$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AKf8K07tPOW8I84PCn5IAEbh1cs.roa File: AKf8K07tPOW8I84PCn5IAEbh1cs.roa (raw, json) Hash identifier: CgS0cOpK6pVKLObIolGjyMbIqfRVFC2enmV25KjJLNk= Subject key identifier: 00:A7:FC:2B:4E:ED:3C:E5:BC:23:CE:0F:0A:7E:48:00:46:E1:D5:CB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 35A1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AKf8K07tPOW8I84PCn5IAEbh1cs.roa Signing time: Mon 10 Feb 2025 13:53:32 +0000 ROA not before: Mon 10 Feb 2025 13:53:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13729 (0x35a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=00A7FC2B4EED3CE5BC23CE0F0A7E480046E1D5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:a1:0c:55:ab:cc:2f:30:cc:e6:a0:bd:d4: 3f:93:7d:4e:35:be:70:7b:59:ca:0c:a7:77:8f:bd: a0:53:86:88:10:3c:9b:4f:64:06:c1:3e:4b:1c:85: cb:6d:d3:23:b1:3a:c9:91:07:b2:70:1a:4a:c3:12: 6c:60:26:c7:ce:3b:da:11:a5:af:95:9e:48:2b:1a: c3:50:a7:6c:0e:01:eb:51:da:ca:6f:4b:07:5e:9b: 3f:d7:de:0c:b9:8a:5e:4b:25:92:6e:09:7a:e8:83: 59:c4:94:e9:a3:ea:16:22:db:57:16:e6:03:d9:ab: 51:64:ef:a7:67:2e:55:7f:fe:45:75:75:89:75:77: e8:02:06:65:27:b5:9f:b1:bb:0c:65:b5:73:c6:27: d5:b6:45:a0:b4:7c:4c:d0:20:4d:af:eb:73:35:34: 5e:dd:65:8a:a5:0c:45:1f:ad:16:6a:8d:da:69:35: 9c:51:65:2f:f0:73:fa:a1:4e:26:b0:f3:cb:18:2f: 8c:f8:2a:11:cd:85:f3:9e:aa:85:0c:55:df:23:08: ad:a0:e0:d8:e2:81:47:78:b1:7a:98:90:0a:2a:14: e6:74:d7:7b:ec:ac:71:29:1c:f8:98:44:b1:0c:35: 22:9d:06:66:65:ee:2e:4f:45:30:28:a1:1f:8d:ab: 6b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A7:FC:2B:4E:ED:3C:E5:BC:23:CE:0F:0A:7E:48:00:46:E1:D5:CB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AKf8K07tPOW8I84PCn5IAEbh1cs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.36.0/22 Signature Algorithm: sha256WithRSAEncryption 16:a8:53:2b:28:d0:df:29:8c:84:82:7c:fa:fd:74:e4:0d:28: 2b:16:c2:2b:03:5d:7c:15:7f:fa:75:b1:28:de:7d:bd:de:a9: 8a:5c:4d:a4:39:3c:75:d0:c5:86:85:98:3d:be:63:22:91:51: 9e:eb:c5:0d:89:1d:22:ac:35:97:eb:08:98:ee:49:02:3d:04: 8c:5a:3b:ef:07:74:6c:20:2c:bf:fd:67:f0:43:27:32:97:e0: b0:d1:49:97:47:d4:ad:7c:3d:86:07:2d:9e:6b:d6:77:07:82: 58:72:85:2a:3f:d2:29:19:18:ec:b1:72:25:4e:c2:f8:f1:40: 4e:06:1d:57:4d:8e:1b:25:dd:3c:31:c0:b8:3d:03:76:94:1c: b3:15:fc:48:68:56:03:dc:de:db:ce:ee:77:0c:7f:c3:6c:84: b8:bd:70:b0:bb:fb:6c:51:cd:a2:50:6b:b0:09:84:d1:61:7f: 0b:0e:45:52:ff:73:db:16:7e:d2:67:4b:c2:e5:a4:23:16:5f: 2a:b3:a0:4b:ef:06:90:e5:ea:aa:03:1e:39:57:09:25:09:c7: 85:18:94:ea:3f:7d:7e:ae:08:03:35:23:aa:56:59:58:93:1f: 89:f5:81:d6:c0:4e:2d:01:f0:d7:64:04:0f:65:2d:bc:f5:b6: fa:d8:7b:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAwQTdGQzJCNEVFRDND RTVCQzIzQ0UwRjBBN0U0ODAwNDZFMUQ1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFCaEMVavMLzDM5qC91D+TfU41vnB7WcoMp3ePvaBThogQPJtP ZAbBPkschctt0yOxOsmRB7JwGkrDEmxgJsfOO9oRpa+VnkgrGsNQp2wOAetR2spv Swdemz/X3gy5il5LJZJuCXrog1nElOmj6hYi21cW5gPZq1Fk76dnLlV//kV1dYl1 d+gCBmUntZ+xuwxltXPGJ9W2RaC0fEzQIE2v63M1NF7dZYqlDEUfrRZqjdppNZxR ZS/wc/qhTiaw88sYL4z4KhHNhfOeqoUMVd8jCK2g4NjigUd4sXqYkAoqFOZ013vs rHEpHPiYRLEMNSKdBmZl7i5PRTAooR+Nq2ttAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAKf8K07tPOW8I84PCn5IAEbh1cswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FLZjhLMDd0UE9XOEk4NFBD bjVJQUViaDFjcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ASQwDQYJKoZIhvcNAQELBQADggEBABaoUyso0N8pjISCfPr9dOQNKCsWwisDXXwV f/p1sSjefb3eqYpcTaQ5PHXQxYaFmD2+YyKRUZ7rxQ2JHSKsNZfrCJjuSQI9BIxa O+8HdGwgLL/9Z/BDJzKX4LDRSZdH1K18PYYHLZ5r1ncHglhyhSo/0ikZGOyxciVO wvjxQE4GHVdNjhsl3TwxwLg9A3aUHLMV/EhoVgPc3tvO7ncMf8NshLi9cLC7+2xR zaJQa7AJhNFhfwsORVL/c9sWftJnS8LlpCMWXyqzoEvvBpDl6qoDHjlXCSUJx4UY lOo/fX6uCAM1I6pWWViTH4n1gdbATi0B8NdkBA9lLbz1tvrYeyg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:46 2025 by rpki-client on console.sobornost.net