$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4__lb508IUEh9h1Zw3TglmoFDIw.roa File: 4__lb508IUEh9h1Zw3TglmoFDIw.roa (raw, json) Hash identifier: 9JBHv1ZzQPOTEjIZpjSKxR0HiLm+Q/z5GYpR10QqLJ8= Subject key identifier: E3:FF:E5:6F:9D:3C:21:41:21:F6:1D:59:C3:74:E0:96:6A:05:0C:8C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34A4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4__lb508IUEh9h1Zw3TglmoFDIw.roa Signing time: Mon 10 Feb 2025 13:52:35 +0000 ROA not before: Mon 10 Feb 2025 13:52:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13476 (0x34a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E3FFE56F9D3C214121F61D59C374E0966A050C8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:c7:0d:4f:75:49:ea:38:d3:3e:79:ce:a4: 5d:91:c1:50:7f:a0:08:39:ad:f3:94:30:01:f9:ea: 97:c6:58:9e:90:41:bb:bd:91:3b:12:8d:4b:48:41: 39:01:01:5c:33:5e:f2:a8:b1:60:6f:7d:07:1a:66: b9:07:e3:dd:a1:a4:b8:fb:a5:76:4a:c6:da:0a:7c: 05:99:f7:7d:6d:04:0c:ce:68:bb:dc:d9:24:36:5c: 93:a5:c8:c2:55:bc:84:4d:49:23:26:cf:40:cd:fd: 96:12:5f:f5:53:f7:59:a3:42:1d:98:22:e5:c2:88: d4:d6:41:9c:e8:9d:8a:dd:82:24:96:cc:72:4f:6e: 86:e6:cd:43:1d:d7:04:03:cf:df:28:07:51:05:42: 8f:a3:c8:94:7f:9e:70:db:9f:02:ab:b3:fa:68:7c: 30:50:b5:92:97:d5:07:80:cb:35:98:ab:b1:92:7e: 62:05:2b:b0:a7:af:87:8f:7f:0b:d4:07:4e:71:5a: b1:ae:9a:fe:88:0d:0e:3c:a5:ea:f8:ca:4b:07:a2: f0:89:cb:24:c6:76:65:42:9d:d0:75:6e:f9:e8:67: a5:ba:54:66:4f:f1:f5:3e:51:3d:b7:2a:79:62:0c: 4a:68:2f:65:61:99:51:3c:e0:a5:c9:10:5d:7e:62: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FF:E5:6F:9D:3C:21:41:21:F6:1D:59:C3:74:E0:96:6A:05:0C:8C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4__lb508IUEh9h1Zw3TglmoFDIw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.188.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:2f:c8:2e:30:49:45:53:85:63:6a:78:36:04:00:4b:d9:de: 6f:61:c2:d0:9e:05:b7:af:69:ac:f9:63:98:b7:57:de:3a:00: b3:dc:5c:09:df:67:87:2b:f8:c7:6c:01:fd:dc:03:ef:c1:ca: 86:f3:97:df:13:93:6d:36:12:1d:67:18:a4:56:a5:4b:49:7b: 91:ea:73:d9:a8:e4:f8:37:d4:70:7b:eb:3d:f1:8f:45:2c:31: e6:23:02:ab:20:ec:24:ba:b0:23:e7:fd:7c:ee:13:9e:99:3f: a3:e2:fc:61:cf:6a:be:a9:63:01:5c:1c:d5:1a:ba:f5:62:c3: 74:01:6d:90:c7:1f:d2:d4:95:c2:48:1a:74:33:fc:a7:6a:02: ca:f4:85:f0:fc:87:f9:d9:71:2c:18:62:a6:96:48:b2:c8:8f: 1a:d9:0b:5e:14:2a:69:36:a7:c9:fe:76:84:53:c6:d2:ce:8d: 33:1e:2e:bf:35:05:73:ba:72:81:42:73:29:4c:8e:51:b1:04: 30:cb:cb:a4:c9:13:95:e2:89:1b:71:e8:08:d3:ad:ff:8a:94: 5c:3b:61:4e:7c:15:d0:5d:95:b4:39:83:e5:03:03:27:db:0e: 98:81:19:3c:a2:c0:82:32:fc:3a:dc:61:f3:41:88:28:4c:3d: 52:6f:e9:b6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzRkZFNTZGOUQzQzIx NDEyMUY2MUQ1OUMzNzRFMDk2NkEwNTBDOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtAMcNT3VJ6jjTPnnOpF2RwVB/oAg5rfOUMAH56pfGWJ6QQbu9 kTsSjUtIQTkBAVwzXvKosWBvfQcaZrkH492hpLj7pXZKxtoKfAWZ931tBAzOaLvc 2SQ2XJOlyMJVvIRNSSMmz0DN/ZYSX/VT91mjQh2YIuXCiNTWQZzonYrdgiSWzHJP bobmzUMd1wQDz98oB1EFQo+jyJR/nnDbnwKrs/pofDBQtZKX1QeAyzWYq7GSfmIF K7Cnr4ePfwvUB05xWrGumv6IDQ48per4yksHovCJyyTGdmVCndB1bvnoZ6W6VGZP 8fU+UT23KnliDEpoL2VhmVE84KXJEF1+YmXtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4//lb508IUEh9h1Zw3TglmoFDIwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRfX2xiNTA4SVVFaDloMVp3 M1RnbG1vRkRJdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AbwwDQYJKoZIhvcNAQELBQADggEBAGwvyC4wSUVThWNqeDYEAEvZ3m9hwtCeBbev aaz5Y5i3V946ALPcXAnfZ4cr+MdsAf3cA+/Byobzl98Tk202Eh1nGKRWpUtJe5Hq c9mo5Pg31HB76z3xj0UsMeYjAqsg7CS6sCPn/XzuE56ZP6Pi/GHPar6pYwFcHNUa uvViw3QBbZDHH9LUlcJIGnQz/KdqAsr0hfD8h/nZcSwYYqaWSLLIjxrZC14UKmk2 p8n+doRTxtLOjTMeLr81BXO6coFCcylMjlGxBDDLy6TJE5XiiRtx6AjTrf+KlFw7 YU58FdBdlbQ5g+UDAyfbDpiBGTyiwIIy/DrcYfNBiChMPVJv6bY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:59 2025 by rpki-client