$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-aHfyu88qy_TvqN-lN_S_9nLbLk.roa File: -aHfyu88qy_TvqN-lN_S_9nLbLk.roa (raw, json) Hash identifier: E/Wy0rKGRBmwJv/mYkR+QDU8bvyaDIGJf+NomufhpHc= Subject key identifier: F9:A1:DF:CA:EF:3C:AB:2F:D3:BE:A3:7E:94:DF:D2:FF:D9:CB:6C:B9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35D7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-aHfyu88qy_TvqN-lN_S_9nLbLk.roa Signing time: Mon 10 Feb 2025 13:53:44 +0000 ROA not before: Mon 10 Feb 2025 13:53:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13783 (0x35d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F9A1DFCAEF3CAB2FD3BEA37E94DFD2FFD9CB6CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:a6:b0:ce:7b:88:77:ab:47:1f:15:1d:12: be:bc:65:30:f2:be:8a:5d:94:c3:43:e1:ca:1d:2c: 2f:71:bc:b8:54:f1:82:3d:c2:5b:a7:49:1e:b4:f2: d5:54:85:bd:a4:a2:71:06:6c:29:81:29:db:21:ee: 86:03:20:06:00:0b:ed:fe:ea:61:ee:db:c3:40:b8: 5c:7b:2e:79:e3:42:9d:5a:e9:cb:08:f0:df:f9:d1: 3a:b7:02:af:8f:3f:9f:8c:ce:af:4d:37:92:9b:dd: 61:6a:8c:40:d5:02:b7:6d:7f:0a:b5:8d:a8:87:eb: e0:c2:77:2a:e9:1f:b5:90:37:71:a7:4a:2a:10:9c: a8:54:20:48:a2:01:55:87:3f:fd:7e:ed:ab:68:8a: 33:e4:68:84:a2:17:e5:37:26:ea:b3:b8:c4:12:a9: 26:17:4d:40:db:cf:3d:74:65:5f:f8:8c:5e:57:fd: 52:29:f7:17:61:5d:ee:b4:4f:27:91:78:b4:52:be: 9c:ac:07:88:f7:e0:fa:14:2b:24:c1:0f:e4:24:03: 28:1c:f9:ec:2d:e4:de:bb:0a:c2:57:70:0d:fb:87: 70:6a:4a:7a:12:38:cd:c2:b0:b1:74:36:44:9c:43: 6d:83:a5:ba:27:40:a7:fc:8e:3f:c3:e1:8d:42:70: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A1:DF:CA:EF:3C:AB:2F:D3:BE:A3:7E:94:DF:D2:FF:D9:CB:6C:B9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-aHfyu88qy_TvqN-lN_S_9nLbLk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.12.0/24 Signature Algorithm: sha256WithRSAEncryption b9:93:15:63:61:b7:c3:d1:3f:66:1e:cc:f4:33:5f:4b:16:cc: 86:33:8c:c8:b8:87:e2:8a:78:b4:12:c6:81:ff:ce:b7:c4:a9: 79:85:99:c2:8a:0d:04:12:29:50:6d:60:9a:8c:6c:ac:07:c4: 83:b7:55:25:8c:db:e8:a7:d4:af:e5:a6:f7:0f:77:0b:05:35: ee:cf:52:35:cf:ad:42:cc:cc:a6:39:b0:ab:fb:61:27:d0:62: d8:ab:af:ef:a7:13:ff:b5:90:46:cf:d1:98:5f:8c:21:17:ba: be:06:32:ee:c7:93:6d:f7:34:0a:a4:85:fc:f9:9c:c0:29:5c: af:b7:ff:de:48:93:09:d9:8e:29:91:d8:18:f8:1a:54:13:87: 90:16:d8:9d:35:ab:cb:93:2a:a6:d3:5d:03:e4:93:35:2c:9a: 2e:8d:ba:87:1b:24:17:8b:d6:86:aa:9e:8d:41:05:0d:6d:4c: da:d1:18:c7:95:1a:8d:b4:ea:84:53:f5:19:26:03:7c:a9:69: be:f6:56:ed:50:76:92:bd:d3:3f:4b:b5:f9:13:df:b9:7d:dd: bf:f7:cd:78:0d:1a:ed:4c:c5:3f:71:39:cf:8d:2a:32:b1:80: b1:57:ce:de:fb:c2:fc:8e:fc:77:ae:6c:29:4c:31:16:b3:75: 62:30:75:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY5QTFERkNBRUYzQ0FC MkZEM0JFQTM3RTk0REZEMkZGRDlDQjZDQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB6KawznuId6tHHxUdEr68ZTDyvopdlMND4codLC9xvLhU8YI9 wlunSR608tVUhb2konEGbCmBKdsh7oYDIAYAC+3+6mHu28NAuFx7LnnjQp1a6csI 8N/50Tq3Aq+PP5+Mzq9NN5Kb3WFqjEDVArdtfwq1jaiH6+DCdyrpH7WQN3GnSioQ nKhUIEiiAVWHP/1+7atoijPkaISiF+U3JuqzuMQSqSYXTUDbzz10ZV/4jF5X/VIp 9xdhXe60TyeReLRSvpysB4j34PoUKyTBD+QkAygc+ewt5N67CsJXcA37h3BqSnoS OM3CsLF0NkScQ22DpbonQKf8jj/D4Y1CcIvnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+aHfyu88qy/TvqN+lN/S/9nLbLkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1hSGZ5dTg4cXlfVHZxTi1s Tl9TXzluTGJMay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AQwwDQYJKoZIhvcNAQELBQADggEBALmTFWNht8PRP2YezPQzX0sWzIYzjMi4h+KK eLQSxoH/zrfEqXmFmcKKDQQSKVBtYJqMbKwHxIO3VSWM2+in1K/lpvcPdwsFNe7P UjXPrULMzKY5sKv7YSfQYtirr++nE/+1kEbP0ZhfjCEXur4GMu7Hk233NAqkhfz5 nMApXK+3/95IkwnZjimR2Bj4GlQTh5AW2J01q8uTKqbTXQPkkzUsmi6NuocbJBeL 1oaqno1BBQ1tTNrRGMeVGo206oRT9RkmA3ypab72Vu1QdpK90z9LtfkT37l93b/3 zXgNGu1MxT9xOc+NKjKxgLFXzt77wvyO/HeubClMMRazdWIwdWk= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:45 2025 by rpki-client on console.sobornost.net