$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CnZ6NDF1ymJSo_w-wc_WpfwzL8g.roa File: CnZ6NDF1ymJSo_w-wc_WpfwzL8g.roa (raw, json) Hash identifier: djpBNuB0ZeeOGIbcdiYw8KfTIXkVFiyFpYdCtW8aZOw= Subject key identifier: 0A:76:7A:34:31:75:CA:62:52:A3:FC:3E:C1:CF:D6:A5:FC:33:2F:C8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3550 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CnZ6NDF1ymJSo_w-wc_WpfwzL8g.roa Signing time: Mon 10 Feb 2025 13:53:13 +0000 ROA not before: Mon 10 Feb 2025 13:53:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13648 (0x3550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0A767A343175CA6252A3FC3EC1CFD6A5FC332FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:eb:84:6e:1d:45:15:6e:61:ba:9d:67:9b: 91:2d:fc:05:62:d5:c9:1c:5b:37:96:24:fe:7f:91: 35:ec:3b:d2:6f:a9:c5:cf:c0:c2:32:6d:9e:49:4d: 88:ef:89:20:18:1d:38:4c:7e:7d:f8:1e:1e:b7:9b: cd:7d:af:ca:be:62:9e:5a:0f:b0:3c:9f:2b:42:4c: e7:02:ec:9c:56:05:5c:0c:9b:73:65:c4:7c:11:82: bc:7c:b5:63:e9:18:45:f9:70:ac:3d:66:03:2f:31: 46:cb:98:d9:9d:2c:2b:a2:09:72:ac:0c:ea:7c:dd: 1c:9f:cc:1a:3c:68:16:58:32:54:3e:d8:c5:95:a5: 49:17:86:62:ec:20:d8:6e:62:7c:f8:e8:82:53:ec: c5:f4:3a:35:84:57:6c:46:e2:37:4b:fc:d5:c8:08: b2:96:9d:6e:4a:8e:14:66:7e:40:5e:2e:cc:27:b3: 45:bd:08:c6:a8:c9:0b:5d:be:e3:3b:06:4f:c2:3b: 9c:bd:1f:b0:88:5d:b8:d6:a0:90:80:35:5d:1d:ab: 22:6f:9f:c0:3a:65:f0:ae:ce:53:70:fc:e1:8c:4f: 47:e1:b9:3e:35:ac:86:bf:2f:02:e7:17:03:7c:c7: 5e:e9:93:a1:46:10:35:de:c6:a7:69:1c:27:58:9b: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:76:7A:34:31:75:CA:62:52:A3:FC:3E:C1:CF:D6:A5:FC:33:2F:C8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CnZ6NDF1ymJSo_w-wc_WpfwzL8g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.221.0/24 Signature Algorithm: sha256WithRSAEncryption 72:42:0a:e8:13:e3:92:f1:26:15:66:e4:df:34:c6:6b:06:f1: 09:6f:81:61:70:43:46:29:a7:48:4d:e2:fc:7e:30:c4:b8:7e: 9a:cc:28:93:90:25:44:6b:ab:d6:27:49:e4:c2:69:b1:64:54: 87:fe:b0:0e:48:b3:11:3e:e7:6f:4f:6a:90:93:19:7e:c5:0f: d8:a9:2f:29:eb:0e:fb:ca:ca:a4:8f:35:1f:75:96:c7:c4:c0: 7e:30:4f:2a:cb:dd:90:58:ab:6a:3e:9e:64:83:72:e0:f3:ee: f7:00:78:dc:e2:fd:2a:29:79:46:7d:d7:ce:a4:b6:b8:45:80: b4:2a:97:69:bf:da:85:c2:92:d8:58:2d:3a:97:21:9e:7d:e7: b3:1f:f9:c8:f9:b0:d1:63:2f:66:3c:fb:f4:63:4a:70:0b:ca: f6:8b:57:25:54:22:5d:40:6f:63:e3:92:f8:3d:92:24:bc:33: 8f:6e:5e:24:13:d0:34:4a:44:a7:b5:80:ca:c7:bf:31:df:bd: 3b:f1:82:18:3f:23:71:2d:aa:c1:a2:f7:9a:72:a5:f3:5b:4b: e3:a4:7c:50:e3:48:28:8e:d0:4a:5f:68:40:c5:7c:9e:0a:0d: 0b:6f:61:a0:92:b0:db:a7:5e:b7:d6:89:1a:84:48:d1:7a:f9: e6:18:a3:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBNzY3QTM0MzE3NUNB NjI1MkEzRkMzRUMxQ0ZENkE1RkMzMzJGQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs9uuEbh1FFW5hup1nm5Et/AVi1ckcWzeWJP5/kTXsO9JvqcXP wMIybZ5JTYjviSAYHThMfn34Hh63m819r8q+Yp5aD7A8nytCTOcC7JxWBVwMm3Nl xHwRgrx8tWPpGEX5cKw9ZgMvMUbLmNmdLCuiCXKsDOp83RyfzBo8aBZYMlQ+2MWV pUkXhmLsINhuYnz46IJT7MX0OjWEV2xG4jdL/NXICLKWnW5KjhRmfkBeLswns0W9 CMaoyQtdvuM7Bk/CO5y9H7CIXbjWoJCANV0dqyJvn8A6ZfCuzlNw/OGMT0fhuT41 rIa/LwLnFwN8x17pk6FGEDXexqdpHCdYm5rHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCnZ6NDF1ymJSo/w+wc/WpfwzL8gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NuWjZOREYxeW1KU29fdy13 Y19XcGZ3ekw4Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq Ad0wDQYJKoZIhvcNAQELBQADggEBAHJCCugT45LxJhVm5N80xmsG8QlvgWFwQ0Yp p0hN4vx+MMS4fprMKJOQJURrq9YnSeTCabFkVIf+sA5IsxE+529PapCTGX7FD9ip LynrDvvKyqSPNR91lsfEwH4wTyrL3ZBYq2o+nmSDcuDz7vcAeNzi/SopeUZ9186k trhFgLQql2m/2oXCkthYLTqXIZ5957Mf+cj5sNFjL2Y8+/RjSnALyvaLVyVUIl1A b2Pjkvg9kiS8M49uXiQT0DRKRKe1gMrHvzHfvTvxghg/I3EtqsGi95pypfNbS+Ok fFDjSCiO0EpfaEDFfJ4KDQtvYaCSsNunXrfWiRqESNF6+eYYo6k= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:30 2025 by rpki-client