$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cjXD5gYyt0mx3Yf2hwxalIF9DRk.roa File: cjXD5gYyt0mx3Yf2hwxalIF9DRk.roa (raw, json) Hash identifier: V5xMw1s8CzRU21e3g0iURDzTlW7sNDU86hiG0N/R9TA= Subject key identifier: 72:35:C3:E6:06:32:B7:49:B1:DD:87:F6:87:0C:5A:94:81:7D:0D:19 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3476 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cjXD5gYyt0mx3Yf2hwxalIF9DRk.roa Signing time: Mon 10 Feb 2025 13:52:24 +0000 ROA not before: Mon 10 Feb 2025 13:52:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13430 (0x3476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7235C3E60632B749B1DD87F6870C5A94817D0D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:b1:5d:26:af:e1:50:8f:de:01:74:7f:1c: 23:24:c1:fc:50:85:32:61:5d:37:b4:2a:81:8d:ce: fe:de:38:b9:32:48:86:70:3a:6f:db:16:92:22:c9: c1:a2:c7:04:50:8a:e1:7e:43:e9:ec:9d:12:20:5a: cb:70:3b:bb:d5:b7:85:a0:d4:9e:69:e8:c2:4e:82: 50:3b:d5:cd:59:fe:1c:5d:53:8e:7a:dc:35:84:d6: e9:c2:45:ad:95:be:13:3a:ff:9c:d1:36:9b:8a:24: 53:0b:06:0b:21:60:90:b3:c1:f8:eb:d1:e3:a6:c7: 70:16:20:ae:8b:ce:8a:5e:7c:04:59:29:bd:fb:88: cd:48:06:4a:dc:e3:1b:07:65:5e:06:95:40:7e:52: ed:fd:e7:65:5e:86:9b:75:f5:af:38:8d:61:7d:a8: db:22:a0:6c:79:b8:c8:d5:3b:66:db:42:23:1b:59: 18:f7:86:48:41:e8:30:e7:bc:18:03:c7:21:c6:76: 5b:74:13:98:5f:d0:ec:9d:ce:2e:5d:ec:b8:34:de: eb:0b:cc:7e:6e:23:e5:5a:ac:93:dc:8e:37:a7:03: d6:38:07:51:15:63:e1:5d:1b:12:9e:50:94:06:5a: 3e:59:7a:d1:28:71:01:e5:a6:23:11:13:8f:1d:c8: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:35:C3:E6:06:32:B7:49:B1:DD:87:F6:87:0C:5A:94:81:7D:0D:19 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cjXD5gYyt0mx3Yf2hwxalIF9DRk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.44.0/24 Signature Algorithm: sha256WithRSAEncryption 05:a0:82:bd:5a:31:82:a7:b6:b5:15:5e:b1:5a:34:1a:3e:e4: ba:b1:78:29:7b:1f:8b:60:6f:ba:49:ae:ad:3a:08:7b:65:b2: 36:a0:cb:47:3c:82:eb:f5:1f:cc:15:14:92:f0:6d:53:62:20: 1a:1e:7b:c5:87:58:f1:40:1c:68:7c:b0:0e:f4:71:78:1f:9a: 2c:ff:bf:22:9b:06:a7:17:b1:ad:23:1c:89:72:92:38:fd:62: 9e:9d:a5:ff:21:d6:36:8d:77:b4:5d:83:a0:78:24:69:78:d6: b1:4f:2d:a1:39:38:92:39:63:9c:d2:ae:48:1a:2a:2b:a9:4d: 2d:52:2c:83:7d:57:7c:37:b3:03:a0:a8:91:0c:be:bc:98:55: 1f:4e:24:b3:db:e2:90:1c:0a:43:dd:60:9e:1b:85:ed:92:8e: b1:fd:5f:c7:17:e8:f4:09:a6:50:eb:92:6f:54:60:b4:05:b6: 86:90:24:35:0b:56:5c:e7:a9:da:18:85:11:83:03:bb:09:cb: 63:0b:ea:f1:6c:96:97:a0:2c:66:47:93:f4:49:b0:10:5f:6b: 92:28:59:d0:09:6b:d9:20:1e:e3:d8:7b:59:9a:b6:cf:53:cc: fe:b0:f3:07:d9:21:bd:df:91:51:7d:ae:42:4e:d5:5d:3b:0d: 45:7a:ef:e1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyMzVDM0U2MDYzMkI3 NDlCMUREODdGNjg3MEM1QTk0ODE3RDBEMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6FbFdJq/hUI/eAXR/HCMkwfxQhTJhXTe0KoGNzv7eOLkySIZw Om/bFpIiycGixwRQiuF+Q+nsnRIgWstwO7vVt4Wg1J5p6MJOglA71c1Z/hxdU456 3DWE1unCRa2VvhM6/5zRNpuKJFMLBgshYJCzwfjr0eOmx3AWIK6LzopefARZKb37 iM1IBkrc4xsHZV4GlUB+Uu3952Vehpt19a84jWF9qNsioGx5uMjVO2bbQiMbWRj3 hkhB6DDnvBgDxyHGdlt0E5hf0Oydzi5d7Lg03usLzH5uI+VarJPcjjenA9Y4B1EV Y+FdGxKeUJQGWj5ZetEocQHlpiMRE48dyKu/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcjXD5gYyt0mx3Yf2hwxalIF9DRkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NqWEQ1Z1l5dDBteDNZZjJo d3hhbElGOURSay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq ASwwDQYJKoZIhvcNAQELBQADggEBAAWggr1aMYKntrUVXrFaNBo+5LqxeCl7H4tg b7pJrq06CHtlsjagy0c8guv1H8wVFJLwbVNiIBoee8WHWPFAHGh8sA70cXgfmiz/ vyKbBqcXsa0jHIlykjj9Yp6dpf8h1jaNd7Rdg6B4JGl41rFPLaE5OJI5Y5zSrkga KiupTS1SLIN9V3w3swOgqJEMvryYVR9OJLPb4pAcCkPdYJ4bhe2SjrH9X8cX6PQJ plDrkm9UYLQFtoaQJDULVlznqdoYhRGDA7sJy2ML6vFslpegLGZHk/RJsBBfa5Io WdAJa9kgHuPYe1mats9TzP6w8wfZIb3fkVF9rkJO1V07DUV67+E= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:13 2025 by rpki-client