$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1GkIX8S8jCNLOh4DphL76gfFDNw.roa File: 1GkIX8S8jCNLOh4DphL76gfFDNw.roa (raw, json) Hash identifier: GT59WgjKegy1k/rCf/qvyxdsScapaNpTsTlPrr18fKQ= Subject key identifier: D4:69:08:5F:C4:BC:8C:23:4B:3A:1E:03:A6:12:FB:EA:07:C5:0C:DC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 342D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1GkIX8S8jCNLOh4DphL76gfFDNw.roa Signing time: Mon 10 Feb 2025 13:52:08 +0000 ROA not before: Mon 10 Feb 2025 13:52:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13357 (0x342d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D469085FC4BC8C234B3A1E03A612FBEA07C50CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:21:85:cd:48:eb:66:8c:06:48:eb:57:66: f0:91:77:b0:d9:a0:4b:9e:20:75:55:fe:5a:2b:63: fb:da:ab:d2:77:60:fb:e3:c0:5b:ef:7d:61:50:cc: f3:2d:0d:47:ec:77:e7:6e:06:c5:32:30:33:a9:03: f6:03:18:fd:be:c8:a1:4b:b5:2b:fd:09:0b:b2:12: a0:2b:0a:69:7f:10:c3:ee:03:da:a9:9e:03:9d:bd: 97:2c:54:64:ed:1d:0d:1d:0c:d1:a5:46:5d:7b:85: 2d:be:f1:69:ef:52:b4:f8:04:9c:28:98:96:1b:05: fd:b3:93:a0:b8:27:9b:8c:2b:cc:87:48:eb:8a:cb: 4c:d6:79:89:f3:4f:01:17:f7:c2:30:a5:35:30:ba: f4:a0:c1:d2:cd:92:f0:21:c1:cb:42:b1:74:06:44: 73:ca:ea:2f:d1:45:e3:32:db:d0:5e:74:45:1a:d0: 79:ec:2b:89:5a:a9:76:59:d2:54:fb:33:6e:f4:d9: b2:d6:d8:0d:2e:e7:49:d6:19:da:19:e5:3d:26:10: 04:71:ce:bb:1e:55:91:af:b4:d9:15:d9:64:bd:41: 4c:e8:b3:a1:f1:f8:9f:70:04:3a:a9:88:6c:08:62: 92:c2:14:ae:ed:ee:69:57:1c:7c:0d:a0:24:d3:a7: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:69:08:5F:C4:BC:8C:23:4B:3A:1E:03:A6:12:FB:EA:07:C5:0C:DC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1GkIX8S8jCNLOh4DphL76gfFDNw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.132.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:da:67:52:5a:ff:4e:58:0b:0a:27:72:6b:5a:43:92:53:0d: 43:40:9b:e9:88:7e:8a:ed:0f:9b:58:b0:9d:f4:d4:1f:06:92: ec:f4:fd:43:c9:de:a8:18:8e:dd:00:6a:2b:65:40:00:92:5a: 14:4b:49:37:4b:fa:1b:06:ee:e2:5f:e1:02:56:e8:7d:81:0f: fc:b0:9b:7d:1d:16:58:a9:c7:46:d4:8b:60:e5:7c:f6:f8:be: c7:9c:73:d5:5a:6c:d1:bc:46:7e:29:7f:5a:41:07:c0:94:94: 52:38:15:07:18:bd:42:3f:17:00:ce:8d:5e:d5:9e:c2:db:83: 48:a5:e6:a0:82:5c:d7:a7:d3:dc:39:c8:d7:51:04:64:98:3f: 26:a7:8b:1a:77:45:0d:78:55:c2:7f:a7:9f:94:5b:7d:87:36: 8a:0c:2a:ee:2a:04:f0:4b:83:fe:5e:71:fb:ab:a4:ae:25:ea: 0e:27:dd:5b:e2:32:8c:1f:2a:64:6f:17:56:82:bc:cc:ad:f3: 0f:0f:80:c4:c7:f0:16:16:32:4f:b8:57:18:58:e5:50:35:ec: 91:75:25:87:b0:f5:05:0b:b9:33:4b:58:ac:13:ef:9f:8e:e3: b0:6a:ce:8e:d1:a6:04:d6:e6:6f:10:89:6d:53:03:e2:d1:91: 03:7e:5b:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ0NjkwODVGQzRCQzhD MjM0QjNBMUUwM0E2MTJGQkVBMDdDNTBDREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvtyGFzUjrZowGSOtXZvCRd7DZoEueIHVV/lorY/vaq9J3YPvj wFvvfWFQzPMtDUfsd+duBsUyMDOpA/YDGP2+yKFLtSv9CQuyEqArCml/EMPuA9qp ngOdvZcsVGTtHQ0dDNGlRl17hS2+8WnvUrT4BJwomJYbBf2zk6C4J5uMK8yHSOuK y0zWeYnzTwEX98IwpTUwuvSgwdLNkvAhwctCsXQGRHPK6i/RReMy29BedEUa0Hns K4laqXZZ0lT7M2702bLW2A0u50nWGdoZ5T0mEARxzrseVZGvtNkV2WS9QUzos6Hx +J9wBDqpiGwIYpLCFK7t7mlXHHwNoCTTp8RlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1GkIX8S8jCNLOh4DphL76gfFDNwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFHa0lYOFM4akNOTE9oNERw aEw3NmdmRkROdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYQwDQYJKoZIhvcNAQELBQADggEBAEvaZ1Ja/05YCwoncmtaQ5JTDUNAm+mIfort D5tYsJ301B8Gkuz0/UPJ3qgYjt0AaitlQACSWhRLSTdL+hsG7uJf4QJW6H2BD/yw m30dFlipx0bUi2DlfPb4vsecc9VabNG8Rn4pf1pBB8CUlFI4FQcYvUI/FwDOjV7V nsLbg0il5qCCXNen09w5yNdRBGSYPyanixp3RQ14VcJ/p5+UW32HNooMKu4qBPBL g/5ecfurpK4l6g4n3VviMowfKmRvF1aCvMyt8w8PgMTH8BYWMk+4VxhY5VA17JF1 JYew9QULuTNLWKwT75+O47Bqzo7RpgTW5m8QiW1TA+LRkQN+W58= -----END CERTIFICATE-----Generated at Wed Feb 19 21:59:04 2025 by rpki-client