$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iYbf-KSF4E_GDJQNKa1omm4bR74.roa File: iYbf-KSF4E_GDJQNKa1omm4bR74.roa (raw, json) Hash identifier: K5X+U/Cdb83tDs68xy9ZYe2R5yAWh4wg0vHYKSGgYuw= Subject key identifier: 89:86:DF:F8:A4:85:E0:4F:C6:0C:94:0D:29:AD:68:9A:6E:1B:47:BE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 357D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iYbf-KSF4E_GDJQNKa1omm4bR74.roa Signing time: Mon 10 Feb 2025 13:53:23 +0000 ROA not before: Mon 10 Feb 2025 13:53:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13693 (0x357d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8986DFF8A485E04FC60C940D29AD689A6E1B47BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:cf:cc:b6:5c:9b:a6:41:a3:86:0c:83:04: af:56:3f:bb:ba:b1:43:45:dd:47:72:38:66:1c:84: 47:1f:85:98:e3:d1:e1:60:73:b5:bd:3c:4a:e2:88: 8b:d9:5c:5a:98:92:e5:c1:d6:03:64:d7:60:49:eb: 84:bc:1e:1b:c4:0a:89:a0:19:d9:9b:e9:56:3d:4d: e0:13:09:20:4e:c6:19:5a:b5:c5:d9:ce:28:de:ea: 45:36:60:27:6a:b2:ad:65:60:bd:d9:bb:0a:44:3b: 2d:f3:19:57:b7:9d:f3:61:56:1f:f3:12:73:e4:fe: 0c:f7:57:65:90:6f:4f:63:56:df:d6:b6:08:25:38: a3:8c:16:c7:82:38:9e:8f:4b:75:94:c8:ae:d6:7d: aa:0a:94:6a:24:76:6f:f8:3c:97:e4:93:a3:ca:ae: b0:82:a6:5e:58:21:81:61:a3:4d:fd:1b:5e:81:9d: 00:a6:0d:e6:34:fd:09:bf:ad:72:83:bc:ad:1e:f7: 55:50:4d:19:91:2e:2c:dc:6c:00:f5:fe:d1:aa:9a: 3c:46:54:07:cc:74:c8:32:88:c1:de:2a:46:e3:d3: b4:a5:af:42:27:de:5e:9f:47:5f:df:14:f4:e0:35: cf:d5:cb:01:ed:24:c0:21:25:d7:c6:bc:b9:e8:ae: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:86:DF:F8:A4:85:E0:4F:C6:0C:94:0D:29:AD:68:9A:6E:1B:47:BE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iYbf-KSF4E_GDJQNKa1omm4bR74.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.183.0/24 Signature Algorithm: sha256WithRSAEncryption b9:9f:1d:51:54:1e:b2:bf:7d:53:bd:df:52:8b:e7:2a:ae:86: 70:2c:9d:75:1f:99:18:d3:b5:eb:47:b9:e1:52:6f:0f:16:6e: f5:c6:4b:b5:d8:00:4a:9c:89:2b:9f:ea:f6:a7:51:b7:9d:89: 9a:f6:72:e6:42:fd:16:11:90:2c:d9:60:9e:ef:f3:ec:89:b7: f1:1b:c3:30:fc:b3:74:78:9b:26:c9:05:f4:bd:39:59:8a:c9: 75:f1:a8:53:52:dc:91:4d:bf:98:26:ab:c2:68:8f:dc:81:48: 64:7e:77:e7:de:bb:6d:80:24:4b:8a:45:b1:80:f3:17:53:ab: 2e:56:ac:6e:6e:7d:48:4e:1e:d9:d4:17:e5:7a:a3:3c:96:71: 99:15:45:31:d1:5e:50:2b:3c:0b:1a:d2:fc:8a:06:03:2f:7a: c6:db:cd:5f:a5:d4:a8:56:dc:b4:67:d1:96:76:60:56:54:8b: 1e:e6:22:8e:a7:72:2b:55:96:24:00:48:c1:15:e6:65:4b:18: 9d:c9:b9:f4:5c:02:09:fc:01:d1:fe:c1:78:e0:82:17:29:65: 16:62:ff:fe:08:31:f0:f9:91:20:5e:2d:fb:34:b4:a2:c3:4b: 66:4e:00:d0:e4:b9:15:89:f8:10:4a:11:49:a3:c6:b5:21:51: 8d:f6:cd:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg5ODZERkY4QTQ4NUUw NEZDNjBDOTQwRDI5QUQ2ODlBNkUxQjQ3QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCd5s/MtlybpkGjhgyDBK9WP7u6sUNF3UdyOGYchEcfhZjj0eFg c7W9PEriiIvZXFqYkuXB1gNk12BJ64S8HhvEComgGdmb6VY9TeATCSBOxhlatcXZ zije6kU2YCdqsq1lYL3ZuwpEOy3zGVe3nfNhVh/zEnPk/gz3V2WQb09jVt/Wtggl OKOMFseCOJ6PS3WUyK7WfaoKlGokdm/4PJfkk6PKrrCCpl5YIYFho039G16BnQCm DeY0/Qm/rXKDvK0e91VQTRmRLizcbAD1/tGqmjxGVAfMdMgyiMHeKkbj07Slr0In 3l6fR1/fFPTgNc/VywHtJMAhJdfGvLnorvtdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiYbf+KSF4E/GDJQNKa1omm4bR74wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lZYmYtS1NGNEVfR0RKUU5L YTFvbW00YlI3NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AbcwDQYJKoZIhvcNAQELBQADggEBALmfHVFUHrK/fVO931KL5yquhnAsnXUfmRjT tetHueFSbw8WbvXGS7XYAEqciSuf6vanUbediZr2cuZC/RYRkCzZYJ7v8+yJt/Eb wzD8s3R4mybJBfS9OVmKyXXxqFNS3JFNv5gmq8Joj9yBSGR+d+feu22AJEuKRbGA 8xdTqy5WrG5ufUhOHtnUF+V6ozyWcZkVRTHRXlArPAsa0vyKBgMvesbbzV+l1KhW 3LRn0ZZ2YFZUix7mIo6ncitVliQASMEV5mVLGJ3JufRcAgn8AdH+wXjgghcpZRZi //4IMfD5kSBeLfs0tKLDS2ZOANDkuRWJ+BBKEUmjxrUhUY32zfs= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:35 2025 by rpki-client