$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xVv7N6H94lgeWwknyUW-Q1WH2l4.roa File: xVv7N6H94lgeWwknyUW-Q1WH2l4.roa (raw, json) Hash identifier: 28+RLCEo1YgNzbgGJX4BDIRXj1U/A4zWd6tPnd2DZ68= Subject key identifier: C5:5B:FB:37:A1:FD:E2:58:1E:5B:09:27:C9:45:BE:43:55:87:DA:5E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33D9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xVv7N6H94lgeWwknyUW-Q1WH2l4.roa Signing time: Mon 10 Feb 2025 13:51:50 +0000 ROA not before: Mon 10 Feb 2025 13:51:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13273 (0x33d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C55BFB37A1FDE2581E5B0927C945BE435587DA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:d4:83:0b:fe:79:42:c3:88:73:5c:3b:3e: 01:85:ec:c3:0c:46:ed:56:66:37:2c:82:62:02:3f: d6:4b:ee:f0:5f:b6:2b:93:5b:cd:a5:b4:2e:3b:49: 5d:08:ee:09:bb:a1:4e:6d:7a:8a:8c:ea:b4:0c:ca: 06:6c:13:50:ff:69:5b:2a:51:70:c4:bf:35:3c:de: a8:e0:92:9c:f4:71:99:42:d2:cd:4a:29:ae:1d:c7: 2d:02:df:aa:d5:c0:72:2d:90:f2:6f:60:bf:44:c2: e6:c8:87:e1:4f:d0:5d:08:1a:1e:59:81:f4:d5:d4: 7f:04:92:b8:b6:37:82:20:62:a9:b5:fb:a2:90:6f: 2d:21:52:1d:d5:02:e7:54:5f:71:f0:8d:a4:d2:aa: 36:56:14:b7:4b:a1:1b:76:64:42:af:91:c5:06:a8: 1e:a9:d1:e1:08:bc:f9:c2:f7:fd:a5:e6:7e:20:45: 72:35:0a:64:21:db:19:dc:69:2c:5a:63:8b:9a:12: 27:15:f8:31:74:a3:53:f3:13:3e:34:ac:24:af:d1: c4:9e:2b:c7:81:87:97:48:fc:ec:e2:94:8a:3a:12: 72:03:d2:bb:ec:e5:5e:c4:93:65:80:df:96:89:65: 15:78:23:d4:7b:78:4f:d0:ee:61:41:98:68:36:32: 94:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5B:FB:37:A1:FD:E2:58:1E:5B:09:27:C9:45:BE:43:55:87:DA:5E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xVv7N6H94lgeWwknyUW-Q1WH2l4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.252.0/22 Signature Algorithm: sha256WithRSAEncryption 81:5a:46:c7:1a:b2:d3:ce:02:35:87:65:a3:10:37:b1:71:e6: 7e:9d:85:af:24:83:71:20:b9:24:bc:31:68:1d:be:c6:1d:ad: 3e:5c:cf:29:32:4c:16:4b:91:3f:86:bc:2c:49:ff:15:dd:ce: 44:55:72:c2:36:2f:73:8b:41:0e:15:08:61:64:83:b9:f8:97: 10:ef:a6:2f:1f:6f:f6:7d:0c:e9:12:35:df:bf:55:7a:22:fb: 00:5d:f9:7c:61:4f:65:51:6e:8e:c2:e0:22:e1:ae:5c:7a:1b: 6c:f9:de:f4:da:d0:0f:2c:ee:60:56:fb:d0:6d:82:9f:0b:80: d9:8e:a8:52:10:17:b6:59:e3:df:65:ad:10:62:04:91:4e:13: 70:01:5a:4c:43:c7:2b:59:7c:b4:a7:be:ea:2e:e7:95:81:0c: 54:bb:7c:40:7e:89:3f:49:ac:ff:0c:37:ee:5b:f6:a6:64:c4: c9:ae:96:24:cd:8f:9a:93:f0:42:62:95:82:95:51:2d:c6:aa: 9f:76:16:f9:8d:14:2a:b4:b6:f4:5d:45:f5:02:04:90:c5:cd: de:cb:5d:a2:49:6b:2c:83:2f:24:69:c3:09:31:31:0e:76:fb: 24:20:fc:8b:d5:df:a5:a6:06:97:66:2c:9a:ae:ab:5f:51:90: a3:bb:3f:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM9kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1NUJGQjM3QTFGREUy NTgxRTVCMDkyN0M5NDVCRTQzNTU4N0RBNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCotNSDC/55QsOIc1w7PgGF7MMMRu1WZjcsgmICP9ZL7vBftiuT W82ltC47SV0I7gm7oU5teoqM6rQMygZsE1D/aVsqUXDEvzU83qjgkpz0cZlC0s1K Ka4dxy0C36rVwHItkPJvYL9EwubIh+FP0F0IGh5ZgfTV1H8Ekri2N4IgYqm1+6KQ by0hUh3VAudUX3HwjaTSqjZWFLdLoRt2ZEKvkcUGqB6p0eEIvPnC9/2l5n4gRXI1 CmQh2xncaSxaY4uaEicV+DF0o1PzEz40rCSv0cSeK8eBh5dI/OzilIo6EnID0rvs 5V7Ek2WA35aJZRV4I9R7eE/Q7mFBmGg2MpTLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxVv7N6H94lgeWwknyUW+Q1WH2l4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hWdjdONkg5NGxnZVd3a255 VVctUTFXSDJsNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfwwDQYJKoZIhvcNAQELBQADggEBAIFaRscastPOAjWHZaMQN7Fx5n6dha8kg3Eg uSS8MWgdvsYdrT5czykyTBZLkT+GvCxJ/xXdzkRVcsI2L3OLQQ4VCGFkg7n4lxDv pi8fb/Z9DOkSNd+/VXoi+wBd+XxhT2VRbo7C4CLhrlx6G2z53vTa0A8s7mBW+9Bt gp8LgNmOqFIQF7ZZ499lrRBiBJFOE3ABWkxDxytZfLSnvuou55WBDFS7fEB+iT9J rP8MN+5b9qZkxMmuliTNj5qT8EJilYKVUS3Gqp92FvmNFCq0tvRdRfUCBJDFzd7L XaJJayyDLyRpwwkxMQ52+yQg/IvV36WmBpdmLJquq19RkKO7P3A= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:28 2025 by rpki-client