$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oocoAL2wMd_Abw9W4Ee_3JAY4FI.roa File: oocoAL2wMd_Abw9W4Ee_3JAY4FI.roa (raw, json) Hash identifier: vKc13z0ZMAvRGbp+TxN7qNIGajq0nAT1MXHcM5/SjxY= Subject key identifier: A2:87:28:00:BD:B0:31:DF:C0:6F:0F:56:E0:47:BF:DC:90:18:E0:52 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34E9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oocoAL2wMd_Abw9W4Ee_3JAY4FI.roa Signing time: Mon 10 Feb 2025 13:52:49 +0000 ROA not before: Mon 10 Feb 2025 13:52:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 10:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A2872800BDB031DFC06F0F56E047BFDC9018E052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:e1:7c:98:6c:b6:6a:ee:8d:67:c9:72:7f: b2:53:c8:58:ae:a5:e1:51:23:53:43:0b:a3:e0:bb: b9:68:55:e9:7b:a9:65:e9:56:0e:a8:43:36:f1:93: b8:67:18:20:a0:aa:6b:81:bc:89:cc:c8:f7:05:85: 9d:3c:a6:ad:f9:2b:a4:6d:8b:00:71:c0:b3:e8:b0: ea:20:5b:64:50:19:48:b4:1b:21:52:71:04:cf:01: b7:93:f8:12:bc:ee:28:a0:c0:1f:f9:93:7f:98:26: 3b:ba:58:15:ba:ab:ec:1a:36:d6:7a:ec:ad:b8:6f: aa:5e:83:15:6e:da:77:34:86:15:e1:85:dc:9c:ec: e9:d7:92:fc:80:4c:39:b5:4d:c8:22:73:d8:22:c6: fe:73:84:c5:71:b7:bd:95:b1:56:aa:a8:20:56:2c: b5:56:36:0c:89:fd:50:da:2f:cc:cd:8a:4f:8c:ac: 99:e4:39:6b:f2:fa:9f:4e:6b:ee:95:94:5e:a5:e2: e8:03:6c:c0:3d:3d:e5:90:f5:5f:d3:52:c8:11:84: ae:6e:b9:ae:4f:50:80:26:f7:98:10:52:eb:a3:7a: 0e:b3:61:90:a4:c2:7c:b8:d4:fc:fe:61:48:32:ea: 09:15:13:e7:b5:85:55:c9:34:2d:91:c8:00:29:fc: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:87:28:00:BD:B0:31:DF:C0:6F:0F:56:E0:47:BF:DC:90:18:E0:52 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oocoAL2wMd_Abw9W4Ee_3JAY4FI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.108.0/22 Signature Algorithm: sha256WithRSAEncryption 65:2a:50:d8:5e:9c:b5:e9:ad:1d:fe:3b:11:88:8b:6d:3c:cf: 4d:35:cd:05:e4:8f:76:c2:ed:c2:22:43:c5:fa:ba:f7:0e:bb: c3:2f:9a:6b:3a:6a:8e:36:25:b6:07:0f:f5:8d:e2:e8:11:18: cb:ee:fb:53:1b:4d:2d:4b:94:8f:da:af:2a:e5:9a:51:86:95: 10:a9:66:66:6f:55:99:76:4f:7d:26:da:14:3e:ac:ed:54:9e: 33:52:3c:60:68:40:30:15:92:2a:c7:65:e3:9d:ba:00:af:a3: 6d:de:70:bc:17:a0:61:21:ac:fb:46:3f:20:11:46:2f:7a:bb: 1a:08:62:e3:64:76:54:74:c6:02:e3:b7:ff:75:7b:fe:61:37: ea:19:97:d5:71:cd:fe:57:84:ee:75:24:3d:2a:9f:ed:8f:ac: 9b:42:ec:57:2b:70:31:1c:8d:c5:22:9e:fb:f0:56:99:97:d2: 60:cf:7e:75:72:f4:76:ca:98:2b:dd:87:cc:68:d7:5f:df:37: aa:ee:9d:ae:5c:1f:ce:15:8b:47:f5:42:cb:77:9a:16:a7:fc: bf:49:28:43:a1:e4:36:cd:a0:03:6a:38:c7:f9:a6:78:f6:2b: 16:84:53:62:31:66:33:8d:0e:a4:f1:67:6d:43:96:cb:83:bd: 10:71:25:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyODcyODAwQkRCMDMx REZDMDZGMEY1NkUwNDdCRkRDOTAxOEUwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9heF8mGy2au6NZ8lyf7JTyFiupeFRI1NDC6Pgu7loVel7qWXp Vg6oQzbxk7hnGCCgqmuBvInMyPcFhZ08pq35K6RtiwBxwLPosOogW2RQGUi0GyFS cQTPAbeT+BK87iigwB/5k3+YJju6WBW6q+waNtZ67K24b6pegxVu2nc0hhXhhdyc 7OnXkvyATDm1Tcgic9gixv5zhMVxt72VsVaqqCBWLLVWNgyJ/VDaL8zNik+MrJnk OWvy+p9Oa+6VlF6l4ugDbMA9PeWQ9V/TUsgRhK5uua5PUIAm95gQUuujeg6zYZCk wny41Pz+YUgy6gkVE+e1hVXJNC2RyAAp/ImTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoocoAL2wMd/Abw9W4Ee/3JAY4FIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29vY29BTDJ3TWRfQWJ3OVc0 RWVfM0pBWTRGSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AWwwDQYJKoZIhvcNAQELBQADggEBAGUqUNhenLXprR3+OxGIi208z001zQXkj3bC 7cIiQ8X6uvcOu8Mvmms6ao42JbYHD/WN4ugRGMvu+1MbTS1LlI/aryrlmlGGlRCp ZmZvVZl2T30m2hQ+rO1UnjNSPGBoQDAVkirHZeOdugCvo23ecLwXoGEhrPtGPyAR Ri96uxoIYuNkdlR0xgLjt/91e/5hN+oZl9Vxzf5XhO51JD0qn+2PrJtC7FcrcDEc jcUinvvwVpmX0mDPfnVy9HbKmCvdh8xo11/fN6runa5cH84Vi0f1Qst3mhan/L9J KEOh5DbNoANqOMf5pnj2KxaEU2IxZjONDqTxZ21DlsuDvRBxJTE= -----END CERTIFICATE-----Generated at Wed Apr 23 08:36:54 2025 by rpki-client