$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmPjwniNEqP2-xU9H9Icqb4tgVg.roa File: wmPjwniNEqP2-xU9H9Icqb4tgVg.roa (raw, json) Hash identifier: x3Asj0eZyaqwYCCBVB/1jkQxQo1ONVDnHnagc7WNGSI= Subject key identifier: C2:63:E3:C2:78:8D:12:A3:F6:FB:15:3D:1F:D2:1C:A9:BE:2D:81:58 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 356D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmPjwniNEqP2-xU9H9Icqb4tgVg.roa Signing time: Mon 10 Feb 2025 13:53:20 +0000 ROA not before: Mon 10 Feb 2025 13:53:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13677 (0x356d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C263E3C2788D12A3F6FB153D1FD21CA9BE2D8158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c5:b5:20:9e:02:78:8d:52:f9:aa:c2:0a:0b: 8f:b1:a9:fd:aa:86:5c:30:50:d9:23:d7:78:c3:cc: f7:ed:d5:99:ed:49:4c:93:5c:22:d4:ef:1e:11:2f: be:5f:13:c1:5b:99:30:fa:1a:e7:92:7d:f0:84:60: 08:13:55:d3:00:13:43:17:0c:6b:21:65:10:31:f7: d1:91:31:ab:dd:b9:ea:6a:a3:3e:19:9e:e9:14:0b: 28:5b:13:fb:09:ed:99:dc:42:a3:9a:75:98:58:fd: 1a:b7:2a:a3:af:48:4d:6e:7c:f8:34:62:62:b0:5d: 7e:8e:80:f6:21:80:bf:c0:ae:fc:81:73:1a:2b:cc: 83:c4:aa:07:3c:5a:47:46:ec:f7:ba:47:83:0d:c1: 1a:f4:bd:5b:e5:7d:f8:a6:55:e7:59:cd:f6:53:3f: 53:20:d0:79:33:37:c6:44:82:1a:0e:67:a1:c6:74: e6:07:27:cb:70:d9:60:85:9a:9a:94:8c:0b:9b:7f: 8f:fd:09:f5:52:38:bd:bd:1a:a8:f8:59:20:76:04: 98:a0:24:6e:98:71:43:1d:bd:4e:aa:87:bb:11:4e: 16:66:cb:9c:f8:07:af:50:c1:0e:7c:7a:e5:bd:00: 63:62:35:b9:fb:c8:1c:ef:c9:b6:8c:3e:0f:0e:02: 54:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:63:E3:C2:78:8D:12:A3:F6:FB:15:3D:1F:D2:1C:A9:BE:2D:81:58 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmPjwniNEqP2-xU9H9Icqb4tgVg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.134.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ba:bc:fa:bd:b8:31:c6:8f:54:6a:85:32:91:09:e0:d3:89: 31:8b:29:17:f4:74:54:8d:ae:bb:c0:be:0a:8b:05:f4:fa:52: 85:80:89:6f:c5:cb:b7:ca:14:47:67:e0:33:27:e7:87:2b:5e: 1e:c5:2c:2d:6c:27:c8:3f:52:ea:28:56:e8:24:11:a0:0c:ee: 3f:74:8e:74:a0:6d:e7:28:1b:c4:4f:17:52:ec:77:ca:5b:09: 01:02:96:8b:84:b5:6a:d7:96:e4:37:c2:f8:44:3f:ac:bb:33: 9e:1c:41:ae:c5:a7:fb:ea:37:f1:1d:b3:59:a6:02:43:9d:d2: 11:0c:4e:a3:2e:bf:3d:13:4e:82:d6:e9:e1:67:6d:81:9e:11: 51:10:8a:e0:19:d3:7a:47:f4:c9:81:f2:b4:35:16:5b:32:32: 05:27:5b:90:b8:de:9c:b9:ef:45:29:91:e6:f1:2f:36:48:fb: c7:9c:fd:30:c2:00:58:52:a0:2c:6b:6b:de:98:89:ab:d3:7c: 7c:c6:a7:a8:bd:10:28:61:8b:6b:17:9b:e2:f4:0f:cd:37:3c: 86:00:db:bc:5b:b4:dc:fc:d2:f9:e1:4a:5b:71:81:df:5e:03: 2b:2e:45:ec:d1:2f:26:08:63:71:7f:b3:e6:c1:65:81:36:17: 60:27:06:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyNjNFM0MyNzg4RDEy QTNGNkZCMTUzRDFGRDIxQ0E5QkUyRDgxNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRxbUgngJ4jVL5qsIKC4+xqf2qhlwwUNkj13jDzPft1ZntSUyT XCLU7x4RL75fE8FbmTD6GueSffCEYAgTVdMAE0MXDGshZRAx99GRMavduepqoz4Z nukUCyhbE/sJ7ZncQqOadZhY/Rq3KqOvSE1ufPg0YmKwXX6OgPYhgL/ArvyBcxor zIPEqgc8WkdG7Pe6R4MNwRr0vVvlffimVedZzfZTP1Mg0HkzN8ZEghoOZ6HGdOYH J8tw2WCFmpqUjAubf4/9CfVSOL29Gqj4WSB2BJigJG6YcUMdvU6qh7sRThZmy5z4 B69QwQ58euW9AGNiNbn7yBzvybaMPg8OAlTDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwmPjwniNEqP2+xU9H9Icqb4tgVgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dtUGp3bmlORXFQMi14VTlI OUljcWI0dGdWZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYYwDQYJKoZIhvcNAQELBQADggEBAHq6vPq9uDHGj1RqhTKRCeDTiTGLKRf0dFSN rrvAvgqLBfT6UoWAiW/Fy7fKFEdn4DMn54crXh7FLC1sJ8g/UuooVugkEaAM7j90 jnSgbecoG8RPF1Lsd8pbCQEClouEtWrXluQ3wvhEP6y7M54cQa7Fp/vqN/Eds1mm AkOd0hEMTqMuvz0TToLW6eFnbYGeEVEQiuAZ03pH9MmB8rQ1FlsyMgUnW5C43py5 70UpkebxLzZI+8ec/TDCAFhSoCxra96YiavTfHzGp6i9EChhi2sXm+L0D803PIYA 27xbtNz80vnhSltxgd9eAysuRezRLyYIY3F/s+bBZYE2F2AnBtg= -----END CERTIFICATE-----Generated at Wed Apr 23 00:28:28 2025 by rpki-client