$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0MZD9BCSRZxnni8FaVNgnedJA1c.roa File: 0MZD9BCSRZxnni8FaVNgnedJA1c.roa (raw, json) Hash identifier: O43Ywtn4sIbd2mkO3Vfbp6yukpxaINcX8Y6N4Ne7Rck= Subject key identifier: D0:C6:43:F4:10:92:45:9C:67:9E:2F:05:69:53:60:9D:E7:49:03:57 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3607 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0MZD9BCSRZxnni8FaVNgnedJA1c.roa Signing time: Mon 10 Feb 2025 13:53:55 +0000 ROA not before: Mon 10 Feb 2025 13:53:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13831 (0x3607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D0C643F41092459C679E2F056953609DE7490357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:db:7c:a3:6c:16:e5:21:16:8e:84:f7:c4: 4d:be:98:98:18:d5:48:05:e7:eb:75:b6:ce:7e:67: e4:da:b2:b5:97:10:76:e3:de:0d:fd:60:ef:43:6a: 36:02:03:dc:e0:45:09:60:3b:a8:6a:9e:2b:da:9a: fe:98:bc:48:92:bb:0d:68:6d:93:45:e2:91:df:1a: ff:24:3b:6a:f9:c3:ce:a9:ef:7e:97:08:04:0d:9d: 8a:86:68:ad:58:29:38:6c:89:ad:87:a1:9d:7e:77: b0:03:78:5e:51:87:d3:5a:aa:b5:95:42:fa:89:1b: b8:2d:93:14:eb:b8:3c:9c:9e:ee:b3:eb:a7:a8:48: 4b:b9:71:4e:48:8d:b7:95:8e:53:0f:20:5d:5e:15: fd:1b:5d:07:00:b8:8a:e2:9f:84:ca:fc:07:67:2d: 60:af:18:d8:fe:c2:2d:76:b2:cd:7e:0e:12:7b:b6: 03:64:a0:38:c1:24:ad:3a:29:6a:1e:ce:2e:8e:3f: fa:c3:15:8c:46:3f:2b:7a:89:13:6a:5f:39:a6:26: cf:5e:c7:4e:d1:8c:f6:56:cf:11:99:1d:ea:82:4e: 3f:00:59:f2:ed:46:25:b3:05:96:84:42:8a:6d:a6: f2:33:97:e5:d4:f1:30:c5:59:45:72:25:bb:f7:95: 67:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C6:43:F4:10:92:45:9C:67:9E:2F:05:69:53:60:9D:E7:49:03:57 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0MZD9BCSRZxnni8FaVNgnedJA1c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.131.0/24 Signature Algorithm: sha256WithRSAEncryption 85:d8:f9:b9:f6:8b:0a:aa:69:81:6f:8f:fe:eb:ba:99:1a:8a: a4:a3:64:1d:95:ae:ef:38:24:4f:f5:94:f3:ea:c9:8a:4a:54: bd:e4:d1:79:a8:db:62:42:9c:f1:23:5f:82:03:71:6b:a8:d6: 9b:b4:93:ca:70:9a:1f:76:99:b3:02:a8:a6:64:d2:32:16:d1: a8:77:f4:7a:4c:6e:25:dd:50:35:54:f6:7c:49:f2:95:62:0d: 9b:48:b5:5d:d9:37:f0:31:52:dd:d5:a3:a1:79:68:33:4e:3e: a6:6c:27:05:6c:2d:f7:27:16:13:5d:17:dc:73:f6:ea:f9:15: 4a:bd:e2:9f:ea:03:6e:3a:ab:dc:4c:56:73:fd:a9:ed:8a:ce: ad:65:b3:9b:b6:17:70:50:84:6e:f4:05:78:3b:e5:86:0d:13: 09:23:7b:65:b3:a8:27:18:66:93:f2:e6:d9:63:dc:1d:e1:96: 76:2b:1d:47:cd:91:6a:9b:e1:8b:b6:e8:ef:96:90:59:6d:33: 6b:ed:48:ac:8b:4f:1d:a3:19:a2:38:9e:3c:92:62:52:11:f1: 31:36:97:5f:78:ed:43:ae:89:98:47:cb:d1:96:67:b9:fb:59: bf:52:b5:02:1f:d1:de:af:a9:db:ca:ce:4b:22:9d:6d:ec:75: 06:c5:4a:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNgcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQwQzY0M0Y0MTA5MjQ1 OUM2NzlFMkYwNTY5NTM2MDlERTc0OTAzNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Ddt8o2wW5SEWjoT3xE2+mJgY1UgF5+t1ts5+Z+TasrWXEHbj 3g39YO9DajYCA9zgRQlgO6hqnivamv6YvEiSuw1obZNF4pHfGv8kO2r5w86p736X CAQNnYqGaK1YKThsia2HoZ1+d7ADeF5Rh9NaqrWVQvqJG7gtkxTruDycnu6z66eo SEu5cU5IjbeVjlMPIF1eFf0bXQcAuIrin4TK/AdnLWCvGNj+wi12ss1+DhJ7tgNk oDjBJK06KWoezi6OP/rDFYxGPyt6iRNqXzmmJs9ex07RjPZWzxGZHeqCTj8AWfLt RiWzBZaEQoptpvIzl+XU8TDFWUVyJbv3lWcpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0MZD9BCSRZxnni8FaVNgnedJA1cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBNWkQ5QkNTUlp4bm5pOEZh Vk5nbmVkSkExYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYMwDQYJKoZIhvcNAQELBQADggEBAIXY+bn2iwqqaYFvj/7rupkaiqSjZB2Vru84 JE/1lPPqyYpKVL3k0Xmo22JCnPEjX4IDcWuo1pu0k8pwmh92mbMCqKZk0jIW0ah3 9HpMbiXdUDVU9nxJ8pViDZtItV3ZN/AxUt3Vo6F5aDNOPqZsJwVsLfcnFhNdF9xz 9ur5FUq94p/qA246q9xMVnP9qe2Kzq1ls5u2F3BQhG70BXg75YYNEwkje2WzqCcY ZpPy5tlj3B3hlnYrHUfNkWqb4Yu26O+WkFltM2vtSKyLTx2jGaI4njySYlIR8TE2 l1947UOuiZhHy9GWZ7n7Wb9StQIf0d6vqdvKzksinW3sdQbFStU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:45 2025 by rpki-client on console.sobornost.net