$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EKt4SGiBMyByg8F3XQZQauFKRTo.roa File: EKt4SGiBMyByg8F3XQZQauFKRTo.roa (raw, json) Hash identifier: UoEYhKe6wD+lISivmBfhwCTLeoUiYoEDLFqtlnF8ZgI= Subject key identifier: 10:AB:78:48:68:81:33:20:72:83:C1:77:5D:06:50:6A:E1:4A:45:3A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 338E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EKt4SGiBMyByg8F3XQZQauFKRTo.roa Signing time: Mon 10 Feb 2025 13:51:32 +0000 ROA not before: Mon 10 Feb 2025 13:51:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13198 (0x338e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=10AB7848688133207283C1775D06506AE14A453A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0d:6c:c7:f7:c7:6a:e6:6f:91:d2:67:c8:a0: 01:2f:5d:fe:35:48:ff:4e:b3:99:98:e7:83:4c:35: 8a:7b:d2:6d:6e:ff:34:3d:b7:1b:f0:6a:b9:f4:d7: 0c:96:94:06:92:8b:52:f8:b6:43:7c:88:a3:a0:c3: b1:fb:eb:3c:32:f8:ab:3e:b7:b2:8b:bc:43:24:df: 5b:b3:77:9b:8d:72:88:9d:2b:80:66:83:16:21:05: db:6a:84:59:63:85:e5:d6:25:74:d9:a2:f7:aa:85: 30:e4:8f:7d:b0:c3:ab:81:24:f0:dd:be:66:5d:4c: 44:6a:ed:b1:fa:9f:d1:7e:6d:bb:f7:1e:e0:f4:3a: 40:19:52:e7:68:74:63:00:c4:89:7d:c6:31:1b:f0: 29:28:23:36:77:9f:ca:1f:41:b5:4b:88:3d:c8:ba: 1a:f5:b6:3e:53:4d:09:c6:69:f2:c6:a7:64:a9:42: a1:1b:d4:5a:80:92:6d:0a:5b:b0:1c:3d:55:6f:c5: 40:d9:91:a8:80:f5:20:d6:e5:7f:ac:14:a3:ba:01: f8:ab:6a:16:3b:ff:05:9f:f3:d2:1f:47:3a:b5:16: 14:1b:58:e6:6f:e6:17:9b:10:f2:03:c4:5d:33:4f: cf:4c:71:0b:96:ac:a0:6e:92:5f:51:ec:5a:04:c3: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:78:48:68:81:33:20:72:83:C1:77:5D:06:50:6A:E1:4A:45:3A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EKt4SGiBMyByg8F3XQZQauFKRTo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.40.0/22 Signature Algorithm: sha256WithRSAEncryption 35:91:c3:69:57:29:b9:f0:c1:38:d5:1c:56:1e:0a:52:94:fc: 29:85:7d:d2:91:c5:20:8b:6e:25:37:82:6e:8e:aa:8c:6d:bf: d2:f6:73:95:92:10:a4:17:f3:ba:b3:a1:7a:ec:a3:b5:f3:da: fc:e2:ca:37:d3:72:fc:4b:00:01:ba:04:d9:84:62:64:2e:55: 38:8d:2c:58:13:e8:32:07:83:b3:62:f8:c9:b1:8b:d7:17:31: 04:60:f3:aa:e7:92:b9:37:e6:8b:b4:62:ae:ff:3a:c9:fa:54: ed:4d:e7:df:f1:35:09:b7:38:af:60:a7:50:c7:87:d8:32:da: b9:ab:a4:5a:21:7f:66:81:98:67:b7:c8:44:b5:37:7d:24:be: 67:98:70:e5:4b:24:47:7d:20:40:5b:4e:3f:cf:d5:38:1e:1c: 14:8c:32:2c:9a:b2:e1:5d:3b:f2:a1:a4:6a:c9:42:90:29:43: 59:51:c6:e3:16:64:63:09:69:68:b9:12:01:75:11:ef:01:1b: 26:e3:02:52:21:03:1d:27:77:43:e4:c7:db:03:c3:b5:d3:64: 47:99:87:17:16:2b:74:d8:07:20:12:4b:e1:96:f1:fc:c3:94: 35:b5:66:21:00:70:9e:42:df:4c:e9:97:9a:71:12:d0:4c:7f: 3c:db:c4:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEwQUI3ODQ4Njg4MTMz MjA3MjgzQzE3NzVEMDY1MDZBRTE0QTQ1M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcDWzH98dq5m+R0mfIoAEvXf41SP9Os5mY54NMNYp70m1u/zQ9 txvwarn01wyWlAaSi1L4tkN8iKOgw7H76zwy+Ks+t7KLvEMk31uzd5uNcoidK4Bm gxYhBdtqhFljheXWJXTZoveqhTDkj32ww6uBJPDdvmZdTERq7bH6n9F+bbv3HuD0 OkAZUudodGMAxIl9xjEb8CkoIzZ3n8ofQbVLiD3Iuhr1tj5TTQnGafLGp2SpQqEb 1FqAkm0KW7AcPVVvxUDZkaiA9SDW5X+sFKO6AfirahY7/wWf89IfRzq1FhQbWOZv 5hebEPIDxF0zT89McQuWrKBukl9R7FoEw+8/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEKt4SGiBMyByg8F3XQZQauFKRTowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VLdDRTR2lCTXlCeWc4RjNY UVpRYXVGS1JUby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ASgwDQYJKoZIhvcNAQELBQADggEBADWRw2lXKbnwwTjVHFYeClKU/CmFfdKRxSCL biU3gm6Oqoxtv9L2c5WSEKQX87qzoXrso7Xz2vziyjfTcvxLAAG6BNmEYmQuVTiN LFgT6DIHg7Ni+Mmxi9cXMQRg86rnkrk35ou0Yq7/Osn6VO1N59/xNQm3OK9gp1DH h9gy2rmrpFohf2aBmGe3yES1N30kvmeYcOVLJEd9IEBbTj/P1TgeHBSMMiyasuFd O/KhpGrJQpApQ1lRxuMWZGMJaWi5EgF1Ee8BGybjAlIhAx0nd0Pkx9sDw7XTZEeZ hxcWK3TYByASS+GW8fzDlDW1ZiEAcJ5C30zpl5pxEtBMfzzbxA4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:47 2025 by rpki-client on console.sobornost.net