$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U0iKYZtWLBwq4tlCU8Xla6dpsEQ.roa File: U0iKYZtWLBwq4tlCU8Xla6dpsEQ.roa (raw, json) Hash identifier: tEUYkSlFNukwHdE4UQQc2TkBdNPwEhU/TEovCo3vMGQ= Subject key identifier: 53:48:8A:61:9B:56:2C:1C:2A:E2:D9:42:53:C5:E5:6B:A7:69:B0:44 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3389 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U0iKYZtWLBwq4tlCU8Xla6dpsEQ.roa Signing time: Mon 10 Feb 2025 13:51:31 +0000 ROA not before: Mon 10 Feb 2025 13:51:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13193 (0x3389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=53488A619B562C1C2AE2D94253C5E56BA769B044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:86:a0:0d:33:98:21:30:07:3e:0f:b1:ca: 79:1c:09:db:82:dc:1f:f4:1e:e0:6d:33:e4:11:6d: 57:ec:3d:2a:3c:b3:81:8b:ae:30:31:b2:83:fc:f0: 29:65:2f:c2:18:c6:a3:90:fb:47:4f:fb:fc:fc:e3: b9:8c:e0:e8:50:f4:a7:74:18:7b:d2:f4:dc:e6:ef: 54:dc:cd:c1:a8:d1:aa:73:74:0d:e5:9a:92:9b:9c: 69:92:25:e8:c2:91:fc:0d:cb:5c:f2:55:63:c1:40: ee:bd:40:71:2c:84:77:a7:b4:f3:d7:67:21:0a:d4: 6b:a9:b6:3e:86:e2:4f:84:28:4a:60:9b:f6:57:40: 51:b3:6e:1d:29:94:8a:a2:0a:93:b9:82:f6:8b:ac: 37:df:9c:0a:db:e7:4b:bb:e4:59:a7:bf:c8:16:d5: cf:f5:45:a5:ff:87:31:65:fe:05:41:da:fa:22:44: 6a:f1:8f:ff:b4:ad:0a:d4:c6:3f:f7:37:76:11:d7: 20:ed:0a:17:56:80:d8:8d:04:ec:6e:5f:89:d2:85: 9b:d3:d2:35:fe:d0:8a:31:f4:35:4d:2c:72:b4:4c: f2:96:b0:92:8b:15:18:34:01:e5:32:93:12:22:5f: 02:54:98:77:69:1e:2f:ae:99:e1:1f:c2:bb:dd:72: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:48:8A:61:9B:56:2C:1C:2A:E2:D9:42:53:C5:E5:6B:A7:69:B0:44 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U0iKYZtWLBwq4tlCU8Xla6dpsEQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.167.0/24 Signature Algorithm: sha256WithRSAEncryption 13:a2:a8:0e:49:1d:6c:ee:3f:0c:ee:26:b2:5a:8c:3d:e9:c9: 9c:c9:dc:22:aa:a4:82:34:29:06:49:3d:e1:d2:25:b0:b7:5f: bd:62:83:44:a8:e2:dd:d1:f7:9d:29:8c:c7:8c:e3:1b:8e:e5: 15:b5:53:ed:bb:bf:5f:3f:dc:db:af:a1:07:0f:5a:d5:fe:a9: c4:09:d3:55:bc:2d:7f:1b:e4:5e:d2:6e:09:dd:e7:d3:20:05: 29:8b:41:e3:98:aa:8d:ab:58:da:ea:61:cb:f4:c6:af:a3:53: 67:62:66:7f:3b:45:93:55:76:54:9d:c1:03:fe:ed:59:a1:fd: 3d:30:e6:bf:a3:93:3f:99:1d:bd:c4:fa:d1:53:40:79:ac:5f: dc:f0:f3:10:f2:70:43:95:5a:52:ee:ef:80:8e:18:e1:81:d6: b9:11:8f:9d:94:d3:ce:7a:a8:a2:a4:3f:aa:28:44:cf:d0:ae: 32:84:30:2f:27:24:86:42:40:9c:30:4e:38:18:2c:50:85:ab: 4f:e8:1e:26:7a:1b:62:11:af:5f:bb:92:e4:a7:41:7b:19:b5: f2:4b:9c:85:6b:56:2a:46:10:93:ec:88:64:7e:57:df:9b:8f: c3:9d:8c:a8:13:2e:96:a1:41:17:43:52:72:49:dd:de:d3:a3: 53:d9:a0:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUzNDg4QTYxOUI1NjJD MUMyQUUyRDk0MjUzQzVFNTZCQTc2OUIwNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYZ4agDTOYITAHPg+xynkcCduC3B/0HuBtM+QRbVfsPSo8s4GL rjAxsoP88CllL8IYxqOQ+0dP+/z847mM4OhQ9Kd0GHvS9Nzm71TczcGo0apzdA3l mpKbnGmSJejCkfwNy1zyVWPBQO69QHEshHentPPXZyEK1Guptj6G4k+EKEpgm/ZX QFGzbh0plIqiCpO5gvaLrDffnArb50u75Fmnv8gW1c/1RaX/hzFl/gVB2voiRGrx j/+0rQrUxj/3N3YR1yDtChdWgNiNBOxuX4nShZvT0jX+0Iox9DVNLHK0TPKWsJKL FRg0AeUykxIiXwJUmHdpHi+umeEfwrvdcmZ5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUU0iKYZtWLBwq4tlCU8Xla6dpsEQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1UwaUtZWnRXTEJ3cTR0bENV OFhsYTZkcHNFUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AacwDQYJKoZIhvcNAQELBQADggEBABOiqA5JHWzuPwzuJrJajD3pyZzJ3CKqpII0 KQZJPeHSJbC3X71ig0So4t3R950pjMeM4xuO5RW1U+27v18/3NuvoQcPWtX+qcQJ 01W8LX8b5F7Sbgnd59MgBSmLQeOYqo2rWNrqYcv0xq+jU2diZn87RZNVdlSdwQP+ 7Vmh/T0w5r+jkz+ZHb3E+tFTQHmsX9zw8xDycEOVWlLu74COGOGB1rkRj52U0856 qKKkP6ooRM/QrjKEMC8nJIZCQJwwTjgYLFCFq0/oHiZ6G2IRr1+7kuSnQXsZtfJL nIVrVipGEJPsiGR+V9+bj8OdjKgTLpahQRdDUnJJ3d7To1PZoEM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:52 2025 by rpki-client