$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fjfpFPlGwwW-91nKrYDZG09WKAA.roa File: fjfpFPlGwwW-91nKrYDZG09WKAA.roa (raw, json) Hash identifier: V8K3J9H7r2p63Il93kH8gcuxe/io5pz30sF+mPR+OHM= Subject key identifier: 7E:37:E9:14:F9:46:C3:05:BE:F7:59:CA:AD:80:D9:1B:4F:56:28:00 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33FB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fjfpFPlGwwW-91nKrYDZG09WKAA.roa Signing time: Mon 10 Feb 2025 13:51:57 +0000 ROA not before: Mon 10 Feb 2025 13:51:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13307 (0x33fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7E37E914F946C305BEF759CAAD80D91B4F562800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:2c:e1:e0:ce:a5:f0:6b:31:a0:cb:51:0e: 08:f8:5b:c5:79:d1:61:4f:ac:bc:e7:e7:f3:73:bf: 2f:9c:7d:0c:28:6e:48:23:8e:e1:be:1d:43:9a:d1: 4d:03:d5:e0:43:db:5c:a9:cd:0d:a1:fc:96:dc:ef: a6:2b:c6:97:08:20:e9:cd:7e:c1:0d:b3:8e:22:3d: 2c:16:69:6e:ee:2a:77:f5:38:c8:76:9b:a2:19:84: 44:26:25:94:d8:97:f1:9c:9f:5f:9d:d0:d4:8f:ee: 6b:e5:c6:09:37:1e:fe:75:4f:48:fd:08:04:e7:b1: 04:74:cc:2a:eb:4e:22:ba:67:46:cd:a4:a3:7f:2f: 25:78:3d:4c:c1:15:6c:3f:ff:6d:4d:71:4d:b7:de: df:b5:a3:f5:12:fb:ad:23:07:8c:c0:4e:5b:6a:97: 5b:ca:d6:73:4a:65:39:13:ca:02:06:30:c6:75:d6: 6d:d7:70:72:bf:28:a3:00:0a:3f:49:b4:6c:0c:a4: 65:e1:f1:40:af:eb:d0:4b:bf:c0:22:eb:a8:e6:b2: 9e:12:c3:0f:45:2b:d2:39:37:26:c1:86:6f:40:fb: 5a:a4:42:8d:fc:88:b9:b4:15:36:bc:fb:32:e6:d4: d4:26:e9:02:49:03:66:77:72:8d:ad:cc:88:51:22: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:37:E9:14:F9:46:C3:05:BE:F7:59:CA:AD:80:D9:1B:4F:56:28:00 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fjfpFPlGwwW-91nKrYDZG09WKAA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.216.0/22 Signature Algorithm: sha256WithRSAEncryption 05:61:fa:bf:99:de:c4:89:53:4c:ae:06:cc:d6:7d:3e:a3:1f: e4:6c:74:38:fc:96:f2:61:2a:b0:52:a3:f6:60:db:c6:78:7b: 11:24:48:bd:fe:e3:f4:3c:38:22:31:ab:83:dd:35:ab:96:06: 1e:35:cf:d5:91:bf:88:2c:1e:33:87:6b:b3:3b:72:da:c5:59: 0b:30:5b:24:b8:48:a2:30:b8:b5:b4:5e:80:e8:dd:a4:ff:cf: 5b:e0:be:f7:f8:7d:75:54:ce:ed:51:45:8c:eb:9d:bc:ed:a4: ae:ba:ee:f9:47:f6:80:6b:dc:83:5f:4a:cd:58:af:94:8e:38: a8:ad:20:74:f4:e4:39:ee:a9:b8:33:fc:bb:a1:22:8b:15:1c: a8:6a:0f:72:da:06:ae:02:bc:48:26:09:8f:69:9c:7d:2a:26: 6c:80:68:ce:50:38:ec:90:f3:df:61:ee:51:50:c8:04:cd:c8: bf:57:ff:22:e7:42:69:dd:96:cd:95:e6:bc:a1:8f:1c:05:87: b8:d4:47:50:7f:9f:fd:ac:fa:3b:8c:71:c4:27:91:42:6c:b0: ec:14:0e:86:01:b7:87:31:19:24:56:a7:1a:37:5e:36:50:58: 6e:4e:5d:f8:de:7f:0c:a1:3a:be:0f:dc:ae:ad:db:b8:35:e6: ac:51:d9:3b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdFMzdFOTE0Rjk0NkMz MDVCRUY3NTlDQUFEODBEOTFCNEY1NjI4MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXQizh4M6l8GsxoMtRDgj4W8V50WFPrLzn5/Nzvy+cfQwobkgj juG+HUOa0U0D1eBD21ypzQ2h/Jbc76YrxpcIIOnNfsENs44iPSwWaW7uKnf1OMh2 m6IZhEQmJZTYl/Gcn1+d0NSP7mvlxgk3Hv51T0j9CATnsQR0zCrrTiK6Z0bNpKN/ LyV4PUzBFWw//21NcU233t+1o/US+60jB4zATltql1vK1nNKZTkTygIGMMZ11m3X cHK/KKMACj9JtGwMpGXh8UCv69BLv8Ai66jmsp4Sww9FK9I5NybBhm9A+1qkQo38 iLm0FTa8+zLm1NQm6QJJA2Z3co2tzIhRIpNJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfjfpFPlGwwW+91nKrYDZG09WKAAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZqZnBGUGxHd3dXLTkxbkty WURaRzA5V0tBQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AdgwDQYJKoZIhvcNAQELBQADggEBAAVh+r+Z3sSJU0yuBszWfT6jH+RsdDj8lvJh KrBSo/Zg28Z4exEkSL3+4/Q8OCIxq4PdNauWBh41z9WRv4gsHjOHa7M7ctrFWQsw WyS4SKIwuLW0XoDo3aT/z1vgvvf4fXVUzu1RRYzrnbztpK667vlH9oBr3INfSs1Y r5SOOKitIHT05Dnuqbgz/LuhIosVHKhqD3LaBq4CvEgmCY9pnH0qJmyAaM5QOOyQ 899h7lFQyATNyL9X/yLnQmndls2V5ryhjxwFh7jUR1B/n/2s+juMccQnkUJssOwU DoYBt4cxGSRWpxo3XjZQWG5OXfjefwyhOr4P3K6t27g15qxR2Ts= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:02 2025 by rpki-client