$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a2Nx1ccI2Ac2w8ikfmPfdAqK4ek.roa File: a2Nx1ccI2Ac2w8ikfmPfdAqK4ek.roa (raw, json) Hash identifier: 2E0hbWFbNxyNhE7DFr21b44RYecfZxQqLLJPZiBz8dE= Subject key identifier: 6B:63:71:D5:C7:08:D8:07:36:C3:C8:A4:7E:63:DF:74:0A:8A:E1:E9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33BF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a2Nx1ccI2Ac2w8ikfmPfdAqK4ek.roa Signing time: Mon 10 Feb 2025 13:51:44 +0000 ROA not before: Mon 10 Feb 2025 13:51:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13247 (0x33bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6B6371D5C708D80736C3C8A47E63DF740A8AE1E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:a5:ce:2c:ce:f3:39:1e:d5:44:4c:e4:97: 15:ae:d9:be:84:a8:8c:8c:7e:7e:45:18:cc:19:65: 6e:55:1d:b1:9e:07:8e:ca:c1:4d:31:82:28:63:1e: 4d:d2:4d:e3:da:c9:92:0d:86:18:46:75:3b:f7:92: 9d:8f:f8:ce:fe:4e:3d:8e:a2:cb:f0:26:46:2b:e4: bc:0f:69:6c:d6:35:22:a6:f0:23:d9:96:53:de:d9: ca:d2:99:c5:1c:d1:2d:82:df:08:34:73:bb:42:4d: a9:bd:bd:73:bf:01:5b:b3:0e:84:ff:36:51:92:18: 14:e9:46:d7:17:a8:59:d8:3a:ce:7b:fd:40:3e:9d: 01:d7:13:05:92:8e:67:b1:b6:93:73:ff:32:16:5b: ed:5a:79:e0:93:d4:c3:84:a3:8b:b3:9f:50:95:e0: 4e:b9:d7:b6:94:74:e8:60:63:47:b9:f9:57:1c:32: f3:74:f1:db:5b:68:7b:03:2f:6a:47:64:f1:0b:5c: 0b:04:8b:a4:f3:44:ae:f2:2a:f8:02:13:74:0e:b6: 1b:34:9d:61:28:eb:fe:3e:5c:3c:b0:20:f4:b4:5d: 5b:f8:70:a4:b0:80:3c:84:c6:40:f3:92:03:30:5c: c1:db:d8:56:dd:ad:66:fd:4a:5b:6d:c1:6d:f4:13: 61:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:63:71:D5:C7:08:D8:07:36:C3:C8:A4:7E:63:DF:74:0A:8A:E1:E9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a2Nx1ccI2Ac2w8ikfmPfdAqK4ek.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.206.0/23 Signature Algorithm: sha256WithRSAEncryption ad:28:67:20:c3:98:75:39:ac:c6:53:32:b6:22:7d:ba:f3:86: a4:0d:86:fd:62:41:68:8e:b4:a2:33:d2:a4:b3:18:a0:a2:83: fa:38:a3:01:e8:c1:04:d9:d3:68:ba:a4:76:5d:f6:45:ff:11: 9f:ff:63:05:a7:86:b3:09:5a:01:a6:f6:c2:49:41:30:d2:4a: 5f:69:3a:07:ae:a4:7a:01:72:2b:da:a1:a7:0e:4e:03:b7:90: a7:4f:d7:66:e2:17:13:a7:bf:30:ca:60:bb:3b:10:f0:82:97: 31:2b:98:fb:be:d8:4e:c1:af:e2:c3:2a:57:cb:4f:c4:7d:1d: 83:73:ee:1c:a4:48:8d:86:31:d4:10:55:91:62:09:5c:5a:78: 99:08:0b:74:32:67:5f:a2:34:93:ca:61:8c:68:88:61:5d:c1: b3:6b:0a:54:7e:cd:93:37:90:f8:a6:bd:a8:ab:b0:3e:88:2d: bf:0d:2d:86:64:4d:26:a0:7e:a3:60:d6:5c:0a:25:64:fc:10: 1f:75:bf:0b:31:c7:59:5d:d6:a4:85:23:19:75:70:3b:27:4c: f1:aa:2e:7c:13:1e:55:41:b8:a2:8d:6c:15:2c:ff:3f:d0:1d: 44:5d:f4:f0:2c:fa:71:cf:68:72:94:7e:5b:5c:48:30:a7:7f: ca:a7:b4:f6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCNjM3MUQ1QzcwOEQ4 MDczNkMzQzhBNDdFNjNERjc0MEE4QUUxRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxf6XOLM7zOR7VREzklxWu2b6EqIyMfn5FGMwZZW5VHbGeB47K wU0xgihjHk3STePayZINhhhGdTv3kp2P+M7+Tj2OosvwJkYr5LwPaWzWNSKm8CPZ llPe2crSmcUc0S2C3wg0c7tCTam9vXO/AVuzDoT/NlGSGBTpRtcXqFnYOs57/UA+ nQHXEwWSjmextpNz/zIWW+1aeeCT1MOEo4uzn1CV4E6517aUdOhgY0e5+VccMvN0 8dtbaHsDL2pHZPELXAsEi6TzRK7yKvgCE3QOths0nWEo6/4+XDywIPS0XVv4cKSw gDyExkDzkgMwXMHb2FbdrWb9SlttwW30E2HFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUa2Nx1ccI2Ac2w8ikfmPfdAqK4ekwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2EyTngxY2NJMkFjMnc4aWtm bVBmZEFxSzRlay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq Ac4wDQYJKoZIhvcNAQELBQADggEBAK0oZyDDmHU5rMZTMrYifbrzhqQNhv1iQWiO tKIz0qSzGKCig/o4owHowQTZ02i6pHZd9kX/EZ//YwWnhrMJWgGm9sJJQTDSSl9p OgeupHoBcivaoacOTgO3kKdP12biFxOnvzDKYLs7EPCClzErmPu+2E7Br+LDKlfL T8R9HYNz7hykSI2GMdQQVZFiCVxaeJkIC3QyZ1+iNJPKYYxoiGFdwbNrClR+zZM3 kPimvairsD6ILb8NLYZkTSagfqNg1lwKJWT8EB91vwsxx1ld1qSFIxl1cDsnTPGq LnwTHlVBuKKNbBUs/z/QHURd9PAs+nHPaHKUfltcSDCnf8qntPY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:52 2025 by rpki-client