$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PbHyjbsM9q441cW7S3tQRIZKdnE.roa File: PbHyjbsM9q441cW7S3tQRIZKdnE.roa (raw, json) Hash identifier: oLHkj5CIuHWrJ/UKz8qUqzC3JvxzFzbPpvY4TihXJcw= Subject key identifier: 3D:B1:F2:8D:BB:0C:F6:AE:38:D5:C5:BB:4B:7B:50:44:86:4A:76:71 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33B1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PbHyjbsM9q441cW7S3tQRIZKdnE.roa Signing time: Mon 10 Feb 2025 13:51:40 +0000 ROA not before: Mon 10 Feb 2025 13:51:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13233 (0x33b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3DB1F28DBB0CF6AE38D5C5BB4B7B5044864A7671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:b4:e4:a2:48:01:11:a0:de:a0:b2:e5:e5: 05:b6:dc:09:00:35:00:5c:70:29:17:27:fa:64:8e: 7c:55:38:c7:8d:a5:d8:a8:6f:78:81:b6:7e:98:b7: 54:34:ed:4e:74:ac:73:84:66:fb:ea:35:f6:e2:31: 42:c0:06:99:ec:4a:fe:45:94:b3:06:5c:f7:ab:45: e3:26:c0:a5:07:5b:56:d7:b6:df:90:65:e4:da:e4: 6b:a9:cf:b5:19:99:21:2f:fe:2c:d9:fc:91:ec:b7: c4:2c:f7:8f:a8:d6:5d:94:6a:4a:cf:1d:b4:58:6a: 3e:1d:78:57:49:a3:e6:02:58:ab:7d:4c:42:34:dc: 21:8d:0b:89:1c:9e:46:2e:aa:ca:08:7d:f8:ce:97: 95:0b:02:17:9d:4e:f3:c4:8a:6a:49:3b:f1:8c:38: 27:15:06:4c:fb:9f:54:48:8d:19:b8:91:b1:a0:ed: f3:01:d9:a3:1b:ed:e2:78:d5:0a:de:66:c6:17:2c: 35:c0:04:1e:d1:ee:ba:8b:f0:61:48:1b:92:53:02: 49:8b:9e:38:00:22:dd:3e:46:d4:42:78:71:2d:ec: d6:77:13:24:0b:be:69:b7:1f:f6:7f:b5:46:5c:0d: 69:97:56:19:21:d0:d0:5f:b2:d8:4b:a9:05:ed:bf: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B1:F2:8D:BB:0C:F6:AE:38:D5:C5:BB:4B:7B:50:44:86:4A:76:71 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PbHyjbsM9q441cW7S3tQRIZKdnE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.100.0/24 Signature Algorithm: sha256WithRSAEncryption a9:3c:0a:fa:5d:a3:b4:c7:4f:d0:21:6f:47:95:d3:0e:d6:92: 2f:34:ed:68:1e:4e:c6:9e:48:b5:c1:5c:a3:06:ca:37:a4:52: 25:1a:70:61:ff:b5:3c:44:79:b9:ae:5b:d9:00:28:15:f4:27: 6a:ac:b8:d0:ed:e9:8b:f8:25:0c:cd:0f:26:ce:5b:6d:c0:ce: 91:d5:c1:b0:5e:32:e0:ea:40:f4:4d:95:f4:37:9d:f5:d8:e7: a6:97:9b:3b:29:31:bc:25:e8:e7:f0:14:2f:cf:a3:64:69:73: 4b:11:6f:21:a2:bd:78:ab:89:69:61:2e:e2:f5:8a:8d:72:05: e8:89:56:8f:9f:7a:51:bd:ab:16:e2:33:ef:d8:d1:0b:a9:74: 4e:9d:d9:10:94:1b:df:85:39:eb:ce:3f:a8:63:3b:33:c3:7f: 15:34:72:49:99:bd:39:02:d3:f5:e2:2c:c2:ca:8e:cd:62:ad: 62:17:cc:af:dc:5c:61:d1:35:3a:b0:26:d1:10:a1:90:03:ce: 6c:17:72:4e:bf:69:39:b1:15:25:5c:b0:d2:7c:52:7d:cc:58: 7b:34:5a:d3:52:fb:39:1c:19:d7:c2:c4:6a:09:58:ab:c6:94: 00:96:b3:67:30:d8:0e:d5:06:9f:3d:ea:0e:b3:3a:6a:2e:4d: c3:26:e0:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNEQjFGMjhEQkIwQ0Y2 QUUzOEQ1QzVCQjRCN0I1MDQ0ODY0QTc2NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf/7TkokgBEaDeoLLl5QW23AkANQBccCkXJ/pkjnxVOMeNpdio b3iBtn6Yt1Q07U50rHOEZvvqNfbiMULABpnsSv5FlLMGXPerReMmwKUHW1bXtt+Q ZeTa5Gupz7UZmSEv/izZ/JHst8Qs94+o1l2UakrPHbRYaj4deFdJo+YCWKt9TEI0 3CGNC4kcnkYuqsoIffjOl5ULAhedTvPEimpJO/GMOCcVBkz7n1RIjRm4kbGg7fMB 2aMb7eJ41QreZsYXLDXABB7R7rqL8GFIG5JTAkmLnjgAIt0+RtRCeHEt7NZ3EyQL vmm3H/Z/tUZcDWmXVhkh0NBfsthLqQXtv0UvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPbHyjbsM9q441cW7S3tQRIZKdnEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BiSHlqYnNNOXE0NDFjVzdT M3RRUklaS2RuRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AWQwDQYJKoZIhvcNAQELBQADggEBAKk8Cvpdo7THT9Ahb0eV0w7Wki807WgeTsae SLXBXKMGyjekUiUacGH/tTxEebmuW9kAKBX0J2qsuNDt6Yv4JQzNDybOW23AzpHV wbBeMuDqQPRNlfQ3nfXY56aXmzspMbwl6OfwFC/Po2Rpc0sRbyGivXiriWlhLuL1 io1yBeiJVo+felG9qxbiM+/Y0QupdE6d2RCUG9+FOevOP6hjOzPDfxU0ckmZvTkC 0/XiLMLKjs1irWIXzK/cXGHRNTqwJtEQoZADzmwXck6/aTmxFSVcsNJ8Un3MWHs0 WtNS+zkcGdfCxGoJWKvGlACWs2cw2A7VBp896g6zOmouTcMm4Hs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:34 2025 by rpki-client