$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t-IcXzkimkiKrYKnKfdVNcApdPM.roa File: t-IcXzkimkiKrYKnKfdVNcApdPM.roa (raw, json) Hash identifier: oNyUmOOrGvRiJHFjN37ElF5onKrSvG+UCAF7nVFWd1w= Subject key identifier: B7:E2:1C:5F:39:22:9A:48:8A:AD:82:A7:29:F7:55:35:C0:29:74:F3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36BE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t-IcXzkimkiKrYKnKfdVNcApdPM.roa Signing time: Mon 10 Feb 2025 13:54:38 +0000 ROA not before: Mon 10 Feb 2025 13:54:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14014 (0x36be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B7E21C5F39229A488AAD82A729F75535C02974F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:27:bc:b2:79:7c:08:6c:26:9a:4e:b4:5c: 75:fe:87:81:81:bb:15:a6:20:c4:da:f6:9c:dd:bd: 53:f6:54:9f:f2:28:d6:7f:ba:c5:3f:ed:98:d9:60: d0:af:12:d2:b4:1e:a0:32:ed:a9:7f:cb:66:e7:2c: 18:b2:2d:67:45:7b:a6:4b:e7:2f:c4:f9:98:ad:f1: 32:89:a9:92:af:d3:d8:64:ae:a2:5f:4e:00:e3:15: ed:e8:3b:b1:57:33:65:48:c0:b9:71:fb:61:ff:4e: 3a:53:45:f2:cf:07:1f:69:c1:d5:22:e8:a1:b2:55: 64:dc:a8:e3:51:81:d3:61:ad:25:1c:a4:43:18:c2: eb:5d:cd:ac:59:d2:29:79:b9:39:2c:93:15:70:c7: e1:64:6c:92:fc:68:b7:86:60:50:ba:11:57:41:7f: 01:83:d6:35:17:c9:65:b6:62:25:38:6f:d4:3c:7c: b7:7d:21:41:68:76:7e:a8:65:6b:a5:fc:76:9f:6b: 00:d6:a8:26:df:be:90:ca:f5:9b:7e:c3:e7:61:2c: 52:ef:e2:b4:2a:d0:15:a1:1a:46:5a:e3:f4:da:b3: 60:ef:33:d1:3b:0b:c2:04:08:ea:ba:77:61:2b:77: e2:02:e0:51:13:c0:70:fc:3f:75:bc:30:8e:6e:e6: d5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:1C:5F:39:22:9A:48:8A:AD:82:A7:29:F7:55:35:C0:29:74:F3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t-IcXzkimkiKrYKnKfdVNcApdPM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.104.0/22 Signature Algorithm: sha256WithRSAEncryption af:9b:c7:a0:55:73:ff:57:ce:66:87:ea:79:24:e4:b8:3e:ed: b2:ad:34:8b:86:20:9f:d6:e6:0e:23:be:51:89:0e:e7:aa:c9: 84:a3:84:88:36:43:ed:6d:74:5d:64:95:03:c0:d5:c3:06:49: a3:b6:69:b3:0c:a3:fe:40:85:e7:e3:6d:1b:69:98:6e:3f:3d: d8:1c:b1:e4:1b:62:d3:96:58:24:e0:bf:e6:ed:7c:ec:1c:90: 86:c2:cd:22:6f:6c:97:75:2f:88:80:6e:33:31:b0:4c:54:80: 37:e4:8d:a5:d5:63:c8:68:66:d3:7f:43:b9:4d:2a:47:ae:d5: 88:3d:09:a4:7f:2b:4e:1a:a9:a4:7d:ef:0d:71:43:ac:d0:cc: 9e:f2:0a:3c:cf:c7:bb:2f:54:f7:43:5c:01:6e:77:56:72:f7: ba:d2:43:d9:c7:b7:f2:bc:db:24:9a:f9:f1:22:83:a7:14:9a: 44:57:19:fa:68:d9:a3:ab:e7:47:7e:77:eb:30:8c:6d:63:25: c3:49:d0:8e:f4:87:57:1a:00:9f:31:51:ef:46:8f:a1:f4:67: a1:4f:50:8e:92:e2:5d:4a:8d:02:f3:33:f6:a6:8c:69:0e:82: 40:97:e2:bd:0d:85:e8:9b:30:46:e1:ee:2c:19:c0:7f:54:7c: bf:75:f7:f5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3RTIxQzVGMzkyMjlB NDg4QUFEODJBNzI5Rjc1NTM1QzAyOTc0RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+4ie8snl8CGwmmk60XHX+h4GBuxWmIMTa9pzdvVP2VJ/yKNZ/ usU/7ZjZYNCvEtK0HqAy7al/y2bnLBiyLWdFe6ZL5y/E+Zit8TKJqZKv09hkrqJf TgDjFe3oO7FXM2VIwLlx+2H/TjpTRfLPBx9pwdUi6KGyVWTcqONRgdNhrSUcpEMY wutdzaxZ0il5uTkskxVwx+FkbJL8aLeGYFC6EVdBfwGD1jUXyWW2YiU4b9Q8fLd9 IUFodn6oZWul/HafawDWqCbfvpDK9Zt+w+dhLFLv4rQq0BWhGkZa4/Tas2DvM9E7 C8IECOq6d2Erd+IC4FETwHD8P3W8MI5u5tUjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUt+IcXzkimkiKrYKnKfdVNcApdPMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3QtSWNYemtpbWtpS3JZS25L ZmRWTmNBcGRQTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AWgwDQYJKoZIhvcNAQELBQADggEBAK+bx6BVc/9XzmaH6nkk5Lg+7bKtNIuGIJ/W 5g4jvlGJDueqyYSjhIg2Q+1tdF1klQPA1cMGSaO2abMMo/5AhefjbRtpmG4/Pdgc seQbYtOWWCTgv+btfOwckIbCzSJvbJd1L4iAbjMxsExUgDfkjaXVY8hoZtN/Q7lN Kkeu1Yg9CaR/K04aqaR97w1xQ6zQzJ7yCjzPx7svVPdDXAFud1Zy97rSQ9nHt/K8 2ySa+fEig6cUmkRXGfpo2aOr50d+d+swjG1jJcNJ0I70h1caAJ8xUe9Gj6H0Z6FP UI6S4l1KjQLzM/amjGkOgkCX4r0NheibMEbh7iwZwH9UfL919/U= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:59 2025 by rpki-client