$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FKmQUR7NJcBHD9923M81x6skbYo.roa File: FKmQUR7NJcBHD9923M81x6skbYo.roa (raw, json) Hash identifier: 0ItEYTQwcwvOEjkLwus2Tm/ryW2YzwHJbCTf6onEnTw= Subject key identifier: 14:A9:90:51:1E:CD:25:C0:47:0F:DF:76:DC:CF:35:C7:AB:24:6D:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35EE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FKmQUR7NJcBHD9923M81x6skbYo.roa Signing time: Mon 10 Feb 2025 13:53:49 +0000 ROA not before: Mon 10 Feb 2025 13:53:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13806 (0x35ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=14A990511ECD25C0470FDF76DCCF35C7AB246D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:b5:17:46:c4:27:f1:6e:14:85:07:89:f9: d9:a6:ff:cc:9a:e1:f0:ea:64:c4:be:e0:3b:86:eb: f3:2b:40:20:0e:0a:d5:98:90:26:4b:71:25:d2:57: 20:28:17:d0:13:17:0d:77:e4:4a:e9:d9:0f:bb:26: 69:6e:8e:7c:7e:5a:63:03:d0:22:6f:55:a2:f8:0f: 18:3c:73:b2:41:b5:4a:64:3c:97:b5:03:dc:a3:4d: 1f:d8:f3:ee:b8:e9:e6:63:db:df:60:1c:74:63:a4: e3:d0:9c:66:ee:bf:6b:1b:8d:f1:30:a6:70:00:f6: 47:15:ae:41:93:2f:b3:1b:ac:bd:f3:86:8b:60:f1: 92:dc:0f:7e:67:6d:a8:ac:2a:3e:20:50:34:84:8a: 4b:e1:87:c5:5b:f0:03:d8:56:32:8b:93:35:01:6e: f7:49:10:ca:04:8b:5d:a3:79:8a:e4:1c:d2:b1:0b: 06:bf:72:52:a3:c4:9f:78:f6:5f:1c:e8:be:4e:36: aa:39:8d:46:c4:d0:81:34:62:6d:91:33:8a:00:ef: 9f:6e:e0:25:00:ca:54:ce:64:cc:92:a0:b9:8b:c8: 7b:fa:bc:d1:71:d8:9d:83:58:e8:40:27:6c:22:9e: 56:2b:a6:fd:2e:3e:de:c4:3c:60:19:d7:7f:7b:8f: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A9:90:51:1E:CD:25:C0:47:0F:DF:76:DC:CF:35:C7:AB:24:6D:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FKmQUR7NJcBHD9923M81x6skbYo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.102.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:47:d7:93:1c:45:35:4c:e2:01:74:ab:ea:26:ed:e2:d6:5f: 80:8a:16:f5:e3:78:64:31:0e:d8:8d:3d:76:5b:48:2b:28:71: 1c:0c:e7:4e:68:f1:02:4d:b8:d3:e0:49:98:28:6e:ca:3e:9e: fa:93:e8:2d:c3:6c:47:3a:d6:94:94:c8:76:35:e9:11:6f:f6: 03:4f:98:b8:d3:b0:38:2a:38:76:89:f6:ea:3d:4c:45:4c:f3: 19:09:bc:86:8f:af:cb:be:9c:4a:5d:76:e7:2d:26:30:c0:87: 46:d9:15:1b:5c:aa:40:72:a6:51:3f:78:ff:b3:c7:f0:89:24: fd:ff:4a:37:0d:5b:b7:b9:9d:6a:98:41:b0:82:b2:95:bc:d0: 20:14:6c:43:a2:b5:2a:27:ea:d0:fd:ec:a5:11:4e:72:94:8c: 0c:c9:d3:1f:73:c4:56:0f:63:7d:d5:89:50:38:15:92:56:90: e0:15:3c:71:fa:b0:c8:30:38:9f:d8:04:88:47:73:71:38:6c: 2b:45:34:f8:ae:51:af:60:5e:23:50:e3:d5:81:d5:d9:7d:ae: 53:58:50:9c:46:dc:34:08:2d:1c:f6:56:58:b0:f9:40:cd:6b: 96:9a:94:b8:28:63:5f:f3:45:30:ff:be:ab:34:a6:da:ca:ff: 73:cc:c4:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0QTk5MDUxMUVDRDI1 QzA0NzBGREY3NkRDQ0YzNUM3QUIyNDZEOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi9bUXRsQn8W4UhQeJ+dmm/8ya4fDqZMS+4DuG6/MrQCAOCtWY kCZLcSXSVyAoF9ATFw135Erp2Q+7Jmlujnx+WmMD0CJvVaL4Dxg8c7JBtUpkPJe1 A9yjTR/Y8+646eZj299gHHRjpOPQnGbuv2sbjfEwpnAA9kcVrkGTL7MbrL3zhotg 8ZLcD35nbaisKj4gUDSEikvhh8Vb8APYVjKLkzUBbvdJEMoEi12jeYrkHNKxCwa/ clKjxJ949l8c6L5ONqo5jUbE0IE0Ym2RM4oA759u4CUAylTOZMySoLmLyHv6vNFx 2J2DWOhAJ2winlYrpv0uPt7EPGAZ1397j+ZTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFKmQUR7NJcBHD9923M81x6skbYowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZLbVFVUjdOSmNCSEQ5OTIz TTgxeDZza2JZby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AWYwDQYJKoZIhvcNAQELBQADggEBAFtH15McRTVM4gF0q+om7eLWX4CKFvXjeGQx DtiNPXZbSCsocRwM505o8QJNuNPgSZgobso+nvqT6C3DbEc61pSUyHY16RFv9gNP mLjTsDgqOHaJ9uo9TEVM8xkJvIaPr8u+nEpdductJjDAh0bZFRtcqkByplE/eP+z x/CJJP3/SjcNW7e5nWqYQbCCspW80CAUbEOitSon6tD97KURTnKUjAzJ0x9zxFYP Y33ViVA4FZJWkOAVPHH6sMgwOJ/YBIhHc3E4bCtFNPiuUa9gXiNQ49WB1dl9rlNY UJxG3DQILRz2Vliw+UDNa5aalLgoY1/zRTD/vqs0ptrK/3PMxJw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:13 2025 by rpki-client