$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YkvfCmHGrgv-jL6l9QNu7XcRNRo.roa File: YkvfCmHGrgv-jL6l9QNu7XcRNRo.roa (raw, json) Hash identifier: 84iYPGYl09e/kgzPQeN4FlVAOH5OACoRN7AO/iMOExE= Subject key identifier: 62:4B:DF:0A:61:C6:AE:0B:FE:8C:BE:A5:F5:03:6E:ED:77:11:35:1A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 350E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YkvfCmHGrgv-jL6l9QNu7XcRNRo.roa Signing time: Mon 10 Feb 2025 13:52:58 +0000 ROA not before: Mon 10 Feb 2025 13:52:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13582 (0x350e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=624BDF0A61C6AE0BFE8CBEA5F5036EED7711351A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:22:49:10:4b:6b:f1:e4:3e:b9:51:76:29: 6a:1c:9f:dc:58:8c:7f:0e:a5:8a:60:d2:1e:eb:19: 4a:14:ed:8b:79:fa:3f:65:71:20:d0:03:6e:2b:75: 27:e1:97:3f:51:34:47:f6:6e:bd:75:50:06:4c:cc: 8a:2c:bf:75:a8:be:53:81:eb:f0:3e:87:1f:5e:95: b0:cc:58:8b:84:c2:63:3d:02:95:d7:87:84:98:77: 0a:5b:fd:20:80:fc:9b:56:4f:73:91:35:e3:82:ab: ab:bc:19:3d:ee:fb:3d:de:7c:5c:fb:ba:53:de:4a: 47:a5:9f:21:f9:f9:4b:14:d3:80:13:83:44:b6:e1: a4:8b:69:e2:d9:0d:da:5d:f0:9c:19:1d:c6:de:ea: 42:62:53:3f:ce:f5:4e:2a:08:39:7a:5e:43:68:19: 34:78:59:4b:10:c2:54:a5:c8:06:a8:1c:d9:9e:dc: 33:a3:8e:dc:08:54:59:66:03:b7:72:96:a3:6b:1d: 96:ab:1d:e2:f3:fb:d8:65:ff:01:29:45:7e:23:ef: 29:f1:ac:64:a4:3b:af:d0:39:df:b4:92:75:4c:aa: 2e:7e:c7:6e:e2:c6:4e:8f:1c:c9:18:74:16:5b:d8: 03:2c:a7:4d:88:dc:02:d4:f7:d9:7d:84:46:26:48: 35:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4B:DF:0A:61:C6:AE:0B:FE:8C:BE:A5:F5:03:6E:ED:77:11:35:1A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YkvfCmHGrgv-jL6l9QNu7XcRNRo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.136.0/22 Signature Algorithm: sha256WithRSAEncryption b5:05:45:db:ae:2e:d2:4b:8b:d0:34:d7:e7:e3:ec:4b:11:1c: 99:74:7a:90:46:21:80:dc:15:04:57:02:73:d6:9e:0b:22:b2: a9:21:2c:ca:b0:bc:69:66:64:a5:d9:e8:d4:b9:64:a3:35:e5: 52:c0:fc:a2:96:38:29:b3:48:aa:ac:49:af:fd:d7:e9:fa:9a: a5:ee:7d:cb:16:93:de:55:8e:4a:5f:e1:aa:05:94:03:56:6f: 86:de:62:a6:2c:49:36:7e:5e:ed:df:a6:87:bb:08:62:24:c3: 17:f2:87:13:94:a0:e0:37:5f:01:bd:65:75:3b:50:7a:96:c3: fe:02:d3:40:9e:88:83:8b:2c:a6:e3:e4:79:16:e9:57:61:12: be:47:ff:da:95:62:c6:87:0e:c8:f8:8d:db:1f:71:41:0a:53: 78:5a:ab:80:68:c0:bf:e8:89:e7:73:b0:d4:fe:b2:86:de:e9: 00:ea:3a:77:ca:65:38:ad:04:93:60:93:82:e4:81:d4:f6:50: af:09:a5:bf:cf:39:6f:c6:dd:ca:fa:41:e0:e6:64:4b:b2:8b: 97:47:37:95:22:a3:39:9d:d4:6d:e9:45:0e:55:d5:88:bf:0a: d1:2e:d2:4c:8c:f0:d0:58:1f:cf:3c:0b:dd:20:d1:aa:83:0f: 9c:0b:18:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyNEJERjBBNjFDNkFF MEJGRThDQkVBNUY1MDM2RUVENzcxMTM1MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR5CJJEEtr8eQ+uVF2KWocn9xYjH8OpYpg0h7rGUoU7Yt5+j9l cSDQA24rdSfhlz9RNEf2br11UAZMzIosv3WovlOB6/A+hx9elbDMWIuEwmM9ApXX h4SYdwpb/SCA/JtWT3ORNeOCq6u8GT3u+z3efFz7ulPeSkelnyH5+UsU04ATg0S2 4aSLaeLZDdpd8JwZHcbe6kJiUz/O9U4qCDl6XkNoGTR4WUsQwlSlyAaoHNme3DOj jtwIVFlmA7dylqNrHZarHeLz+9hl/wEpRX4j7ynxrGSkO6/QOd+0knVMqi5+x27i xk6PHMkYdBZb2AMsp02I3ALU99l9hEYmSDWNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYkvfCmHGrgv+jL6l9QNu7XcRNRowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lrdmZDbUhHcmd2LWpMNmw5 UU51N1hjUk5Sby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AYgwDQYJKoZIhvcNAQELBQADggEBALUFRduuLtJLi9A01+fj7EsRHJl0epBGIYDc FQRXAnPWngsisqkhLMqwvGlmZKXZ6NS5ZKM15VLA/KKWOCmzSKqsSa/91+n6mqXu fcsWk95Vjkpf4aoFlANWb4beYqYsSTZ+Xu3fpoe7CGIkwxfyhxOUoOA3XwG9ZXU7 UHqWw/4C00CeiIOLLKbj5HkW6VdhEr5H/9qVYsaHDsj4jdsfcUEKU3haq4BowL/o iedzsNT+sobe6QDqOnfKZTitBJNgk4LkgdT2UK8Jpb/POW/G3cr6QeDmZEuyi5dH N5Uiozmd1G3pRQ5V1Yi/CtEu0kyM8NBYH888C90g0aqDD5wLGK8= -----END CERTIFICATE-----Generated at Wed Feb 19 21:59:41 2025 by rpki-client