$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tHmXrWBhrArf5dshiVyiRck4fyo.roa File: tHmXrWBhrArf5dshiVyiRck4fyo.roa (raw, json) Hash identifier: RGjpI3FCEvKrWKpFTli+NX511394F/1ehmg9Xy0Qx/g= Subject key identifier: B4:79:97:AD:60:61:AC:0A:DF:E5:DB:21:89:5C:A2:45:C9:38:7F:2A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35BC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tHmXrWBhrArf5dshiVyiRck4fyo.roa Signing time: Mon 10 Feb 2025 13:53:38 +0000 ROA not before: Mon 10 Feb 2025 13:53:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13756 (0x35bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B47997AD6061AC0ADFE5DB21895CA245C9387F2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:68:dc:76:19:bc:03:d1:8e:bd:71:8b:ac:7c: ca:fd:39:ea:59:cc:cc:c6:55:39:99:96:e3:6e:0a: aa:f7:2b:d4:d3:57:41:df:cf:4c:ed:44:53:1f:03: 6f:20:26:b8:8e:70:94:28:cd:55:44:56:00:b3:2b: 1c:a8:c9:cb:63:6c:f5:2a:7e:0b:7e:5f:d2:77:9b: 97:25:b9:a4:5b:db:d4:e4:00:45:ee:27:f1:45:56: 2a:f2:72:ad:da:78:79:fb:3a:48:38:ff:f3:70:53: 8f:d4:c3:16:a5:ad:d8:13:d4:de:20:83:08:3a:b9: 8a:3c:4a:3e:d3:3c:26:18:37:97:6f:14:ea:d7:e3: d3:02:4c:c1:10:3b:fd:56:2c:41:4e:30:32:98:8b: be:74:b4:0a:6f:4c:72:79:42:d5:6a:f9:90:60:23: 7e:9b:ba:4f:2c:d2:39:32:a1:7e:ec:f0:bb:50:ad: dd:9b:a6:d8:74:7e:e8:3b:dc:47:66:1b:98:35:5d: 5d:85:97:9f:2a:2e:23:de:4c:5e:ca:72:b0:68:13: ec:ad:10:38:f9:11:7f:c0:76:da:0c:fb:94:56:8f: 07:34:bf:dc:22:9e:ee:62:26:c5:62:42:ec:5c:ff: 1e:19:d7:af:1c:7d:ef:4f:91:f3:86:55:c3:a3:34: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:79:97:AD:60:61:AC:0A:DF:E5:DB:21:89:5C:A2:45:C9:38:7F:2A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tHmXrWBhrArf5dshiVyiRck4fyo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.164.0/24 Signature Algorithm: sha256WithRSAEncryption 25:53:f0:20:14:63:52:af:07:9f:1c:b1:ec:04:6c:5f:e6:11: 17:ff:c2:6b:5b:bd:85:1b:8a:90:2c:eb:2d:ec:59:20:ea:16: 8d:a1:61:c5:e3:a8:92:a8:cd:ed:c0:23:4e:7b:72:71:03:60: da:91:cd:b3:df:da:7f:33:22:d3:d2:40:dc:7e:df:af:79:45: 49:fb:5a:20:4c:4a:28:4e:dc:78:ec:af:46:16:31:e7:13:8c: 0d:82:2d:4e:fc:b1:b1:0a:78:17:e2:04:e5:15:27:ab:84:ab: 53:a1:13:03:69:2c:76:99:7b:79:9f:bc:13:59:b6:78:45:cf: 43:e5:93:5d:f1:a7:8c:d6:b3:63:e7:dc:1e:c6:db:0f:62:9e: 3b:17:d9:d3:89:7b:d7:a3:b0:45:6a:55:bd:9f:85:0a:38:88: b1:2a:ae:33:8e:40:2a:63:66:84:c5:d4:e1:ed:4c:38:66:86: e2:83:c1:db:c1:c6:e9:e3:47:3f:34:93:82:3e:5a:b1:d1:6d: ab:96:fc:c5:51:e4:d4:12:3c:a9:19:60:18:be:8c:1b:05:48: 12:e2:f0:b7:b6:c1:2f:a5:4e:ec:0f:66:a7:0f:c5:1e:1b:9a: 8d:af:8d:f2:24:be:42:66:28:7e:72:19:6d:55:da:3b:29:b2: 7a:91:53:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0Nzk5N0FENjA2MUFD MEFERkU1REIyMTg5NUNBMjQ1QzkzODdGMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDraNx2GbwD0Y69cYusfMr9OepZzMzGVTmZluNuCqr3K9TTV0Hf z0ztRFMfA28gJriOcJQozVVEVgCzKxyoyctjbPUqfgt+X9J3m5cluaRb29TkAEXu J/FFVirycq3aeHn7Okg4//NwU4/UwxalrdgT1N4ggwg6uYo8Sj7TPCYYN5dvFOrX 49MCTMEQO/1WLEFOMDKYi750tApvTHJ5QtVq+ZBgI36buk8s0jkyoX7s8LtQrd2b pth0fug73EdmG5g1XV2Fl58qLiPeTF7KcrBoE+ytEDj5EX/AdtoM+5RWjwc0v9wi nu5iJsViQuxc/x4Z168cfe9PkfOGVcOjNI8LAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtHmXrWBhrArf5dshiVyiRck4fyowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RIbVhyV0JockFyZjVkc2hp VnlpUmNrNGZ5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AaQwDQYJKoZIhvcNAQELBQADggEBACVT8CAUY1KvB58csewEbF/mERf/wmtbvYUb ipAs6y3sWSDqFo2hYcXjqJKoze3AI057cnEDYNqRzbPf2n8zItPSQNx+3695RUn7 WiBMSihO3Hjsr0YWMecTjA2CLU78sbEKeBfiBOUVJ6uEq1OhEwNpLHaZe3mfvBNZ tnhFz0Plk13xp4zWs2Pn3B7G2w9injsX2dOJe9ejsEVqVb2fhQo4iLEqrjOOQCpj ZoTF1OHtTDhmhuKDwdvBxunjRz80k4I+WrHRbauW/MVR5NQSPKkZYBi+jBsFSBLi 8Le2wS+lTuwPZqcPxR4bmo2vjfIkvkJmKH5yGW1V2jspsnqRU9Y= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:05 2025 by rpki-client