$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qhJYCXX727WjXwUxUaN6_vNyhtA.roa File: qhJYCXX727WjXwUxUaN6_vNyhtA.roa (raw, json) Hash identifier: GvaqAbUwzqTvdUSKZTn23U3FeDjSWtlOGZqdGZBxTpo= Subject key identifier: AA:12:58:09:75:FB:DB:B5:A3:5F:05:31:51:A3:7A:FE:F3:72:86:D0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3527 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qhJYCXX727WjXwUxUaN6_vNyhtA.roa Signing time: Mon 10 Feb 2025 13:53:04 +0000 ROA not before: Mon 10 Feb 2025 13:53:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13607 (0x3527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AA12580975FBDBB5A35F053151A37AFEF37286D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:f3:8b:24:53:fb:8d:93:e7:2a:73:2d:ed: e6:e8:f1:a9:53:6b:7a:ce:40:59:55:10:30:df:12: 59:cf:08:eb:5a:b3:d3:0a:e7:ed:a9:65:68:54:5f: b3:7b:08:25:4c:81:26:f3:d3:0e:bb:12:a7:10:02: 52:46:51:d9:83:7d:90:ae:9e:a3:96:49:16:e2:27: f0:fd:a7:cd:ac:cd:c1:19:ec:12:4d:e2:4e:e5:89: 95:7b:41:8b:a4:5d:60:92:69:c9:d3:fc:28:8f:c9: c6:e2:90:84:91:b0:a4:b9:82:16:5f:83:65:64:2a: 86:6e:11:01:7d:d5:03:89:ac:79:b5:75:32:b6:d9: ff:ec:3a:67:15:03:10:84:f0:c2:67:61:0c:c5:2a: 2d:b6:7d:a2:c7:75:46:44:7b:36:a9:10:93:44:95: 15:5c:36:c9:44:93:d5:98:31:66:d3:8a:5d:e0:d6: fe:e7:7d:cc:f4:c6:18:95:ab:aa:42:76:e7:4e:ab: de:8a:7c:91:29:16:4d:6f:ad:6f:cb:ee:0d:83:4b: 18:2a:28:7a:04:aa:a7:3f:9d:b1:5d:ea:dd:a5:b5: 4b:01:f2:ad:53:94:5f:b5:67:6e:88:a1:73:2e:cc: 43:49:56:ce:60:5d:ec:aa:33:91:8f:49:81:61:4d: 5a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:12:58:09:75:FB:DB:B5:A3:5F:05:31:51:A3:7A:FE:F3:72:86:D0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qhJYCXX727WjXwUxUaN6_vNyhtA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.106.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:fe:c7:d8:8f:c7:ad:2f:4f:9e:33:fe:a1:b0:05:0a:6d:23: d3:39:ca:35:d3:99:73:33:81:93:ad:1d:bf:e1:13:b8:69:12: ef:a8:8b:9b:b1:87:1e:55:d5:8b:25:1b:58:b1:2f:b9:2d:89: 9e:81:ab:d0:c8:17:ef:ae:80:8f:6b:82:29:f7:0a:94:e5:4d: 74:32:8a:f5:1d:bd:70:d9:6f:2b:aa:dd:34:ac:73:0a:49:ab: af:6e:14:e2:37:33:5f:9f:07:e9:46:6e:6f:b3:95:21:a0:10: 5c:f0:c9:7d:46:a5:0c:0d:68:e3:6a:cd:47:72:42:e2:08:39: 8d:27:6f:63:21:c1:52:9a:d6:33:2b:27:d3:a1:84:ba:7e:ea: 9c:8b:f4:76:d6:26:4e:48:f5:16:60:37:15:41:4b:ef:37:c5: bd:b2:ce:2f:fc:c2:26:fc:5c:03:1c:ae:74:4d:1c:43:23:cf: 5e:e6:87:22:c4:d8:8d:e1:54:bb:06:7b:c4:2c:ec:1a:d0:b9: 12:1b:1f:5a:7c:0a:bb:65:2c:91:e7:e1:e6:f7:1e:56:10:83: 29:a1:8b:29:1c:0e:2d:29:03:e9:67:67:2d:c0:51:53:96:96: 3f:d6:e5:31:d4:53:ad:91:a0:7e:1d:6c:8b:b7:b7:e7:2b:e7: 37:87:7b:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFBMTI1ODA5NzVGQkRC QjVBMzVGMDUzMTUxQTM3QUZFRjM3Mjg2RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5V/OLJFP7jZPnKnMt7ebo8alTa3rOQFlVEDDfElnPCOtas9MK 5+2pZWhUX7N7CCVMgSbz0w67EqcQAlJGUdmDfZCunqOWSRbiJ/D9p82szcEZ7BJN 4k7liZV7QYukXWCSacnT/CiPycbikISRsKS5ghZfg2VkKoZuEQF91QOJrHm1dTK2 2f/sOmcVAxCE8MJnYQzFKi22faLHdUZEezapEJNElRVcNslEk9WYMWbTil3g1v7n fcz0xhiVq6pCdudOq96KfJEpFk1vrW/L7g2DSxgqKHoEqqc/nbFd6t2ltUsB8q1T lF+1Z26IoXMuzENJVs5gXeyqM5GPSYFhTVpvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqhJYCXX727WjXwUxUaN6/vNyhtAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FoSllDWFg3MjdXalh3VXhV YU42X3ZOeWh0QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq AWowDQYJKoZIhvcNAQELBQADggEBAI7+x9iPx60vT54z/qGwBQptI9M5yjXTmXMz gZOtHb/hE7hpEu+oi5uxhx5V1YslG1ixL7ktiZ6Bq9DIF++ugI9rgin3CpTlTXQy ivUdvXDZbyuq3TSscwpJq69uFOI3M1+fB+lGbm+zlSGgEFzwyX1GpQwNaONqzUdy QuIIOY0nb2MhwVKa1jMrJ9OhhLp+6pyL9HbWJk5I9RZgNxVBS+83xb2yzi/8wib8 XAMcrnRNHEMjz17mhyLE2I3hVLsGe8Qs7BrQuRIbH1p8CrtlLJHn4eb3HlYQgymh iykcDi0pA+lnZy3AUVOWlj/W5THUU62RoH4dbIu3t+cr5zeHe6s= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:46 2025 by rpki-client