$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WHqKQToXE-S4ASQp8SpE3sEKXu8.roa File: WHqKQToXE-S4ASQp8SpE3sEKXu8.roa (raw, json) Hash identifier: P0pV+jsaP17jWUYzl3hAU7+5Bm9KokFbLBBeDJ1i1NU= Subject key identifier: 58:7A:8A:41:3A:17:13:E4:B8:01:24:29:F1:2A:44:DE:C1:0A:5E:EF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35A0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WHqKQToXE-S4ASQp8SpE3sEKXu8.roa Signing time: Mon 10 Feb 2025 13:53:32 +0000 ROA not before: Mon 10 Feb 2025 13:53:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13728 (0x35a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=587A8A413A1713E4B8012429F12A44DEC10A5EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:4a:86:35:7c:b4:95:b3:9b:d1:ec:8e:f0: ef:5d:84:b7:55:bb:cc:04:0c:1d:62:94:4c:54:4b: df:e1:9e:94:c9:3e:ec:6c:ca:eb:1e:88:82:5c:8a: bb:84:75:eb:4e:12:c4:31:a3:78:b1:7e:f0:c2:17: 09:6b:90:a8:a4:c9:bb:31:44:89:21:39:cc:80:ba: 71:e5:a0:10:b5:05:aa:7e:30:c9:9c:31:75:6d:31: 3d:47:3e:5f:6c:de:bd:e5:5d:a7:94:97:09:1a:51: 5d:dd:a7:e0:80:af:67:2a:32:8d:81:ea:ff:73:83: ae:4f:d4:96:5f:7d:73:45:10:9c:1b:6a:81:24:ea: 6f:7e:46:49:14:81:38:de:3e:8c:b6:da:96:ae:39: 76:c6:52:89:0f:da:d0:76:a9:fc:aa:2f:f4:53:37: 0a:bd:6a:fd:7f:eb:3b:8f:4a:c5:d6:b0:cc:45:75: 8b:0f:0a:fd:38:e8:2b:a0:fe:bb:03:1d:68:33:02: 8c:7b:54:d3:14:e3:2c:16:fa:85:3c:e2:a2:52:f3: 71:10:94:9e:69:78:f4:0b:48:58:e2:4d:fe:97:95: 8a:87:24:bd:28:0b:74:b4:69:22:be:02:41:48:0d: db:17:03:e3:f0:94:ae:ff:6d:7c:4d:6c:b6:e4:16: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7A:8A:41:3A:17:13:E4:B8:01:24:29:F1:2A:44:DE:C1:0A:5E:EF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WHqKQToXE-S4ASQp8SpE3sEKXu8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.150.0/24 Signature Algorithm: sha256WithRSAEncryption a7:9e:fc:af:a0:fa:65:0f:a7:da:5a:30:4a:16:83:83:56:35: 9f:5d:d9:51:93:4a:8a:73:c7:8e:6d:89:bc:80:d7:b9:d6:fd: 14:24:b6:99:34:35:c0:83:5c:54:12:e1:2a:50:cd:de:34:96: be:40:90:83:71:ac:50:89:72:a8:5f:f1:43:54:cd:aa:70:92: 3c:ea:2b:4f:2e:a4:31:73:18:63:2c:62:24:a4:98:5e:bd:8e: f2:ea:2c:89:aa:4f:cd:ff:2b:44:53:a7:da:ea:fc:6f:d0:e9: 7b:2c:f1:0b:60:e8:0a:97:60:88:70:48:2d:44:8b:6a:e5:40: 2d:21:33:3f:18:15:b8:0b:cd:cb:07:45:14:9d:5d:28:1e:54: 52:b6:aa:b4:3c:93:c6:c3:04:c5:42:4a:64:47:0b:c9:4e:c9: fb:2f:7b:0b:b1:6c:ea:24:df:62:73:f0:cd:f4:da:0a:32:b8: be:c7:70:29:b5:0d:a9:04:f2:21:9c:14:65:5f:b2:5d:a6:01: fc:5e:12:59:68:12:23:8f:69:dd:cc:8f:26:de:68:32:71:f1: 2a:77:0a:c0:51:76:10:d8:27:17:31:b2:cd:99:2d:34:46:73: 84:e6:d2:6d:c7:d1:d2:fb:b1:86:d6:34:99:1e:96:72:83:51: 20:94:ce:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU4N0E4QTQxM0ExNzEz RTRCODAxMjQyOUYxMkE0NERFQzEwQTVFRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSckqGNXy0lbOb0eyO8O9dhLdVu8wEDB1ilExUS9/hnpTJPuxs yuseiIJciruEdetOEsQxo3ixfvDCFwlrkKikybsxRIkhOcyAunHloBC1Bap+MMmc MXVtMT1HPl9s3r3lXaeUlwkaUV3dp+CAr2cqMo2B6v9zg65P1JZffXNFEJwbaoEk 6m9+RkkUgTjePoy22pauOXbGUokP2tB2qfyqL/RTNwq9av1/6zuPSsXWsMxFdYsP Cv046Cug/rsDHWgzAox7VNMU4ywW+oU84qJS83EQlJ5pePQLSFjiTf6XlYqHJL0o C3S0aSK+AkFIDdsXA+PwlK7/bXxNbLbkFocvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWHqKQToXE+S4ASQp8SpE3sEKXu8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dIcUtRVG9YRS1TNEFTUXA4 U3BFM3NFS1h1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AZYwDQYJKoZIhvcNAQELBQADggEBAKee/K+g+mUPp9paMEoWg4NWNZ9d2VGTSopz x45tibyA17nW/RQktpk0NcCDXFQS4SpQzd40lr5AkINxrFCJcqhf8UNUzapwkjzq K08upDFzGGMsYiSkmF69jvLqLImqT83/K0RTp9rq/G/Q6Xss8Qtg6AqXYIhwSC1E i2rlQC0hMz8YFbgLzcsHRRSdXSgeVFK2qrQ8k8bDBMVCSmRHC8lOyfsvewuxbOok 32Jz8M302goyuL7HcCm1DakE8iGcFGVfsl2mAfxeElloEiOPad3MjybeaDJx8Sp3 CsBRdhDYJxcxss2ZLTRGc4Tm0m3H0dL7sYbWNJkelnKDUSCUzpU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:00:51 2025 by rpki-client