$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g-JqFepoXlHTO-FqVamfH1GgSzY.roa File: g-JqFepoXlHTO-FqVamfH1GgSzY.roa (raw, json) Hash identifier: vdgRadfbCAhVgGjTmp97rz5UIx05EE/udpWyIuCZ1VY= Subject key identifier: 83:E2:6A:15:EA:68:5E:51:D3:3B:E1:6A:55:A9:9F:1F:51:A0:4B:36 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 344B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g-JqFepoXlHTO-FqVamfH1GgSzY.roa Signing time: Mon 10 Feb 2025 13:52:15 +0000 ROA not before: Mon 10 Feb 2025 13:52:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13387 (0x344b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=83E26A15EA685E51D33BE16A55A99F1F51A04B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:aa:20:be:48:6a:b0:14:83:e9:07:3a:da: e5:00:6a:15:25:db:65:bb:61:55:4f:7a:18:92:d1: 37:29:ee:0a:ca:24:c0:c2:53:0b:5c:bb:fd:b7:35: fa:09:79:85:f7:99:7d:f0:78:4d:72:bf:3f:95:52: cf:7d:2c:7d:da:1c:cf:37:1b:26:54:22:4f:cf:93: bf:39:f3:4e:b3:a2:01:91:26:3d:8a:9b:d4:15:20: 9c:4b:0c:d2:99:84:b8:5e:65:7b:3c:22:f3:ac:ae: 74:68:57:5d:e3:16:3b:84:a7:8a:0c:46:5f:af:49: 22:ab:2c:aa:10:64:d6:e2:12:42:0e:74:5d:c6:47: dc:da:1c:7e:81:48:6d:27:68:23:5a:78:54:7d:2b: 88:61:51:0d:72:cf:9e:6d:7a:35:16:5b:1a:95:1b: 9f:07:4a:be:0f:44:8b:d5:38:bc:6f:39:51:2a:e5: ce:de:9c:1d:89:49:6c:ff:de:60:8d:94:15:48:8c: 9a:19:e7:96:0d:73:24:58:05:da:05:cd:9c:21:6a: 05:67:5c:31:48:61:11:5d:69:d5:35:ec:0a:e7:84: a2:a3:e8:a4:c7:a7:b8:0a:f3:30:9e:fb:1c:e3:4f: 7a:75:bd:bc:1e:c2:c0:bd:8e:dd:38:f1:65:ab:64: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E2:6A:15:EA:68:5E:51:D3:3B:E1:6A:55:A9:9F:1F:51:A0:4B:36 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g-JqFepoXlHTO-FqVamfH1GgSzY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.156.0/22 Signature Algorithm: sha256WithRSAEncryption 67:c2:43:3f:e1:9c:57:50:9e:0b:30:ca:c0:c4:1d:a1:46:0f: 5d:9a:0d:f6:20:83:ac:de:b5:3f:f1:cd:ac:9e:ad:c7:08:83: f9:c1:82:3f:3b:21:b9:94:5a:83:17:c3:7f:09:99:66:97:3d: 16:a1:29:d6:fb:e8:65:b8:37:56:b7:2d:e8:9b:da:a9:72:44: 8d:cf:cc:39:d1:2f:3a:bc:91:87:a8:03:68:56:e5:35:18:da: b6:5d:02:e5:64:78:5c:a5:2f:7d:6a:4b:c3:67:3c:30:4e:2a: fb:e1:13:7b:3a:bc:97:aa:b6:5c:89:ce:47:ec:a4:3e:58:a7: 80:c7:b5:79:22:12:bf:1d:86:d7:a1:cb:76:d6:9a:b8:86:ab: 0d:b5:03:40:33:6b:f6:3a:68:a6:d4:88:e1:49:cc:ae:f3:d6: 31:9a:b6:f4:20:da:05:b4:7c:cc:d7:63:4f:25:a4:0f:e5:1d: b4:58:e4:ff:7c:dc:77:63:44:eb:85:f6:81:27:fc:ae:c8:06: 10:9a:b4:0d:24:3f:69:40:df:10:88:02:d0:17:96:c6:ad:2c: ba:ce:53:e5:05:d6:88:48:76:8f:f9:33:5a:b8:9d:1b:9a:8f: fb:d0:49:98:b6:3e:20:b4:00:23:ab:d9:80:b6:da:a1:42:97: e5:1b:78:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgzRTI2QTE1RUE2ODVF NTFEMzNCRTE2QTU1QTk5RjFGNTFBMDRCMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkwqogvkhqsBSD6Qc62uUAahUl22W7YVVPehiS0Tcp7grKJMDC Uwtcu/23NfoJeYX3mX3weE1yvz+VUs99LH3aHM83GyZUIk/Pk785806zogGRJj2K m9QVIJxLDNKZhLheZXs8IvOsrnRoV13jFjuEp4oMRl+vSSKrLKoQZNbiEkIOdF3G R9zaHH6BSG0naCNaeFR9K4hhUQ1yz55tejUWWxqVG58HSr4PRIvVOLxvOVEq5c7e nB2JSWz/3mCNlBVIjJoZ55YNcyRYBdoFzZwhagVnXDFIYRFdadU17ArnhKKj6KTH p7gK8zCe+xzjT3p1vbwewsC9jt048WWrZDFpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUg+JqFepoXlHTO+FqVamfH1GgSzYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ctSnFGZXBvWGxIVE8tRnFW YW1mSDFHZ1N6WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AZwwDQYJKoZIhvcNAQELBQADggEBAGfCQz/hnFdQngswysDEHaFGD12aDfYgg6ze tT/xzayerccIg/nBgj87IbmUWoMXw38JmWaXPRahKdb76GW4N1a3Leib2qlyRI3P zDnRLzq8kYeoA2hW5TUY2rZdAuVkeFylL31qS8NnPDBOKvvhE3s6vJeqtlyJzkfs pD5Yp4DHtXkiEr8dhtehy3bWmriGqw21A0Aza/Y6aKbUiOFJzK7z1jGatvQg2gW0 fMzXY08lpA/lHbRY5P983HdjROuF9oEn/K7IBhCatA0kP2lA3xCIAtAXlsatLLrO U+UF1ohIdo/5M1q4nRuaj/vQSZi2PiC0ACOr2YC22qFCl+UbeHA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:23 2025 by rpki-client