$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C08Xxd5uAqD6Wm2xX0eGxjmj1wk.roa File: C08Xxd5uAqD6Wm2xX0eGxjmj1wk.roa (raw, json) Hash identifier: c4DeVRIhx1z8v/dtTIsKv7OigjRJu4w8MDf2TGAwcrY= Subject key identifier: 0B:4F:17:C5:DE:6E:02:A0:FA:5A:6D:B1:5F:47:86:C6:39:A3:D7:09 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3570 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C08Xxd5uAqD6Wm2xX0eGxjmj1wk.roa Signing time: Mon 10 Feb 2025 13:53:20 +0000 ROA not before: Mon 10 Feb 2025 13:53:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13680 (0x3570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0B4F17C5DE6E02A0FA5A6DB15F4786C639A3D709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:ed:a1:a4:46:9b:14:62:8d:6e:ee:c4:ee: 2f:1c:91:02:5a:d9:90:36:ad:33:a4:ff:11:e6:d9: 63:11:37:bd:f9:14:fe:52:e7:30:ca:71:28:95:02: b4:5a:30:05:74:5d:cc:78:01:57:11:74:22:5d:03: 56:0e:76:be:01:91:83:4c:58:ca:f4:e8:12:26:ea: da:c6:54:23:d2:3e:46:a6:2b:80:f9:51:b8:e5:c9: 45:e0:2c:2c:3d:fe:3b:97:06:72:c9:26:f8:a1:38: a5:df:e1:cb:03:42:fa:a0:b3:aa:55:09:12:75:d2: ab:3d:b5:16:63:33:05:9a:3e:a3:53:cf:a3:19:6a: 00:01:42:bd:57:d9:e0:ca:59:de:5c:62:dd:c9:ca: 34:0f:c1:4a:5a:ab:16:dc:e3:0a:ce:df:6a:63:e7: 88:df:f5:6d:ff:e0:87:49:0a:03:d5:47:a2:21:67: bf:fb:c8:4d:1f:57:48:ec:bd:15:ac:07:21:83:4e: fe:8c:fe:97:fa:4e:59:76:e5:cd:a7:eb:8d:14:0d: f3:70:49:80:16:bf:11:74:15:3e:db:8c:43:d5:79: 5a:1e:38:47:ef:14:5a:1a:8d:b3:28:4b:50:aa:ec: 79:5f:c1:ff:d9:5f:e0:f2:8b:99:ca:c8:53:2e:7f: 59:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4F:17:C5:DE:6E:02:A0:FA:5A:6D:B1:5F:47:86:C6:39:A3:D7:09 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C08Xxd5uAqD6Wm2xX0eGxjmj1wk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.92.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:20:37:35:87:c3:ba:e5:85:06:0b:43:39:25:58:83:96:e5: bd:82:60:a5:ce:bd:58:a2:58:70:10:43:d2:b2:a6:2a:39:f8: 1d:f0:d1:ab:e7:15:b5:16:0f:bd:88:3c:f9:f7:27:8f:a6:91: a3:c7:a6:44:fd:17:91:12:14:1d:2a:af:13:70:11:ea:5b:00: 9d:3f:40:95:1d:ed:18:7c:95:29:15:b5:0c:ac:8a:f5:74:2b: 36:4e:3b:e1:a8:2f:41:c8:fd:02:8b:c9:98:8c:4e:c8:05:f8: 7b:29:53:31:cc:d2:fe:25:cf:31:d6:4c:47:e2:62:8f:11:3d: 55:22:ec:a3:00:74:0c:e2:fb:05:de:ad:bb:a3:4d:f6:11:18: 8f:08:4e:95:d7:01:9b:ca:5e:8a:16:6a:a0:d0:1f:f2:3f:0b: d4:88:02:42:ee:ca:91:cc:21:47:25:30:80:ac:41:35:a8:52: be:4c:a5:ce:bc:f2:29:44:a9:ac:f8:8d:2b:8d:eb:24:a9:36: ff:96:19:29:01:64:79:a4:a8:0a:11:f1:55:79:46:31:68:32: 2e:a4:35:b6:95:f0:79:d8:d9:3d:b3:14:9f:b7:72:fc:1b:2d: e4:5e:20:3c:fa:59:70:0a:b0:59:cf:59:f1:ce:81:4a:4b:96: 27:68:a2:5d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCNEYxN0M1REU2RTAy QTBGQTVBNkRCMTVGNDc4NkM2MzlBM0Q3MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEbu2hpEabFGKNbu7E7i8ckQJa2ZA2rTOk/xHm2WMRN735FP5S 5zDKcSiVArRaMAV0Xcx4AVcRdCJdA1YOdr4BkYNMWMr06BIm6trGVCPSPkamK4D5 UbjlyUXgLCw9/juXBnLJJvihOKXf4csDQvqgs6pVCRJ10qs9tRZjMwWaPqNTz6MZ agABQr1X2eDKWd5cYt3JyjQPwUpaqxbc4wrO32pj54jf9W3/4IdJCgPVR6IhZ7/7 yE0fV0jsvRWsByGDTv6M/pf6Tll25c2n640UDfNwSYAWvxF0FT7bjEPVeVoeOEfv FFoajbMoS1Cq7Hlfwf/ZX+Dyi5nKyFMuf1kVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC08Xxd5uAqD6Wm2xX0eGxjmj1wkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0MwOFh4ZDV1QXFENldtMnhY MGVHeGptajF3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AVwwDQYJKoZIhvcNAQELBQADggEBAF0gNzWHw7rlhQYLQzklWIOW5b2CYKXOvVii WHAQQ9Kypio5+B3w0avnFbUWD72IPPn3J4+mkaPHpkT9F5ESFB0qrxNwEepbAJ0/ QJUd7Rh8lSkVtQysivV0KzZOO+GoL0HI/QKLyZiMTsgF+HspUzHM0v4lzzHWTEfi Yo8RPVUi7KMAdAzi+wXerbujTfYRGI8ITpXXAZvKXooWaqDQH/I/C9SIAkLuypHM IUclMICsQTWoUr5Mpc688ilEqaz4jSuN6ySpNv+WGSkBZHmkqAoR8VV5RjFoMi6k NbaV8HnY2T2zFJ+3cvwbLeReIDz6WXAKsFnPWfHOgUpLlidool0= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:03 2025 by rpki-client