$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VstFHZ2yyzyx2U76ZpBHgDR0IP0.roa File: VstFHZ2yyzyx2U76ZpBHgDR0IP0.roa (raw, json) Hash identifier: olVmZb/VE9Q/73MQt9yh8lCFrJY9I/9CGiujFudtS8A= Subject key identifier: 56:CB:45:1D:9D:B2:CB:3C:B1:D9:4E:FA:66:90:47:80:34:74:20:FD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35E2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VstFHZ2yyzyx2U76ZpBHgDR0IP0.roa Signing time: Mon 10 Feb 2025 13:53:46 +0000 ROA not before: Mon 10 Feb 2025 13:53:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13794 (0x35e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=56CB451D9DB2CB3CB1D94EFA66904780347420FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:32:3d:dd:5b:e8:13:cb:6e:0b:92:0f:3f: 26:04:16:5e:63:f0:f9:38:82:6b:6f:e8:6b:b9:4f: 64:e0:70:38:da:ce:83:c4:6e:36:57:63:bc:a1:7c: f8:39:2e:79:7e:1f:2b:ee:c3:e1:88:f0:7d:2a:78: 81:3c:96:f6:77:7e:64:64:d3:55:0e:4c:4f:8a:94: 75:af:bc:97:f2:6a:52:ff:60:19:8d:a3:12:10:ac: bb:98:49:21:8b:c7:d7:d1:a1:8e:16:6c:cc:89:36: 05:c3:d1:42:bc:c2:05:1f:77:05:12:cf:fc:57:37: 03:3d:39:73:32:82:9a:c2:ae:94:cb:00:5d:c7:5e: 4c:09:29:e3:6d:92:e3:cb:4f:66:69:01:51:53:be: ab:02:b8:aa:19:85:af:05:3d:cd:24:4b:13:ed:db: 06:a7:84:dd:2c:b7:d0:87:df:eb:d7:f6:98:aa:81: 5c:97:75:9e:9d:fe:ef:dc:6e:69:f7:f1:a2:9b:ec: c0:34:fc:da:21:80:98:e8:4e:87:37:d5:8c:cd:78: 16:fd:82:e7:ea:4b:3c:b9:d6:66:d8:ce:83:52:e9: 40:3a:a5:5c:4d:bb:e4:a0:cf:42:79:51:cf:4b:5f: 66:7e:99:0c:e4:bc:cb:8d:a2:c0:09:3d:94:7a:83: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CB:45:1D:9D:B2:CB:3C:B1:D9:4E:FA:66:90:47:80:34:74:20:FD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VstFHZ2yyzyx2U76ZpBHgDR0IP0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.180.0/24 Signature Algorithm: sha256WithRSAEncryption 36:17:97:57:76:a5:5c:bc:20:ed:06:90:10:fa:8b:53:81:5f: f6:16:6d:21:5d:e9:44:da:86:6b:c7:62:2b:19:c1:12:b4:43: 72:5d:22:d7:52:20:98:c5:ae:60:87:d2:0d:76:4d:e5:9c:c4: ac:1a:7d:26:40:7f:97:44:aa:9e:18:ea:ad:8b:ef:7a:5b:5b: 92:39:37:ff:08:1c:64:07:39:b7:6b:99:a4:70:bd:f2:9c:8f: 95:98:ae:05:27:1c:f4:cc:24:84:df:27:ec:d5:42:50:c9:c8: 1c:81:0a:1e:1e:ac:f4:03:87:56:65:01:3e:41:3f:36:26:bc: 4b:1a:9a:eb:37:32:d3:a9:6f:19:11:ce:90:cd:78:3d:34:61: 3b:3f:8e:57:74:75:96:49:34:9f:67:4f:43:d3:bc:d4:d3:41: ee:f6:1d:ba:94:8f:f3:2c:8a:f9:49:b8:54:de:2e:a1:73:ec: 95:2e:06:8a:1c:2c:bf:ab:8b:90:c2:08:b3:58:e0:54:c1:1c: db:ce:3b:c6:bf:da:9a:fe:d2:87:fe:53:f3:0f:43:2f:0f:2f: 88:51:3d:16:dc:27:1d:d9:bb:60:56:2a:c9:87:a6:f0:8c:7a: 85:6f:a6:4e:21:3a:9b:40:49:87:88:43:40:3d:88:c5:7d:19: 89:35:1a:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU2Q0I0NTFEOURCMkNC M0NCMUQ5NEVGQTY2OTA0NzgwMzQ3NDIwRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEzDI93VvoE8tuC5IPPyYEFl5j8Pk4gmtv6Gu5T2TgcDjazoPE bjZXY7yhfPg5Lnl+Hyvuw+GI8H0qeIE8lvZ3fmRk01UOTE+KlHWvvJfyalL/YBmN oxIQrLuYSSGLx9fRoY4WbMyJNgXD0UK8wgUfdwUSz/xXNwM9OXMygprCrpTLAF3H XkwJKeNtkuPLT2ZpAVFTvqsCuKoZha8FPc0kSxPt2wanhN0st9CH3+vX9piqgVyX dZ6d/u/cbmn38aKb7MA0/NohgJjoToc31YzNeBb9gufqSzy51mbYzoNS6UA6pVxN u+Sgz0J5Uc9LX2Z+mQzkvMuNosAJPZR6g5s3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVstFHZ2yyzyx2U76ZpBHgDR0IP0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZzdEZIWjJ5eXp5eDJVNzZa cEJIZ0RSMElQMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AbQwDQYJKoZIhvcNAQELBQADggEBADYXl1d2pVy8IO0GkBD6i1OBX/YWbSFd6UTa hmvHYisZwRK0Q3JdItdSIJjFrmCH0g12TeWcxKwafSZAf5dEqp4Y6q2L73pbW5I5 N/8IHGQHObdrmaRwvfKcj5WYrgUnHPTMJITfJ+zVQlDJyByBCh4erPQDh1ZlAT5B PzYmvEsamus3MtOpbxkRzpDNeD00YTs/jld0dZZJNJ9nT0PTvNTTQe72HbqUj/Ms ivlJuFTeLqFz7JUuBoocLL+ri5DCCLNY4FTBHNvOO8a/2pr+0of+U/MPQy8PL4hR PRbcJx3Zu2BWKsmHpvCMeoVvpk4hOptASYeIQ0A9iMV9GYk1Gqw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:10 2025 by rpki-client