$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jfOYfFRCgS-VdgCyhxDXCpLwsho.roa File: jfOYfFRCgS-VdgCyhxDXCpLwsho.roa (raw, json) Hash identifier: cOc6zg2u/qd4fD/jzIWghlnGpvqqtSw/B2oF3URRHGk= Subject key identifier: 8D:F3:98:7C:54:42:81:2F:95:76:00:B2:87:10:D7:0A:92:F0:B2:1A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33D1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jfOYfFRCgS-VdgCyhxDXCpLwsho.roa Signing time: Mon 10 Feb 2025 13:51:48 +0000 ROA not before: Mon 10 Feb 2025 13:51:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13265 (0x33d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8DF3987C5442812F957600B28710D70A92F0B21A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:84:36:03:c1:21:43:2d:65:8b:54:27:3f: 6a:1d:ec:53:39:19:28:a7:88:a2:ba:de:de:75:2e: 98:1f:d1:0e:4f:69:cf:0c:da:b5:8f:35:fe:1f:a6: 92:f9:bb:7c:19:56:77:b4:83:f4:8f:68:0f:0f:ae: 9f:8c:d1:25:bb:3a:79:d7:83:9f:33:d5:fe:d1:69: ef:3e:21:33:cb:22:d8:39:55:34:18:b1:b3:06:86: 10:38:2c:eb:32:16:b6:21:ac:52:c6:82:3a:ef:fc: 29:cb:c3:6f:08:4e:22:6f:d0:cc:0e:a0:70:e1:b0: b2:7f:c1:d7:78:d9:2e:9c:32:49:32:a9:e3:dd:01: 7d:ab:e2:e5:76:b5:bd:17:10:31:24:9d:f4:8c:8f: 89:a1:6c:d3:2e:62:aa:22:81:b9:8d:da:a1:b8:cb: 56:72:d5:06:72:09:26:44:ed:39:1c:82:d4:24:64: 87:93:9b:3b:1e:0a:83:ee:b9:2a:2a:2f:7b:d3:0b: 0d:97:21:f0:d1:29:7b:ab:de:80:be:23:fd:4d:6a: a6:78:79:c4:2b:97:d9:4b:de:d5:74:52:00:de:0a: 41:86:d8:7b:b7:19:2f:c4:2e:07:07:ed:fe:6e:26: 13:cd:56:af:49:ea:1e:8e:93:53:d8:2d:39:d2:bd: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:98:7C:54:42:81:2F:95:76:00:B2:87:10:D7:0A:92:F0:B2:1A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jfOYfFRCgS-VdgCyhxDXCpLwsho.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.248.0/22 Signature Algorithm: sha256WithRSAEncryption 69:76:8b:83:17:32:93:25:c4:af:e6:79:e9:60:27:15:b2:b3: ef:4f:71:96:29:44:bb:a5:77:61:b5:42:35:5d:0a:df:ee:a9: 37:59:4a:b2:93:5b:8b:73:cd:5c:6b:04:f3:3e:20:47:57:43: c3:13:42:35:bd:61:89:4f:fa:2c:53:72:c7:07:95:5e:51:ac: 6d:3a:88:6a:d1:12:7a:73:30:f7:ba:6b:7a:c3:1a:b0:57:a2: 8f:a3:de:8a:92:d0:1c:18:cb:31:1b:5f:2e:82:54:aa:c8:22: 78:05:bf:f6:b2:bf:62:38:0f:11:c6:93:72:cc:e3:e4:b6:24: 98:b6:ba:3b:c1:bb:af:29:6b:35:75:8c:2c:c2:13:d6:e2:65: b4:e8:11:67:64:c8:e1:2a:66:8d:d3:41:80:fa:24:4a:55:d5: 66:1d:53:87:06:28:62:36:1b:dd:51:08:de:87:35:8b:8f:6b: 74:9f:c7:d8:82:63:3b:8a:40:b9:fc:cc:53:7c:b0:6e:01:70: 00:cf:b9:12:d5:b3:ab:49:cb:3e:a1:b5:26:e2:fd:e2:f2:d4: 79:04:8c:97:34:a5:81:19:2f:19:c0:95:85:30:33:7c:ad:cf: 84:f3:9c:ee:7e:8a:22:8d:29:0e:5c:b1:05:2c:7a:b5:96:5d: 1f:3a:f4:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhERjM5ODdDNTQ0Mjgx MkY5NTc2MDBCMjg3MTBENzBBOTJGMEIyMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWkYQ2A8EhQy1li1QnP2od7FM5GSiniKK63t51Lpgf0Q5Pac8M 2rWPNf4fppL5u3wZVne0g/SPaA8Prp+M0SW7OnnXg58z1f7Rae8+ITPLItg5VTQY sbMGhhA4LOsyFrYhrFLGgjrv/CnLw28ITiJv0MwOoHDhsLJ/wdd42S6cMkkyqePd AX2r4uV2tb0XEDEknfSMj4mhbNMuYqoigbmN2qG4y1Zy1QZyCSZE7TkcgtQkZIeT mzseCoPuuSoqL3vTCw2XIfDRKXur3oC+I/1NaqZ4ecQrl9lL3tV0UgDeCkGG2Hu3 GS/ELgcH7f5uJhPNVq9J6h6Ok1PYLTnSvQUvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjfOYfFRCgS+VdgCyhxDXCpLwshowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pmT1lmRlJDZ1MtVmRnQ3lo eERYQ3BMd3Noby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfgwDQYJKoZIhvcNAQELBQADggEBAGl2i4MXMpMlxK/meelgJxWys+9PcZYpRLul d2G1QjVdCt/uqTdZSrKTW4tzzVxrBPM+IEdXQ8MTQjW9YYlP+ixTcscHlV5RrG06 iGrREnpzMPe6a3rDGrBXoo+j3oqS0BwYyzEbXy6CVKrIIngFv/ayv2I4DxHGk3LM 4+S2JJi2ujvBu68pazV1jCzCE9biZbToEWdkyOEqZo3TQYD6JEpV1WYdU4cGKGI2 G91RCN6HNYuPa3Sfx9iCYzuKQLn8zFN8sG4BcADPuRLVs6tJyz6htSbi/eLy1HkE jJc0pYEZLxnAlYUwM3ytz4TznO5+iiKNKQ5csQUserWWXR869FI= -----END CERTIFICATE-----Generated at Wed Apr 23 04:42:40 2025 by rpki-client