$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gH8q3mPWoM75l0siZZjnLjlClG8.roa File: gH8q3mPWoM75l0siZZjnLjlClG8.roa (raw, json) Hash identifier: txttSUPhrYUbDr3VOdXcPLGsHGxy6Osk68cesz3P8Gs= Subject key identifier: 80:7F:2A:DE:63:D6:A0:CE:F9:97:4B:22:65:98:E7:2E:39:42:94:6F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33D4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gH8q3mPWoM75l0siZZjnLjlClG8.roa Signing time: Mon 10 Feb 2025 13:51:48 +0000 ROA not before: Mon 10 Feb 2025 13:51:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 106.1.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13268 (0x33d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=807F2ADE63D6A0CEF9974B226598E72E3942946F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cf:ad:86:f5:58:32:e7:81:51:1b:10:2a:82: f7:a3:d9:91:72:da:09:15:02:a6:85:76:d8:3e:84: ee:73:fc:a8:f8:13:4e:b3:85:b9:4c:a6:64:e8:92: f1:79:b0:97:08:a6:b3:94:55:e0:24:91:b9:9c:28: 80:90:61:e6:2e:cb:70:7d:03:86:62:66:84:48:98: 49:fc:98:dc:0a:cc:b5:ac:a9:7d:c7:9e:bc:9b:61: d8:5f:94:b4:f4:4e:d1:28:6e:08:bf:30:66:35:c7: 8e:57:df:5f:ca:44:4c:e5:5a:75:0a:e8:f5:a4:3c: ce:1b:41:5f:40:ff:b1:4b:6a:d6:ac:9e:e4:7e:59: e1:0a:b9:8c:ba:4c:1e:0f:38:70:f9:62:6b:29:c5: 3c:e4:a9:0e:fb:c1:56:5a:5e:0f:1a:21:95:75:aa: 8f:0c:d3:9c:f7:c9:44:fb:32:7d:7d:0e:81:58:52: a0:b2:45:7b:8f:3e:34:53:be:34:ff:df:12:c8:2c: 30:9c:8e:95:7a:16:e6:a0:7a:f1:be:ed:31:5b:80: 90:53:6c:e2:04:d1:dc:15:69:41:2e:4a:ad:c3:c7: a5:0b:34:26:fe:09:e5:34:19:9f:d7:73:b4:da:1b: d1:81:f2:0e:12:b7:43:f0:8a:15:d4:97:e3:1c:66: 8d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7F:2A:DE:63:D6:A0:CE:F9:97:4B:22:65:98:E7:2E:39:42:94:6F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gH8q3mPWoM75l0siZZjnLjlClG8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2b:9b:58:d2:7f:52:b2:63:45:f1:9a:e5:71:cc:27:0e:93:59: 0c:c5:06:56:70:41:a5:28:72:49:61:5a:17:19:b0:45:b5:86: d8:f1:0c:37:15:34:c2:5d:60:c1:43:64:59:f0:16:19:80:df: 3a:c0:0d:b1:e9:a0:d1:fc:b6:24:80:01:34:87:71:82:b2:2c: 87:69:26:f1:0b:95:d7:3b:2a:08:ea:7e:47:e5:0d:9a:27:c8: d6:42:c7:b5:bb:78:3f:95:f6:18:61:86:7a:15:c7:cc:5f:de: 03:35:ff:84:83:0a:06:11:09:81:3a:ef:42:b3:2a:72:49:df: 49:b1:3b:2b:01:8d:b9:e0:00:1b:5c:80:a8:0f:0e:9a:a8:45: df:99:0c:04:a8:b3:01:05:b2:d7:c3:1a:fe:f4:a9:ef:b3:5e: 61:59:f0:73:52:16:77:91:64:98:d5:38:0e:17:9d:af:24:93: 9f:2f:71:93:50:26:24:62:55:59:fb:34:5b:18:9b:04:98:a0: 41:f4:f5:ef:12:88:76:b4:1c:72:55:1a:6b:df:22:9c:f4:0b: 5a:1a:55:36:6b:d5:54:d5:e4:0b:c0:d1:e0:10:1f:d5:a0:40: ef:bd:cc:c0:79:e0:6e:c0:d2:9a:55:1b:5f:86:fd:75:d4:e4: c7:65:5e:da -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICM9QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwN0YyQURFNjNENkEw Q0VGOTk3NEIyMjY1OThFNzJFMzk0Mjk0NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfz62G9Vgy54FRGxAqgvej2ZFy2gkVAqaFdtg+hO5z/Kj4E06z hblMpmTokvF5sJcIprOUVeAkkbmcKICQYeYuy3B9A4ZiZoRImEn8mNwKzLWsqX3H nrybYdhflLT0TtEobgi/MGY1x45X31/KREzlWnUK6PWkPM4bQV9A/7FLatasnuR+ WeEKuYy6TB4POHD5YmspxTzkqQ77wVZaXg8aIZV1qo8M05z3yUT7Mn19DoFYUqCy RXuPPjRTvjT/3xLILDCcjpV6FuagevG+7TFbgJBTbOIE0dwVaUEuSq3Dx6ULNCb+ CeU0GZ/Xc7TaG9GB8g4St0PwihXUl+McZo1vAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUgH8q3mPWoM75l0siZZjnLjlClG8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dIOHEzbVBXb003NWwwc2la WmpuTGpsQ2xHOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBq ATANBgkqhkiG9w0BAQsFAAOCAQEAK5tY0n9SsmNF8ZrlccwnDpNZDMUGVnBBpShy SWFaFxmwRbWG2PEMNxU0wl1gwUNkWfAWGYDfOsANsemg0fy2JIABNIdxgrIsh2km 8QuV1zsqCOp+R+UNmifI1kLHtbt4P5X2GGGGehXHzF/eAzX/hIMKBhEJgTrvQrMq cknfSbE7KwGNueAAG1yAqA8OmqhF35kMBKizAQWy18Ma/vSp77NeYVnwc1IWd5Fk mNU4DhedrySTny9xk1AmJGJVWfs0WxibBJigQfT17xKIdrQcclUaa98inPQLWhpV NmvVVNXkC8DR4BAf1aBA773MwHngbsDSmlUbX4b9ddTkx2Ve2g== -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:06 2025 by rpki-client