$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q9MGrraQ2_pDjP_wLo_PiEZAzJk.roa File: q9MGrraQ2_pDjP_wLo_PiEZAzJk.roa (raw, json) Hash identifier: c5w62SSBQlbdPF7RHgxUT9gmRgVbd0UmTpGL2lOB2/8= Subject key identifier: AB:D3:06:AE:B6:90:DB:FA:43:8C:FF:F0:2E:8F:CF:88:46:40:CC:99 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33A9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q9MGrraQ2_pDjP_wLo_PiEZAzJk.roa Signing time: Mon 10 Feb 2025 13:51:39 +0000 ROA not before: Mon 10 Feb 2025 13:51:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13225 (0x33a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ABD306AEB690DBFA438CFFF02E8FCF884640CC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:61:5f:03:12:24:2a:a5:1a:38:71:13:b4:75: d2:9b:46:6d:4d:ff:af:2f:13:19:67:27:fc:92:fb: 11:fd:97:fc:76:6a:a4:fc:7c:4b:1f:4c:7c:63:69: f8:56:61:9d:07:5f:74:cd:65:0b:64:f0:75:bf:39: ef:4b:e3:a9:87:37:39:73:ed:52:f3:50:a0:44:08: 0e:3f:70:8a:f1:25:4c:f2:3d:63:64:4a:26:bc:4b: 94:f5:37:e1:09:20:f7:85:fb:dc:0c:fa:ca:ed:f0: 0d:5d:f3:f8:5a:45:c3:3a:57:4b:9a:04:d4:8f:66: 81:17:b6:1c:54:ec:74:ec:17:fe:a8:23:a1:bd:1f: 0f:84:dd:b9:f4:87:db:ba:67:a2:fc:8e:3f:55:4d: 59:48:c7:d1:0b:07:16:98:5a:0d:3a:04:53:16:73: 03:e4:ab:bf:d3:8c:52:4a:64:a0:65:7e:de:3a:46: f3:53:1a:fb:b2:ce:77:9a:ae:84:ef:b2:59:12:05: fb:47:75:f4:f2:0f:a3:b7:be:2b:45:75:c5:d1:cd: a2:cf:6a:e7:18:e7:93:8c:8a:86:e6:a3:a9:e9:20: 86:d7:83:b2:88:5f:e8:fb:d2:ae:65:f0:6f:a2:a1: a5:39:12:a6:48:2b:26:1b:e0:0e:e7:96:32:8e:c6: fc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D3:06:AE:B6:90:DB:FA:43:8C:FF:F0:2E:8F:CF:88:46:40:CC:99 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q9MGrraQ2_pDjP_wLo_PiEZAzJk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.24.0/21 Signature Algorithm: sha256WithRSAEncryption 24:5e:65:d9:78:a1:aa:2e:76:eb:dd:99:1c:cb:07:7e:02:a1: b3:15:20:25:99:cd:c1:70:2d:19:b2:a0:05:d0:00:c2:71:48: 12:dc:47:f6:91:8d:54:88:22:4c:14:3b:52:be:d3:3a:10:de: 3b:f6:c4:08:36:b6:91:3f:6a:52:fd:ee:36:d9:70:38:78:23: cd:59:8c:0f:7f:b2:80:c9:7e:33:e4:5a:d7:5b:3f:f6:17:8d: 5b:ac:8e:48:8b:ac:49:58:8d:19:1f:ae:27:ba:ad:09:f2:02: 16:f2:fd:5d:30:a9:44:fb:4c:b5:3c:bf:e7:79:5d:9c:db:6b: f0:32:2f:f3:54:ff:51:1e:16:74:71:b6:1c:ed:72:5e:9c:d0: a0:11:f9:0f:4f:f1:22:04:34:bd:7a:e0:57:1c:6e:14:df:00: 15:f7:97:a0:4e:2f:62:fc:00:32:38:77:f8:3f:98:82:6a:2b: 66:f5:59:bd:ae:c6:e7:eb:f4:fb:d1:97:f8:64:64:5b:8c:30: 2b:41:74:f0:c8:58:34:bb:29:5c:5a:ce:64:95:a1:c2:90:36: e0:67:e3:92:33:f5:19:bb:a0:f7:b9:d3:7b:ad:f7:e1:a4:92: 55:f9:30:b4:bb:a2:b7:64:97:b5:31:11:38:98:a8:7a:20:ac: 1d:28:27:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCRDMwNkFFQjY5MERC RkE0MzhDRkZGMDJFOEZDRjg4NDY0MENDOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlYV8DEiQqpRo4cRO0ddKbRm1N/68vExlnJ/yS+xH9l/x2aqT8 fEsfTHxjafhWYZ0HX3TNZQtk8HW/Oe9L46mHNzlz7VLzUKBECA4/cIrxJUzyPWNk Sia8S5T1N+EJIPeF+9wM+srt8A1d8/haRcM6V0uaBNSPZoEXthxU7HTsF/6oI6G9 Hw+E3bn0h9u6Z6L8jj9VTVlIx9ELBxaYWg06BFMWcwPkq7/TjFJKZKBlft46RvNT GvuyznearoTvslkSBftHdfTyD6O3vitFdcXRzaLPaucY55OMiobmo6npIIbXg7KI X+j70q5l8G+ioaU5EqZIKyYb4A7nljKOxvzfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUq9MGrraQ2/pDjP/wLo/PiEZAzJkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3E5TUdycmFRMl9wRGpQX3dM b19QaUVaQXpKay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq ARgwDQYJKoZIhvcNAQELBQADggEBACReZdl4oaouduvdmRzLB34CobMVICWZzcFw LRmyoAXQAMJxSBLcR/aRjVSIIkwUO1K+0zoQ3jv2xAg2tpE/alL97jbZcDh4I81Z jA9/soDJfjPkWtdbP/YXjVusjkiLrElYjRkfrie6rQnyAhby/V0wqUT7TLU8v+d5 XZzba/AyL/NU/1EeFnRxthztcl6c0KAR+Q9P8SIENL164FccbhTfABX3l6BOL2L8 ADI4d/g/mIJqK2b1Wb2uxufr9PvRl/hkZFuMMCtBdPDIWDS7KVxazmSVocKQNuBn 45Iz9Rm7oPe503ut9+GkklX5MLS7ordkl7UxETiYqHogrB0oJ+s= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:37 2025 by rpki-client