$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gfnUq3tcyofADWOp-RFi9KfVLfc.roa File: gfnUq3tcyofADWOp-RFi9KfVLfc.roa (raw, json) Hash identifier: 9wU/V9Nuiiv7oXTsxm1CWjIp+/KTiQNGp6gqbs1DF50= Subject key identifier: 81:F9:D4:AB:7B:5C:CA:87:C0:0D:63:A9:F9:11:62:F4:A7:D5:2D:F7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35C2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gfnUq3tcyofADWOp-RFi9KfVLfc.roa Signing time: Mon 10 Feb 2025 13:53:40 +0000 ROA not before: Mon 10 Feb 2025 13:53:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13762 (0x35c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=81F9D4AB7B5CCA87C00D63A9F91162F4A7D52DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:f9:7b:f3:a7:f9:6e:1d:2c:27:bd:2e:b6: f6:99:e4:6d:78:ba:30:e3:f6:fe:48:d0:52:a5:9b: 1b:91:a7:7f:54:67:29:d3:55:41:22:c4:14:b9:96: 61:dd:c5:b2:df:41:ac:bb:95:47:f7:3d:dc:25:a9: 4d:93:86:4b:45:36:65:53:b1:04:d1:5a:af:38:db: 37:64:79:3a:81:30:c7:fc:26:3c:fa:3c:10:16:b1: 0b:36:c5:4c:03:dd:fb:09:ec:f2:30:55:da:fc:fa: ad:50:b9:fd:bc:f9:0b:88:98:c3:3e:cc:db:1c:06: c6:76:cd:9f:92:af:ad:7a:fa:3f:4d:3c:a0:f9:59: 27:89:f5:cb:ed:59:f1:10:79:ed:42:1a:82:47:ad: 0e:a8:d9:7a:05:fa:a8:32:44:7b:be:93:f2:a1:18: 1d:28:ab:ec:91:70:64:ab:13:62:54:a0:5c:7b:c6: 47:ee:88:0e:ef:9a:fd:96:2e:d2:c4:3b:71:2e:b4: 0d:fa:72:6a:59:42:aa:67:48:1c:47:65:fd:b0:bb: 96:3d:dd:2f:a6:67:60:b0:e3:05:c8:bd:3a:b6:c0: db:1c:d8:9d:b3:33:f8:f0:8f:2f:6f:02:01:c7:13: 93:26:84:eb:55:21:db:c6:90:61:66:d4:d9:53:fc: 16:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F9:D4:AB:7B:5C:CA:87:C0:0D:63:A9:F9:11:62:F4:A7:D5:2D:F7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gfnUq3tcyofADWOp-RFi9KfVLfc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.4.0/22 Signature Algorithm: sha256WithRSAEncryption ba:08:38:f6:cc:3f:f0:f7:62:25:30:d6:39:b9:13:97:c1:7a: 0c:27:d5:0c:14:d5:52:5a:53:37:0d:69:55:86:bf:8f:6d:59: 74:c8:96:e4:12:06:d3:c1:54:e1:07:82:29:bb:37:86:49:67: f8:25:78:bd:55:00:70:6f:40:b1:b4:5c:be:74:c0:d0:3c:7c: de:11:ab:07:4f:cf:3c:b7:e2:b6:9c:7e:31:e4:de:01:ba:b3: 15:31:a9:93:f0:e3:33:72:4e:93:2b:90:68:b9:d1:48:8d:d7: a9:3e:d0:ce:10:a6:89:b1:f2:3b:2d:8c:39:1e:eb:03:8b:4e: 25:fe:46:35:c5:f9:c0:c6:7a:a7:6f:b1:2c:ca:92:9a:07:6a: 61:34:92:46:7f:cf:40:f6:ff:d4:1f:87:5c:39:d9:48:23:0d: 93:41:64:27:1d:6d:e8:02:b7:af:d9:a7:40:24:87:19:81:9f: 3a:d8:18:f1:79:41:a2:d7:19:21:2a:03:50:fb:6d:c7:78:5f: 18:8c:04:86:37:76:af:a6:e9:50:33:ad:2e:2c:13:46:2f:2e: d0:d6:cf:a6:33:48:91:92:82:53:eb:01:86:ef:1c:5f:d7:b3: ec:26:76:1b:6e:63:b8:61:f4:45:ba:38:43:bf:44:31:b1:3b: f4:2d:75:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxRjlENEFCN0I1Q0NB ODdDMDBENjNBOUY5MTE2MkY0QTdENTJERjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFpvl786f5bh0sJ70utvaZ5G14ujDj9v5I0FKlmxuRp39UZynT VUEixBS5lmHdxbLfQay7lUf3PdwlqU2ThktFNmVTsQTRWq842zdkeTqBMMf8Jjz6 PBAWsQs2xUwD3fsJ7PIwVdr8+q1Quf28+QuImMM+zNscBsZ2zZ+Sr616+j9NPKD5 WSeJ9cvtWfEQee1CGoJHrQ6o2XoF+qgyRHu+k/KhGB0oq+yRcGSrE2JUoFx7xkfu iA7vmv2WLtLEO3EutA36cmpZQqpnSBxHZf2wu5Y93S+mZ2Cw4wXIvTq2wNsc2J2z M/jwjy9vAgHHE5MmhOtVIdvGkGFm1NlT/Bb7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgfnUq3tcyofADWOp+RFi9KfVLfcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dmblVxM3RjeW9mQURXT3At UkZpOUtmVkxmYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AQQwDQYJKoZIhvcNAQELBQADggEBALoIOPbMP/D3YiUw1jm5E5fBegwn1QwU1VJa UzcNaVWGv49tWXTIluQSBtPBVOEHgim7N4ZJZ/gleL1VAHBvQLG0XL50wNA8fN4R qwdPzzy34racfjHk3gG6sxUxqZPw4zNyTpMrkGi50UiN16k+0M4Qpomx8jstjDke 6wOLTiX+RjXF+cDGeqdvsSzKkpoHamE0kkZ/z0D2/9Qfh1w52UgjDZNBZCcdbegC t6/Zp0AkhxmBnzrYGPF5QaLXGSEqA1D7bcd4XxiMBIY3dq+m6VAzrS4sE0YvLtDW z6YzSJGSglPrAYbvHF/Xs+wmdhtuY7hh9EW6OEO/RDGxO/Qtde0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:48 2025 by rpki-client