$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oy-IX5peW8-XPbI9hduumkvitis.roa File: oy-IX5peW8-XPbI9hduumkvitis.roa (raw, json) Hash identifier: RfSZKpFwhixbvWlQADvG4BsGzVZgj08edwXYWJCPr1A= Subject key identifier: A3:2F:88:5F:9A:5E:5B:CF:97:3D:B2:3D:85:DB:AE:9A:4B:E2:B6:2B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3429 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oy-IX5peW8-XPbI9hduumkvitis.roa Signing time: Mon 10 Feb 2025 13:52:08 +0000 ROA not before: Mon 10 Feb 2025 13:52:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13353 (0x3429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A32F885F9A5E5BCF973DB23D85DBAE9A4BE2B62B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:51:ea:72:33:71:22:af:a2:ae:5b:7e:e7: 3b:99:41:1c:47:8d:f2:2c:f3:6d:68:ef:3f:28:3c: a1:a9:8f:45:89:b7:2e:f2:13:96:9e:8f:1c:af:88: 57:94:52:0c:e8:aa:9c:97:bc:6d:02:e2:a7:b3:bc: 68:6e:e9:92:6f:56:6c:10:2b:fc:dc:65:2f:c3:fc: 79:aa:17:c8:f2:b7:4a:13:1c:e3:22:b1:21:d0:9d: 04:e3:9d:f3:61:5f:3f:ac:d9:93:c4:de:76:58:90: 32:11:05:62:5b:b0:36:77:b0:5e:61:8f:71:02:32: dd:bc:bd:3f:59:df:ee:e0:64:e9:2c:9c:f6:cc:5a: 36:53:f4:de:3a:c7:72:1b:62:ec:a7:59:a4:93:12: cd:7c:12:cc:94:10:39:fc:9e:65:48:a7:59:ef:0d: 8e:a4:c9:e1:2f:c2:fb:9a:f0:36:98:4c:97:76:7b: cb:a8:77:77:fe:43:65:17:67:7c:a9:ff:2b:41:44: 6d:ed:4d:a7:51:b8:64:82:41:40:9a:13:0f:a9:0f: b8:72:3b:72:6c:2d:07:0d:5d:7c:18:5d:c7:87:d1: a9:ba:e2:d2:6c:28:07:c5:15:0a:20:c0:06:2b:4e: f8:ea:a0:12:4a:bd:2b:17:ce:9d:d5:de:a0:17:27: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2F:88:5F:9A:5E:5B:CF:97:3D:B2:3D:85:DB:AE:9A:4B:E2:B6:2B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oy-IX5peW8-XPbI9hduumkvitis.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.108.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:42:c9:a1:96:7c:cb:e8:da:9e:0e:8c:21:39:a3:29:77:3e: 99:f9:23:54:9f:29:5c:31:5a:8e:26:3b:e5:6b:4f:3b:a8:0d: 6b:e8:62:b4:38:41:5a:ff:80:a9:2c:45:1a:20:fe:32:45:cb: 91:55:7a:65:6a:6e:ff:fd:af:9f:3e:aa:c9:ea:6a:0c:09:0a: 47:b4:62:19:cd:c4:46:f6:f5:e5:1c:c3:20:64:64:27:eb:75: 50:9e:97:09:d4:3b:e6:77:54:e3:26:ff:c9:55:79:4d:e9:cd: a8:54:6e:22:75:d9:5e:58:40:b4:0d:88:0d:00:97:1b:08:d1: 63:cc:a8:a9:50:b9:19:48:b3:ca:a2:60:16:68:2a:90:9d:2b: d1:3d:ee:00:99:7b:57:c5:2b:b7:ac:0b:48:be:29:1e:ef:db: bf:66:4c:a0:93:58:3e:80:da:70:cd:89:c3:68:71:12:0a:e1: 18:ec:62:9c:a7:5d:9c:c4:9f:f9:3e:61:26:ac:aa:db:d4:cc: 68:96:30:5c:7f:40:bc:91:80:ec:a7:d3:fc:17:a4:8d:e7:cf: 1e:89:6e:46:03:17:c1:e6:80:81:c7:fc:e0:3b:7d:71:1d:08: c5:fc:2f:f5:e4:0f:57:c4:c5:9e:85:62:1e:df:59:b3:0e:d7: a6:fc:37:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzMkY4ODVGOUE1RTVC Q0Y5NzNEQjIzRDg1REJBRTlBNEJFMkI2MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDENFHqcjNxIq+irlt+5zuZQRxHjfIs821o7z8oPKGpj0WJty7y E5aejxyviFeUUgzoqpyXvG0C4qezvGhu6ZJvVmwQK/zcZS/D/HmqF8jyt0oTHOMi sSHQnQTjnfNhXz+s2ZPE3nZYkDIRBWJbsDZ3sF5hj3ECMt28vT9Z3+7gZOksnPbM WjZT9N46x3IbYuynWaSTEs18EsyUEDn8nmVIp1nvDY6kyeEvwvua8DaYTJd2e8uo d3f+Q2UXZ3yp/ytBRG3tTadRuGSCQUCaEw+pD7hyO3JsLQcNXXwYXceH0am64tJs KAfFFQogwAYrTvjqoBJKvSsXzp3V3qAXJzd/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoy+IX5peW8+XPbI9hduumkvitiswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL295LUlYNXBlVzgtWFBiSTlo ZHV1bWt2aXRpcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq AWwwDQYJKoZIhvcNAQELBQADggEBAGtCyaGWfMvo2p4OjCE5oyl3Ppn5I1SfKVwx Wo4mO+VrTzuoDWvoYrQ4QVr/gKksRRog/jJFy5FVemVqbv/9r58+qsnqagwJCke0 YhnNxEb29eUcwyBkZCfrdVCelwnUO+Z3VOMm/8lVeU3pzahUbiJ12V5YQLQNiA0A lxsI0WPMqKlQuRlIs8qiYBZoKpCdK9E97gCZe1fFK7esC0i+KR7v279mTKCTWD6A 2nDNicNocRIK4RjsYpynXZzEn/k+YSasqtvUzGiWMFx/QLyRgOyn0/wXpI3nzx6J bkYDF8HmgIHH/OA7fXEdCMX8L/XkD1fExZ6FYh7fWbMO16b8N+w= -----END CERTIFICATE-----Generated at Wed Feb 19 22:00:37 2025 by rpki-client