$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yj1SX6CCCx_gvUGBA_HhZO2Nj6w.roa File: yj1SX6CCCx_gvUGBA_HhZO2Nj6w.roa (raw, json) Hash identifier: OTvf9Ii38uY2cF+2HlcJzGEVUMiIcuFgDINM1E/GpWw= Subject key identifier: CA:3D:52:5F:A0:82:0B:1F:E0:BD:41:81:03:F1:E1:64:ED:8D:8F:AC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3688 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yj1SX6CCCx_gvUGBA_HhZO2Nj6w.roa Signing time: Mon 10 Feb 2025 13:54:24 +0000 ROA not before: Mon 10 Feb 2025 13:54:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13960 (0x3688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CA3D525FA0820B1FE0BD418103F1E164ED8D8FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:48:a0:b9:bb:f3:ab:b3:df:c6:aa:df:8a: d5:be:9b:67:7f:0c:11:10:6e:0c:37:f3:23:08:a7: 89:c9:70:9b:c5:76:27:d3:86:13:bb:be:62:e0:42: 78:0e:ab:ee:26:e3:6b:04:4e:5b:ea:7f:72:aa:d4: e8:dd:83:48:a3:90:a1:58:fb:5e:01:0e:29:1f:29: dc:50:92:fb:42:2d:ff:38:ee:ae:96:3b:a5:ab:9e: f1:6e:7c:fb:f1:6d:21:d7:f0:fe:56:8c:a1:b7:66: 90:bc:28:b6:25:14:0a:f8:6b:8a:be:03:79:7b:a1: 60:7c:e8:88:9c:19:37:ce:89:33:be:cd:df:cf:81: a1:85:4f:c2:7f:c3:ad:e9:c7:db:59:5c:a3:46:f9: a0:1b:14:63:f1:d0:82:fd:6b:0f:de:c4:2b:3f:bc: e6:da:63:46:14:c0:ae:d4:04:c1:f4:75:b2:a9:74: 61:d5:8f:40:ac:4f:77:03:4b:46:c8:58:a4:79:19: 51:be:c0:c7:4f:a3:64:68:46:a1:e8:08:4d:1f:e9: b8:ab:f0:27:a8:45:51:65:90:a4:42:37:84:c7:a2: 78:9a:23:de:c1:44:ab:33:77:c1:52:df:92:f8:ac: 4d:5d:53:14:be:97:dc:8e:6d:1f:09:37:5e:e1:c9: d8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3D:52:5F:A0:82:0B:1F:E0:BD:41:81:03:F1:E1:64:ED:8D:8F:AC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yj1SX6CCCx_gvUGBA_HhZO2Nj6w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.240.0/22 Signature Algorithm: sha256WithRSAEncryption 69:50:03:0f:5a:6a:20:f7:44:f0:08:cd:e8:99:99:93:dc:c1: e4:57:64:70:e5:14:f6:79:1d:48:40:6b:66:46:67:2f:d1:9c: 2a:68:f8:32:22:01:bf:3b:0d:b5:4b:e9:9a:f2:fe:d7:74:0a: 05:8f:f5:83:72:24:ec:a2:a9:a5:48:01:44:1d:96:02:77:a8: 10:27:c5:de:51:20:a9:b8:7b:66:5f:19:1c:9d:bf:bb:72:b6: 23:d0:d9:90:d0:1a:2e:f1:e0:4b:62:c5:70:36:7d:1b:90:a5: d5:7f:cf:24:6a:82:35:46:32:cb:27:45:79:11:e1:45:22:49: 8a:dc:92:45:11:25:e0:bf:b3:55:28:39:54:68:85:3e:80:ab: 33:df:a7:b4:2e:a6:ed:ba:2c:b2:60:e3:03:f1:8f:e2:c4:28: 88:25:e8:48:75:72:dc:44:e3:c8:71:49:2e:73:cc:c7:a4:de: 6d:95:99:9b:ef:e5:52:f6:3a:b3:f0:a5:a0:d8:b3:88:13:19: 1d:24:01:0e:05:9d:33:b7:b3:92:22:18:e1:ab:11:cf:fe:b3: ff:95:09:54:6f:d7:a9:2e:04:0a:16:3b:45:85:ee:24:1d:33: 5a:a3:a3:a8:03:c8:3b:8c:a8:3e:38:3d:6b:5f:45:cf:0c:e7: 4e:31:c5:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENBM0Q1MjVGQTA4MjBC MUZFMEJENDE4MTAzRjFFMTY0RUQ4RDhGQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFJEigubvzq7PfxqrfitW+m2d/DBEQbgw38yMIp4nJcJvFdifT hhO7vmLgQngOq+4m42sETlvqf3Kq1Ojdg0ijkKFY+14BDikfKdxQkvtCLf847q6W O6WrnvFufPvxbSHX8P5WjKG3ZpC8KLYlFAr4a4q+A3l7oWB86IicGTfOiTO+zd/P gaGFT8J/w63px9tZXKNG+aAbFGPx0IL9aw/exCs/vObaY0YUwK7UBMH0dbKpdGHV j0CsT3cDS0bIWKR5GVG+wMdPo2RoRqHoCE0f6bir8CeoRVFlkKRCN4THoniaI97B RKszd8FS35L4rE1dUxS+l9yObR8JN17hydh1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyj1SX6CCCx/gvUGBA/HhZO2Nj6wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lqMVNYNkNDQ3hfZ3ZVR0JB X0hoWk8yTmo2dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfAwDQYJKoZIhvcNAQELBQADggEBAGlQAw9aaiD3RPAIzeiZmZPcweRXZHDlFPZ5 HUhAa2ZGZy/RnCpo+DIiAb87DbVL6Zry/td0CgWP9YNyJOyiqaVIAUQdlgJ3qBAn xd5RIKm4e2ZfGRydv7tytiPQ2ZDQGi7x4EtixXA2fRuQpdV/zyRqgjVGMssnRXkR 4UUiSYrckkURJeC/s1UoOVRohT6AqzPfp7Qupu26LLJg4wPxj+LEKIgl6Eh1ctxE 48hxSS5zzMek3m2VmZvv5VL2OrPwpaDYs4gTGR0kAQ4FnTO3s5IiGOGrEc/+s/+V CVRv16kuBAoWO0WF7iQdM1qjo6gDyDuMqD44PWtfRc8M504xxa0= -----END CERTIFICATE-----Generated at Wed Feb 19 21:55:59 2025 by rpki-client