$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BdjIab7rFhuMe_qSkrikl9AkcWs.roa File: BdjIab7rFhuMe_qSkrikl9AkcWs.roa (raw, json) Hash identifier: 0JeSEllISv/X5hYLTBB6EKKwYLYzOKsqEE6VQ4q5/Fg= Subject key identifier: 05:D8:C8:69:BE:EB:16:1B:8C:7B:FA:92:92:B8:A4:97:D0:24:71:6B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3393 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BdjIab7rFhuMe_qSkrikl9AkcWs.roa Signing time: Mon 10 Feb 2025 13:51:33 +0000 ROA not before: Mon 10 Feb 2025 13:51:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13203 (0x3393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=05D8C869BEEB161B8C7BFA9292B8A497D024716B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:bd:47:ff:d6:43:ee:72:78:bb:15:55:d1: 6b:e5:e4:ef:3c:cb:7d:a1:fd:e8:52:fa:f2:56:78: 3f:f8:24:a5:b4:d5:b5:71:27:68:d5:b5:12:8e:02: 4f:6d:5f:a7:f0:9d:10:53:d1:3d:4b:85:e6:4f:d4: cd:84:6e:0c:d9:0c:9c:d2:65:71:42:85:10:3c:0b: b3:24:af:1b:6d:4c:22:d4:03:d7:41:7b:4a:e1:3f: af:f6:26:c2:f1:3a:50:cc:45:26:4d:d1:9d:20:2a: e1:f5:80:cf:fe:23:7f:7f:73:5f:72:a2:f7:d7:60: 3d:65:ee:e2:86:a0:bc:1b:96:e2:3e:21:c1:61:45: 71:f5:11:23:cd:1b:47:71:43:a7:1f:91:49:06:c9: c4:a8:a2:a2:82:9d:a7:08:0d:4a:67:4f:4b:61:8b: 67:79:b4:ed:9c:5f:b4:40:20:5b:71:44:76:55:13: d7:17:61:e8:40:9d:bd:a0:05:91:c9:88:9b:07:31: 34:52:75:cd:d3:6e:cc:d0:89:66:5c:c5:2e:c6:44: 2f:13:f5:be:e0:c1:ef:fb:82:12:3d:d5:b4:d5:fa: 12:33:68:84:2a:fd:2c:a1:ae:05:de:5b:f5:11:31: ce:9a:06:e5:aa:9b:91:61:91:4a:3d:cd:88:0e:06: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D8:C8:69:BE:EB:16:1B:8C:7B:FA:92:92:B8:A4:97:D0:24:71:6B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BdjIab7rFhuMe_qSkrikl9AkcWs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.224.0/22 Signature Algorithm: sha256WithRSAEncryption 86:7a:e5:0d:b4:56:8f:05:68:41:0e:36:ca:83:07:ea:93:ef: 6f:bd:bc:a5:1c:10:8a:d9:6c:de:dc:a2:a6:be:31:5c:3d:12: 2a:4b:8d:cf:3f:44:09:c6:6b:d0:2f:51:5f:3a:fc:c9:2a:fc: 0d:68:e2:21:cc:e5:91:1f:30:5f:12:73:f8:71:79:4e:ac:5f: 05:29:d4:0b:f9:bd:dc:b9:11:b0:2d:0c:71:44:bc:d2:5b:06: e2:36:87:a6:f0:4e:ea:88:71:59:a8:51:b9:db:a7:bd:4f:3e: 47:5d:d3:07:62:94:04:5a:5c:2f:ea:5e:9e:ce:00:75:d4:dc: 8c:4d:f3:ae:16:76:5d:76:5b:be:05:16:16:ff:c7:f0:d8:e5: 16:83:84:76:84:2f:ef:b6:f1:35:06:0d:76:ae:9a:77:ef:e0: 5a:80:d5:7c:bd:aa:1a:41:c4:cb:46:81:db:50:58:55:3f:80: d9:aa:6e:3a:48:c2:b2:0d:58:01:1b:c2:4a:62:eb:2e:10:8f: 1b:2f:ba:8f:98:58:49:58:e0:3e:b6:e5:8c:72:49:de:fd:f7: 0f:a9:50:c9:17:1a:44:04:01:37:80:63:b6:b6:c0:a6:4f:99: 06:66:9d:85:b6:ae:b7:f6:1e:23:b6:5b:f9:95:0b:57:5d:e0: 64:62:16:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1RDhDODY5QkVFQjE2 MUI4QzdCRkE5MjkyQjhBNDk3RDAyNDcxNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3Nb1H/9ZD7nJ4uxVV0Wvl5O88y32h/ehS+vJWeD/4JKW01bVx J2jVtRKOAk9tX6fwnRBT0T1LheZP1M2EbgzZDJzSZXFChRA8C7MkrxttTCLUA9dB e0rhP6/2JsLxOlDMRSZN0Z0gKuH1gM/+I39/c19yovfXYD1l7uKGoLwbluI+IcFh RXH1ESPNG0dxQ6cfkUkGycSooqKCnacIDUpnT0thi2d5tO2cX7RAIFtxRHZVE9cX YehAnb2gBZHJiJsHMTRSdc3TbszQiWZcxS7GRC8T9b7gwe/7ghI91bTV+hIzaIQq /SyhrgXeW/URMc6aBuWqm5FhkUo9zYgOBk3NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBdjIab7rFhuMe/qSkrikl9AkcWswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JkaklhYjdyRmh1TWVfcVNr cmlrbDlBa2NXcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AeAwDQYJKoZIhvcNAQELBQADggEBAIZ65Q20Vo8FaEEONsqDB+qT72+9vKUcEIrZ bN7coqa+MVw9EipLjc8/RAnGa9AvUV86/Mkq/A1o4iHM5ZEfMF8Sc/hxeU6sXwUp 1Av5vdy5EbAtDHFEvNJbBuI2h6bwTuqIcVmoUbnbp71PPkdd0wdilARaXC/qXp7O AHXU3IxN864Wdl12W74FFhb/x/DY5RaDhHaEL++28TUGDXaumnfv4FqA1Xy9qhpB xMtGgdtQWFU/gNmqbjpIwrINWAEbwkpi6y4Qjxsvuo+YWElY4D625YxySd799w+p UMkXGkQEATeAY7a2wKZPmQZmnYW2rrf2HiO2W/mVC1dd4GRiFmw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:00:31 2025 by rpki-client