$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2kKKxC_FecHwKRZwMlc-0K_JuI.roa File: l2kKKxC_FecHwKRZwMlc-0K_JuI.roa (raw, json) Hash identifier: 1ieu+zBx3y827rGPthbsRk52ezOaR8EKtYqKIka5j5U= Subject key identifier: 97:69:0A:2B:10:BF:15:E7:07:C0:A4:59:C0:C9:5C:FB:42:BF:26:E2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3545 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2kKKxC_FecHwKRZwMlc-0K_JuI.roa Signing time: Mon 10 Feb 2025 13:53:11 +0000 ROA not before: Mon 10 Feb 2025 13:53:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.0.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13637 (0x3545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=97690A2B10BF15E707C0A459C0C95CFB42BF26E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:a6:06:f3:b9:cc:cc:fd:9b:12:96:56:0d: 71:2b:ce:22:77:67:62:4d:66:30:e6:e1:2a:ad:0c: 3b:87:3a:eb:f6:38:42:a0:8e:5c:d4:7a:07:ef:d2: 36:42:88:07:c7:f9:7a:cc:f3:cd:16:71:f7:32:38: df:92:e4:ba:20:96:13:23:f0:28:7a:2f:87:13:22: e4:cb:ba:96:83:11:e2:84:9b:1e:8f:59:8e:92:82: 80:60:01:04:39:4d:3f:c8:36:fd:27:ff:ac:1d:ea: 16:84:5f:b9:af:f6:c4:fb:cf:d4:c7:23:6d:60:dd: 06:f4:f7:fa:3b:e9:4a:c2:a9:84:57:12:7f:3c:fa: 92:3d:b7:e9:8a:3c:08:87:01:fa:e5:92:df:72:16: a0:8e:1a:4b:88:34:d5:81:bc:62:3a:0e:8d:1f:ac: a8:14:66:95:41:5b:8e:fa:ce:6a:7b:32:4f:06:9e: 85:c7:c2:55:ff:1b:6d:44:59:77:31:c1:7f:6b:85: f4:74:77:35:41:43:d8:37:84:c9:ea:81:a6:e4:87: 35:0a:e3:43:c4:0f:7d:22:0c:90:0a:fa:0e:de:99: 2e:02:6a:fa:c6:0d:10:04:f5:7c:52:77:44:50:32: 83:e5:38:32:0f:a5:05:b6:87:08:74:8a:d6:c3:9b: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:69:0A:2B:10:BF:15:E7:07:C0:A4:59:C0:C9:5C:FB:42:BF:26:E2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2kKKxC_FecHwKRZwMlc-0K_JuI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.0.0/21 Signature Algorithm: sha256WithRSAEncryption 83:96:15:15:79:61:cb:e0:45:bc:5f:17:96:52:27:f2:a1:3c: 2d:4d:de:81:71:9c:12:b9:af:df:e4:e3:a4:e1:5e:45:e3:55: a4:8a:24:9e:44:1f:d6:78:10:57:1d:7d:92:45:fb:7f:2f:48: e3:c6:b8:ba:4a:94:9b:04:72:45:5b:27:d8:cf:f0:a4:06:62: 16:f7:48:5c:c4:1d:6c:17:b2:3c:b2:03:52:af:ff:c0:b2:e9: 06:7a:59:7a:37:8f:81:b2:99:24:fe:12:1e:53:bf:fd:12:3a: a0:60:59:da:20:f8:e4:31:8c:ad:ba:50:f4:7e:b6:7c:bb:a9: 78:87:82:f0:b4:f3:cb:7c:3f:4f:e4:f0:4c:a8:9d:83:d6:d6: e2:f6:28:5f:1e:74:9b:23:bd:53:df:7d:68:bd:c3:ca:bb:1a: 52:ae:70:63:5b:a2:13:17:2d:bc:74:ff:ef:bd:3d:08:dc:42: f9:b0:4c:45:6d:75:a8:da:ae:be:80:62:7b:22:47:a9:2b:f5: 18:3a:3f:85:47:3b:65:45:99:0f:ea:3e:0a:ed:2e:00:37:85: 26:19:2f:53:b5:90:72:e3:7f:ee:a8:27:8e:9f:27:2c:bd:4c: 5a:f4:38:84:55:5e:e4:11:f7:b7:b9:af:29:1e:81:56:fc:06: ad:86:91:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3NjkwQTJCMTBCRjE1 RTcwN0MwQTQ1OUMwQzk1Q0ZCNDJCRjI2RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdNaYG87nMzP2bEpZWDXErziJ3Z2JNZjDm4SqtDDuHOuv2OEKg jlzUegfv0jZCiAfH+XrM880WcfcyON+S5LoglhMj8Ch6L4cTIuTLupaDEeKEmx6P WY6SgoBgAQQ5TT/INv0n/6wd6haEX7mv9sT7z9THI21g3Qb09/o76UrCqYRXEn88 +pI9t+mKPAiHAfrlkt9yFqCOGkuINNWBvGI6Do0frKgUZpVBW476zmp7Mk8GnoXH wlX/G21EWXcxwX9rhfR0dzVBQ9g3hMnqgabkhzUK40PED30iDJAK+g7emS4CavrG DRAE9XxSd0RQMoPlODIPpQW2hwh0itbDm/bRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUl2kKKxC/FecHwKRZwMlc+0K/JuIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2wya0tLeENfRmVjSHdLUlp3 TWxjLTBLX0p1SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AQAwDQYJKoZIhvcNAQELBQADggEBAIOWFRV5YcvgRbxfF5ZSJ/KhPC1N3oFxnBK5 r9/k46ThXkXjVaSKJJ5EH9Z4EFcdfZJF+38vSOPGuLpKlJsEckVbJ9jP8KQGYhb3 SFzEHWwXsjyyA1Kv/8Cy6QZ6WXo3j4GymST+Eh5Tv/0SOqBgWdog+OQxjK26UPR+ tny7qXiHgvC088t8P0/k8EyonYPW1uL2KF8edJsjvVPffWi9w8q7GlKucGNbohMX Lbx0/++9PQjcQvmwTEVtdajarr6AYnsiR6kr9Rg6P4VHO2VFmQ/qPgrtLgA3hSYZ L1O1kHLjf+6oJ46fJyy9TFr0OIRVXuQR97e5rykegVb8Bq2Gke0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:29 2025 by rpki-client