$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bCstSHeMxkgmpWsU8OV_57brplE.roa File: bCstSHeMxkgmpWsU8OV_57brplE.roa (raw, json) Hash identifier: Dqiv4oqCZubbu10mUS7a5iQbp+dq5Jds7M7e5VlcOek= Subject key identifier: 6C:2B:2D:48:77:8C:C6:48:26:A5:6B:14:F0:E5:7F:E7:B6:EB:A6:51 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3525 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bCstSHeMxkgmpWsU8OV_57brplE.roa Signing time: Mon 10 Feb 2025 13:53:03 +0000 ROA not before: Mon 10 Feb 2025 13:53:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6C2B2D48778CC64826A56B14F0E57FE7B6EBA651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:92:fe:5c:a6:23:37:e1:b4:3c:f7:be:6d: 79:f9:37:16:e0:de:4e:f3:df:4b:b9:f5:e6:fa:a8: 47:58:23:1d:df:3c:3c:24:26:5e:a4:8c:cc:b1:4d: 59:35:f2:6d:24:14:67:d3:32:32:94:8c:b8:f3:8f: cc:38:cb:0b:6d:c9:cb:41:94:12:18:7f:9a:82:1b: d2:9b:d6:1c:5e:75:1b:a3:7d:43:68:ac:fe:69:54: 11:e7:01:24:b8:16:4f:d8:aa:4f:d6:bf:26:b8:01: 7c:69:71:12:03:9c:0d:bd:ca:9d:19:3f:6c:28:24: fd:3c:bf:f1:4c:51:f1:5f:42:17:5d:9d:15:62:ea: 0e:0b:73:2a:de:25:07:01:7d:d8:da:3b:63:0d:cc: 4b:cc:14:ce:2f:49:01:fc:33:36:9a:2d:90:05:89: a9:21:c4:ea:d4:91:a3:e2:2c:a6:2e:aa:a1:11:eb: 3c:9a:3c:0f:91:8a:34:90:fc:74:e0:71:50:07:ee: dd:62:71:8d:4a:f4:34:cc:80:90:ca:d4:39:aa:52: cd:e0:13:98:c3:60:78:e4:5c:c3:71:7e:9b:dd:54: 8c:35:06:94:2f:7b:ba:47:c2:bb:b8:b8:43:50:79: f8:46:7f:af:83:11:80:5d:c2:02:2a:e2:fa:00:0c: f3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2B:2D:48:77:8C:C6:48:26:A5:6B:14:F0:E5:7F:E7:B6:EB:A6:51 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bCstSHeMxkgmpWsU8OV_57brplE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.14.0/23 Signature Algorithm: sha256WithRSAEncryption 05:85:09:6b:36:f5:9c:68:29:45:8c:33:98:55:a7:af:76:cb: f7:1f:5c:97:e2:d8:49:6a:4c:bc:4a:8f:16:68:26:d6:7b:3f: 1f:de:bb:5e:46:29:80:00:80:e1:67:6a:28:32:17:1c:05:78: c4:a6:66:f9:9f:11:1b:ed:dd:06:c5:c5:ed:8a:6f:0b:be:58: 85:b9:da:ef:49:26:48:a3:ca:36:68:15:df:0b:fa:bd:f6:bf: 9f:d2:5f:ed:43:67:00:0b:64:bc:55:b5:29:58:eb:6f:63:8e: 68:fb:e7:56:47:c8:18:33:2f:3b:6d:3f:89:b4:33:8b:10:08: d5:45:32:bd:0a:4b:6b:e0:aa:9a:91:0a:52:71:2a:3f:b1:70: 9a:e0:9c:2c:47:5e:2e:57:fb:75:0f:fc:d0:59:67:32:58:73: b9:d7:f1:26:dd:ec:d9:4a:a0:c1:32:2f:a4:21:b7:4c:58:a3: 2a:86:f6:53:71:c6:36:b4:dd:8a:ba:d7:e8:88:6b:c9:c5:5b: 4d:cb:5a:83:66:66:3c:a1:1c:c1:13:fe:85:39:db:c3:96:8d: b5:11:8b:63:d2:1c:49:67:3d:47:62:e6:b9:93:79:ca:1d:35: 5a:ce:5b:e0:3b:e5:12:f3:ab:37:62:f2:77:45:fe:38:52:71: c2:1c:7a:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZDMkIyRDQ4Nzc4Q0M2 NDgyNkE1NkIxNEYwRTU3RkU3QjZFQkE2NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl85L+XKYjN+G0PPe+bXn5Nxbg3k7z30u59eb6qEdYIx3fPDwk Jl6kjMyxTVk18m0kFGfTMjKUjLjzj8w4ywttyctBlBIYf5qCG9Kb1hxedRujfUNo rP5pVBHnASS4Fk/Yqk/Wvya4AXxpcRIDnA29yp0ZP2woJP08v/FMUfFfQhddnRVi 6g4LcyreJQcBfdjaO2MNzEvMFM4vSQH8MzaaLZAFiakhxOrUkaPiLKYuqqER6zya PA+RijSQ/HTgcVAH7t1icY1K9DTMgJDK1DmqUs3gE5jDYHjkXMNxfpvdVIw1BpQv e7pHwru4uENQefhGf6+DEYBdwgIq4voADPOnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbCstSHeMxkgmpWsU8OV/57brplEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JDc3RTSGVNeGtnbXBXc1U4 T1ZfNTdicnBsRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq AQ4wDQYJKoZIhvcNAQELBQADggEBAAWFCWs29ZxoKUWMM5hVp692y/cfXJfi2Elq TLxKjxZoJtZ7Px/eu15GKYAAgOFnaigyFxwFeMSmZvmfERvt3QbFxe2Kbwu+WIW5 2u9JJkijyjZoFd8L+r32v5/SX+1DZwALZLxVtSlY629jjmj751ZHyBgzLzttP4m0 M4sQCNVFMr0KS2vgqpqRClJxKj+xcJrgnCxHXi5X+3UP/NBZZzJYc7nX8Sbd7NlK oMEyL6Qht0xYoyqG9lNxxja03Yq61+iIa8nFW03LWoNmZjyhHMET/oU528OWjbUR i2PSHElnPUdi5rmTecodNVrOW+A75RLzqzdi8ndF/jhSccIcerw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:22 2025 by rpki-client