.14.0/24 Signature Algorithm: sha256WithRSAEncryption 15:ed:75:fb:15:49:6e:3a:55:ee:f5:1c:b4:09:92:7e:62:82: 72:48:c4:bd:4e:d3:68:9c:86:d5:04:f1:d8:b5:82:44:18:fd: c2:96:96:2d:17:9f:c5:5b:44:85:ce:75:47:d7:74:31:5a:14: 1a:5f:5a:8c:b0:60:54:b6:68:b4:56:06:42:f5:45:3f:44:c0: 7f:e7:a7:d1:73:43:c7:2e:3f:c2:1c:de:0a:7d:81:90:68:03: a5:34:d1:55:62:d8:45:00:bc:7a:39:6f:7b:50:cd:85:42:03: 5a:f0:d5:56:7e:a7:fd:83:19:0f:6c:0a:bd:55:66:47:ba:02: e5:35:22:9d:3f:11:29:b9:b9:02:9d:1a:17:9a:70:1c:8e:04: 2d:27:65:44:0d:d7:cd:90:30:fa:0a:31:3d:8f:dc:11:ff:be: f1:6d:22:af:7d:b1:b0:fd:78:dd:7f:97:c1:1b:fd:6c:68:d3: 5b:31:d9:8b:81:a1:69:45:8d:01:09:61:f6:ce:ca:1e:10:f2: d0:df:7d:de:63:31:63:73:aa:cc:44:56:83:d9:1f:de:14:2b: 94:3d:17:24:f0:e1:b6:ff:dd:0a:dc:4a:14:ae:c5:63:e0:ac: 58:e4:71:14:65:5d:0d:1a:26:ef:67:ad:a9:5d:65:dd:61:7d: c1:64:a3:df -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0QkY1N0I5OEIwNDc0 OUQ2MENEODVENTk3NDg3QzI4NzdEQTczQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4YLUOGok5T7qrzZxjPaYtThIOBtOyWV/u1TnYVWjqzlKZI/1u k8sovQ8xfQb2D8YmR0Ukk07PdOYCi2fBEMlb8oEkbp0PCJQgu5YqnSwBfjYqsNXk gI/dh6gdlMyge+zdmBr6GW+m7lthi5qBuZfX/+lHH6syRHvqW4UIZDQ+2DFemlQb Vs3++d906gLXxCCBxUqRrDXnwGTutGMOLhPhLMYjQXceKpwAsYjbrc1qgRuw1zfC dq6pMIMLFOcHdC9lY4ctWdlMVP9ysLi/W8a1zrjR4D7yb0vcbD01XK+4aESruZz9 X6RXXjY+uavwlo/aWadHBvJjMFN/PIH3DbSVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhL9XuYsEdJ1gzYXVl0h8KHfac8AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hMOVh1WXNFZEoxZ3pZWFZs MGg4S0hmYWM4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AQ4wDQYJKoZIhvcNAQELBQADggEBABXtdfsVSW46Ve71HLQJkn5ignJIxL1O02ic htUE8di1gkQY/cKWli0Xn8VbRIXOdUfXdDFaFBpfWoywYFS2aLRWBkL1RT9EwH/n p9FzQ8cuP8Ic3gp9gZBoA6U00VVi2EUAvHo5b3tQzYVCA1rw1VZ+p/2DGQ9sCr1V Zke6AuU1Ip0/ESm5uQKdGheacByOBC0nZUQN182QMPoKMT2P3BH/vvFtIq99sbD9 eN1/l8Eb/Wxo01sx2YuBoWlFjQEJYfbOyh4Q8tDffd5jMWNzqsxEVoPZH94UK5Q9 FyTw4bb/3QrcShSuxWPgrFjkcRRlXQ0aJu9nraldZd1hfcFko98= -----END CERTIFICATE-----Generated at Wed Apr 23 04:49:04 2025 by rpki-client