$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/srVpCZDoyhV2K9-Y9GQwyW_gyrE.roa File: srVpCZDoyhV2K9-Y9GQwyW_gyrE.roa (raw, json) Hash identifier: REyQ/F3Y9QujHkJhIzfQ3hlbDIf64U5Kuvc63G5mWCY= Subject key identifier: B2:B5:69:09:90:E8:CA:15:76:2B:DF:98:F4:64:30:C9:6F:E0:CA:B1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3621 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/srVpCZDoyhV2K9-Y9GQwyW_gyrE.roa Signing time: Mon 10 Feb 2025 13:54:00 +0000 ROA not before: Mon 10 Feb 2025 13:54:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13857 (0x3621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B2B5690990E8CA15762BDF98F46430C96FE0CAB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:08:68:c4:1c:fb:0d:93:db:2a:14:0c:42: 00:14:d6:c5:3f:48:e9:8c:f6:d0:a6:d2:74:57:be: 2a:63:06:da:a0:b6:47:75:ba:ce:7e:1c:d9:14:a0: 4b:fc:d0:96:05:51:7a:13:8c:0c:24:2a:bc:40:f0: bf:f0:0e:5f:c1:c9:17:f5:17:f7:a3:d4:d8:d5:1a: 5d:3e:30:77:f2:4d:15:66:f9:1e:bb:c9:71:9a:3d: d5:be:0d:45:59:da:2a:7f:73:50:32:04:cb:7e:e7: 2a:fe:85:ad:c2:50:05:b0:04:b0:15:e5:c6:a1:28: 5f:22:e9:1d:6c:7a:69:49:24:db:da:92:56:7b:1f: b5:96:dc:bc:64:8c:4a:02:31:b0:be:b5:c7:39:e6: bb:08:49:ae:b0:da:d6:9a:31:cc:72:29:9b:a7:d6: b8:bc:71:b9:01:49:5e:04:a2:bf:1f:2f:4a:de:11: 2b:f7:9a:68:d4:07:a5:fe:67:00:07:86:f2:35:5c: e2:8e:51:42:38:9f:ac:0a:0c:63:17:69:38:39:77: 00:98:3a:2b:46:6f:46:41:4e:f1:e3:70:b3:2a:aa: 6a:b0:4c:d0:02:1c:65:52:75:62:d5:b4:d3:15:69: c0:e0:ff:e1:ef:ee:de:dc:a7:9a:16:73:ba:bc:60: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B5:69:09:90:E8:CA:15:76:2B:DF:98:F4:64:30:C9:6F:E0:CA:B1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/srVpCZDoyhV2K9-Y9GQwyW_gyrE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.214.0/24 Signature Algorithm: sha256WithRSAEncryption 29:d8:ef:9f:b4:1c:ed:8b:e4:e3:5a:5e:dc:6e:55:b3:64:df: 47:79:63:93:d4:36:4e:5e:09:74:ea:24:5e:c7:18:34:1f:cb: b8:23:cc:13:b3:d6:6d:36:cc:6c:ef:23:67:a3:10:c0:00:00: ed:75:1f:94:7e:9a:80:7b:cb:7f:50:a5:cc:31:4a:b3:be:8e: 12:46:93:0d:60:cf:9d:3d:a6:c7:a3:7d:86:29:ed:ad:17:30: 70:06:81:8f:ad:b4:ad:e8:e8:17:60:42:c7:a4:69:1d:0e:3a: 30:44:2c:6c:0a:0e:1b:31:4c:bd:f5:0f:6b:9b:d4:7f:91:ce: 7f:85:fd:3e:45:5f:07:0c:e2:e8:3d:c6:4c:36:16:77:64:74: 36:df:01:ed:f7:50:ff:84:d2:c5:fe:1b:0c:8b:c9:56:6d:dc: 8b:3a:be:3c:d6:44:e4:5a:f1:fe:bc:a2:8f:f1:f4:7a:f1:eb: 03:ae:ac:29:99:a0:bb:ea:cb:7b:14:86:9f:3a:26:88:b3:14: 9e:97:de:9c:7b:ef:0e:f4:4d:eb:de:c8:e9:4f:58:52:e0:b4: 95:3a:33:f7:b4:ba:0c:6e:97:f8:2d:37:e6:2a:ba:92:41:49: f0:eb:5c:9a:56:f1:d6:3b:4c:3b:4a:73:f2:c5:86:31:2f:d9: f8:fa:b8:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyQjU2OTA5OTBFOENB MTU3NjJCREY5OEY0NjQzMEM5NkZFMENBQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC40whoxBz7DZPbKhQMQgAU1sU/SOmM9tCm0nRXvipjBtqgtkd1 us5+HNkUoEv80JYFUXoTjAwkKrxA8L/wDl/ByRf1F/ej1NjVGl0+MHfyTRVm+R67 yXGaPdW+DUVZ2ip/c1AyBMt+5yr+ha3CUAWwBLAV5cahKF8i6R1semlJJNvaklZ7 H7WW3LxkjEoCMbC+tcc55rsISa6w2taaMcxyKZun1ri8cbkBSV4Eor8fL0reESv3 mmjUB6X+ZwAHhvI1XOKOUUI4n6wKDGMXaTg5dwCYOitGb0ZBTvHjcLMqqmqwTNAC HGVSdWLVtNMVacDg/+Hv7t7cp5oWc7q8YEtpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsrVpCZDoyhV2K9+Y9GQwyW/gyrEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NyVnBDWkRveWhWMks5LVk5 R1F3eVdfZ3lyRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AdYwDQYJKoZIhvcNAQELBQADggEBACnY75+0HO2L5ONaXtxuVbNk30d5Y5PUNk5e CXTqJF7HGDQfy7gjzBOz1m02zGzvI2ejEMAAAO11H5R+moB7y39QpcwxSrO+jhJG kw1gz509psejfYYp7a0XMHAGgY+ttK3o6BdgQsekaR0OOjBELGwKDhsxTL31D2ub 1H+Rzn+F/T5FXwcM4ug9xkw2FndkdDbfAe33UP+E0sX+GwyLyVZt3Is6vjzWRORa 8f68oo/x9Hrx6wOurCmZoLvqy3sUhp86JoizFJ6X3px77w70TeveyOlPWFLgtJU6 M/e0ugxul/gtN+YqupJBSfDrXJpW8dY7TDtKc/LFhjEv2fj6uGU= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:57 2025 by rpki-client