$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIEmy5Zi74x9tWoBOItixW0avzA.roa File: jIEmy5Zi74x9tWoBOItixW0avzA.roa (raw, json) Hash identifier: LD0epZ1HOtSeF+oqNGLwocRF5c47gsUHz44XFcwVqIU= Subject key identifier: 8C:81:26:CB:96:62:EF:8C:7D:B5:6A:01:38:8B:62:C5:6D:1A:BF:30 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 349F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIEmy5Zi74x9tWoBOItixW0avzA.roa Signing time: Mon 10 Feb 2025 13:52:34 +0000 ROA not before: Mon 10 Feb 2025 13:52:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13471 (0x349f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8C8126CB9662EF8C7DB56A01388B62C56D1ABF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:0b:37:73:ed:66:b5:aa:a1:33:34:09:b1: 7f:4c:74:bf:6b:c8:77:68:d9:0f:1b:fc:20:7f:97: ca:b1:8b:51:4a:57:89:ba:09:92:92:16:6d:74:ef: 24:46:cb:97:59:b5:84:64:ee:e9:d7:42:3b:58:71: 23:30:9c:89:3a:6e:58:64:32:16:f9:fd:be:98:17: 3c:73:e8:92:8f:3b:d0:10:09:d6:6d:4b:cc:00:67: 1a:f8:97:f1:13:8c:aa:ce:0d:8d:56:90:ed:05:94: 1b:de:c7:14:64:1e:af:19:4b:49:a3:53:1c:8f:2b: 9f:a2:8f:5e:1b:90:3c:a0:f7:97:7b:8a:02:1f:9a: 1b:7f:8d:59:a6:8a:ac:a6:87:19:1d:3d:30:02:33: 8b:e9:79:93:ec:5d:2f:0b:0e:e7:6b:2f:73:b8:4c: 33:f3:02:57:b1:d6:2e:b1:1b:4a:ad:08:4c:6e:bd: ed:4f:c9:e8:dd:b0:3a:1d:d2:f8:08:28:c2:83:28: 7c:10:51:52:b0:be:1f:9d:f9:da:e5:2c:a6:82:ba: 5c:bf:46:32:a4:0b:dc:87:12:aa:2f:a8:15:39:9a: e3:1b:de:05:53:12:8e:fb:9c:ef:d5:12:28:d9:fe: 82:78:39:27:a4:7a:25:4a:ee:ce:a2:1f:06:5a:0e: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:81:26:CB:96:62:EF:8C:7D:B5:6A:01:38:8B:62:C5:6D:1A:BF:30 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIEmy5Zi74x9tWoBOItixW0avzA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.204.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:33:1d:25:7e:d5:07:42:06:63:83:53:fe:3a:df:de:37:bc: 1c:33:fa:dd:43:42:ca:ef:ee:53:67:8a:2c:5b:ac:68:14:df: 08:12:0b:e0:41:1c:ec:92:46:ff:c0:ab:65:2e:39:38:bc:8a: eb:90:0b:4d:d4:79:e3:cd:16:37:22:bd:96:64:0d:0a:fa:fa: ad:01:9a:64:87:b1:db:82:1a:58:f8:09:bf:e4:d1:2f:06:e2: 4b:9b:17:fa:a7:8b:5c:1d:d7:d7:10:6c:62:1d:78:b5:31:a5: 25:46:e1:d6:e0:c5:54:8e:6e:74:b3:8e:eb:ae:17:d5:c3:05: ee:56:da:96:ce:cc:c5:36:15:a3:de:1b:aa:d9:f6:6b:52:c1: 09:ed:56:ef:75:ea:2c:6e:f8:16:09:e0:63:38:e4:88:5a:b0: 2f:8f:4e:4a:82:b0:08:41:79:c5:48:a8:62:88:ba:b4:60:a3: 6a:a9:28:5c:ea:5a:b8:6f:68:93:b1:b6:8e:a5:44:82:32:ab: 58:84:e6:5a:34:a8:d1:9c:56:3e:34:34:fb:5d:23:4f:79:38: f9:aa:3a:92:9e:22:0c:f4:96:ad:04:8e:41:1a:d9:96:83:17: 35:51:af:6e:be:f4:df:d6:01:2a:cf:38:ce:a2:99:83:49:4a: 17:a8:28:40 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDODEyNkNCOTY2MkVG OEM3REI1NkEwMTM4OEI2MkM1NkQxQUJGMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCWws3c+1mtaqhMzQJsX9MdL9ryHdo2Q8b/CB/l8qxi1FKV4m6 CZKSFm107yRGy5dZtYRk7unXQjtYcSMwnIk6blhkMhb5/b6YFzxz6JKPO9AQCdZt S8wAZxr4l/ETjKrODY1WkO0FlBvexxRkHq8ZS0mjUxyPK5+ij14bkDyg95d7igIf mht/jVmmiqymhxkdPTACM4vpeZPsXS8LDudrL3O4TDPzAlex1i6xG0qtCExuve1P yejdsDod0vgIKMKDKHwQUVKwvh+d+drlLKaCuly/RjKkC9yHEqovqBU5muMb3gVT Eo77nO/VEijZ/oJ4OSekeiVK7s6iHwZaDindAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjIEmy5Zi74x9tWoBOItixW0avzAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pJRW15NVppNzR4OXRXb0JP SXRpeFcwYXZ6QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AcwwDQYJKoZIhvcNAQELBQADggEBAGozHSV+1QdCBmODU/463943vBwz+t1DQsrv 7lNniixbrGgU3wgSC+BBHOySRv/Aq2UuOTi8iuuQC03UeePNFjcivZZkDQr6+q0B mmSHsduCGlj4Cb/k0S8G4kubF/qni1wd19cQbGIdeLUxpSVG4dbgxVSObnSzjuuu F9XDBe5W2pbOzMU2FaPeG6rZ9mtSwQntVu916ixu+BYJ4GM45IhasC+PTkqCsAhB ecVIqGKIurRgo2qpKFzqWrhvaJOxto6lRIIyq1iE5lo0qNGcVj40NPtdI095OPmq OpKeIgz0lq0EjkEa2ZaDFzVRr26+9N/WASrPOM6imYNJSheoKEA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:11 2025 by rpki-client