$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pBDolA5ugTz9STymP0a4tYAgbOM.roa File: pBDolA5ugTz9STymP0a4tYAgbOM.roa (raw, json) Hash identifier: m9l6noTBTiwIyjSBgj830q17Ws/awUFSE6lNZBCFITs= Subject key identifier: A4:10:E8:94:0E:6E:81:3C:FD:49:3C:A6:3F:46:B8:B5:80:20:6C:E3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 361F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pBDolA5ugTz9STymP0a4tYAgbOM.roa Signing time: Mon 10 Feb 2025 13:53:59 +0000 ROA not before: Mon 10 Feb 2025 13:53:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13855 (0x361f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A410E8940E6E813CFD493CA63F46B8B580206CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:89:5c:06:57:eb:ec:3c:43:0a:4d:b2:92: b2:5d:ff:b0:95:b1:bf:45:a7:6f:c1:e9:34:88:0d: 02:1f:5d:0b:ee:14:4c:62:a1:0e:bb:36:e5:3a:88: 21:ca:b2:71:7c:a5:26:85:6b:49:2a:3a:e1:7e:7a: 94:f5:47:b6:bb:82:17:5e:4e:4d:fa:55:df:b7:0b: a9:ae:83:01:2e:2a:c2:9a:1c:ac:f4:d7:3b:e9:34: 61:8e:87:4e:85:a9:43:a8:6c:b3:e4:4f:24:d8:8e: 73:4b:ca:6a:14:41:36:aa:f5:f3:0b:a1:9e:b0:e6: 7f:99:b4:b0:a2:4f:30:e0:e5:c4:b1:25:55:29:2b: a8:ed:d9:4a:fa:a3:26:1e:7d:4b:fd:96:86:9f:0e: 47:c6:34:78:62:db:97:3c:6e:dd:a5:cb:ad:0c:2e: 45:58:33:9b:f4:a7:db:39:82:ea:e5:71:ce:fe:2f: a3:66:32:7f:64:e9:49:38:bd:f7:b4:a9:99:0b:7f: 56:69:52:26:97:c6:11:38:05:f4:31:e2:f6:07:30: dc:92:44:aa:8b:8a:24:63:34:21:25:da:a2:17:d6: b0:02:43:d8:55:77:0b:aa:51:64:e3:8d:a3:ef:fe: 4b:e1:4a:b5:c8:1a:59:a9:62:0e:a0:7b:39:48:a9: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:10:E8:94:0E:6E:81:3C:FD:49:3C:A6:3F:46:B8:B5:80:20:6C:E3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pBDolA5ugTz9STymP0a4tYAgbOM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.200.0/22 Signature Algorithm: sha256WithRSAEncryption 59:f4:79:9f:a7:b2:3a:bf:fa:1a:d5:fd:9c:bb:99:54:fd:49: 47:48:22:a8:ed:88:5b:7e:88:b4:c6:2f:77:44:79:de:ab:1e: 85:b5:44:81:ad:a6:97:0b:c7:a1:a6:82:b4:b8:bf:33:f5:0c: ee:65:34:b0:1d:cd:cb:3d:86:15:bd:32:93:df:51:20:d4:8e: 58:96:de:22:28:46:52:1a:a4:d8:85:c8:de:c6:ec:2f:b0:da: 1b:90:7f:18:9b:12:73:e4:ee:90:7b:d7:01:04:9e:be:ac:3d: ee:8a:10:8e:b0:c0:92:d3:f9:c6:6b:6b:5b:2e:c3:77:38:54: 2b:de:8a:16:98:e2:b3:90:aa:32:85:e2:4b:56:06:bc:66:83: 71:b3:49:f6:90:5c:61:e3:27:10:21:04:cb:99:9d:dd:8c:84: e8:53:36:42:45:55:df:60:06:87:95:2d:84:18:9d:a0:28:3c: 8b:2b:40:61:ee:1d:71:55:4f:81:a8:0c:74:35:31:43:44:75: 9c:78:b1:8b:bd:34:7f:1c:f7:16:20:c2:17:eb:86:ae:7e:fe: b4:bd:c8:0d:5e:ea:7a:8e:1e:fe:01:a8:59:e1:ab:1c:bc:17: 37:2f:2d:ea:f5:be:48:b8:df:1f:7a:e7:03:c6:e0:da:ef:32: 6f:ab:c0:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0MTBFODk0MEU2RTgx M0NGRDQ5M0NBNjNGNDZCOEI1ODAyMDZDRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPWolcBlfr7DxDCk2ykrJd/7CVsb9Fp2/B6TSIDQIfXQvuFExi oQ67NuU6iCHKsnF8pSaFa0kqOuF+epT1R7a7ghdeTk36Vd+3C6mugwEuKsKaHKz0 1zvpNGGOh06FqUOobLPkTyTYjnNLymoUQTaq9fMLoZ6w5n+ZtLCiTzDg5cSxJVUp K6jt2Ur6oyYefUv9loafDkfGNHhi25c8bt2ly60MLkVYM5v0p9s5gurlcc7+L6Nm Mn9k6Uk4vfe0qZkLf1ZpUiaXxhE4BfQx4vYHMNySRKqLiiRjNCEl2qIX1rACQ9hV dwuqUWTjjaPv/kvhSrXIGlmpYg6gezlIqYmlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpBDolA5ugTz9STymP0a4tYAgbOMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BCRG9sQTV1Z1R6OVNUeW1Q MGE0dFlBZ2JPTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AcgwDQYJKoZIhvcNAQELBQADggEBAFn0eZ+nsjq/+hrV/Zy7mVT9SUdIIqjtiFt+ iLTGL3dEed6rHoW1RIGtppcLx6GmgrS4vzP1DO5lNLAdzcs9hhW9MpPfUSDUjliW 3iIoRlIapNiFyN7G7C+w2huQfxibEnPk7pB71wEEnr6sPe6KEI6wwJLT+cZra1su w3c4VCveihaY4rOQqjKF4ktWBrxmg3GzSfaQXGHjJxAhBMuZnd2MhOhTNkJFVd9g BoeVLYQYnaAoPIsrQGHuHXFVT4GoDHQ1MUNEdZx4sYu9NH8c9xYgwhfrhq5+/rS9 yA1e6nqOHv4BqFnhqxy8FzcvLer1vki43x965wPG4NrvMm+rwH4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:11 2025 by rpki-client