$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PYLsRiQmwYnUBaIMJ8b3ruQK5p0.roa File: PYLsRiQmwYnUBaIMJ8b3ruQK5p0.roa (raw, json) Hash identifier: ImRYPvf7ksz0YXPiy4nPo91qNNgkW5hDqgx69TJy7LA= Subject key identifier: 3D:82:EC:46:24:26:C1:89:D4:05:A2:0C:27:C6:F7:AE:E4:0A:E6:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3692 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PYLsRiQmwYnUBaIMJ8b3ruQK5p0.roa Signing time: Mon 10 Feb 2025 13:54:26 +0000 ROA not before: Mon 10 Feb 2025 13:54:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13970 (0x3692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3D82EC462426C189D405A20C27C6F7AEE40AE69D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:20:58:bc:15:57:0c:ab:74:43:d3:b2:27: a7:74:cd:c7:ce:3d:47:9e:75:8d:70:bd:25:f2:49: 3c:61:75:8d:77:65:2c:1a:59:95:12:7a:45:99:37: 08:5a:2f:99:eb:9a:c2:f3:6b:18:29:a7:51:96:49: a6:34:bc:64:eb:db:9a:50:60:b9:e5:6f:d0:be:0d: dd:7f:c8:99:82:4e:9e:67:46:cf:59:29:4b:5c:f2: a9:bb:3c:79:47:21:85:f3:b8:5b:73:2e:0a:28:b5: de:49:2f:84:38:57:bb:c1:85:d8:83:38:21:54:54: b8:8b:32:13:9f:c7:18:11:f9:c0:07:36:10:2d:4e: 66:ba:64:1b:94:72:98:67:d3:e7:1d:05:15:31:38: 87:9f:f9:1a:29:78:62:10:96:d4:be:a3:6a:a5:4c: cb:67:a4:38:38:25:45:9b:a0:d1:3b:c5:48:40:ad: 61:c0:15:e1:b4:4e:80:06:e8:16:ac:d3:e7:b9:73: a2:5d:25:b9:62:f5:93:d1:8b:f3:40:42:e5:e6:cb: ae:e6:9e:a9:c6:8e:1c:55:55:0a:06:d8:68:a3:cd: 4f:51:b3:8d:49:c9:08:f9:52:15:eb:b3:15:cc:78: 5a:56:02:ca:89:e7:b8:8b:11:25:2c:31:c7:4b:9c: 32:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:82:EC:46:24:26:C1:89:D4:05:A2:0C:27:C6:F7:AE:E4:0A:E6:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PYLsRiQmwYnUBaIMJ8b3ruQK5p0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.60.0/22 Signature Algorithm: sha256WithRSAEncryption a5:7a:bf:f2:7d:2c:d6:c0:2f:4f:11:ec:1c:65:07:c3:fc:87: 1d:4d:1a:e6:e9:11:75:c5:7e:89:b6:02:d6:56:9c:8d:b4:be: 74:fe:4b:c9:b4:70:eb:5d:d8:2a:4c:78:68:4f:6c:a3:99:79: 35:15:42:0e:6d:65:9e:73:7b:79:01:4d:e2:44:a7:3c:2e:6a: 6e:55:70:d8:fc:6e:68:52:f5:84:23:03:d9:00:f6:d0:18:68: 14:88:e0:c5:6a:41:07:7f:04:18:3d:a2:2b:60:ac:a1:da:3c: 83:d1:b4:9c:d7:37:33:c9:4a:8c:ca:ca:5d:86:95:8f:3d:47: 07:23:cc:75:51:98:1d:7e:2d:78:95:b1:4b:b2:9e:13:f4:8e: 67:2f:3d:1a:48:d9:bd:0e:4f:7f:ea:92:c6:f9:40:7e:1c:58: be:be:a8:1b:00:3c:3b:e7:3d:48:98:3e:29:7a:59:f5:e5:a9: 4d:54:b8:2a:07:07:85:b9:67:25:bc:ee:84:8c:31:7b:c2:4c: 74:f4:7a:d9:3c:df:6c:06:67:56:a9:7d:95:95:a4:8e:04:1d: 2d:21:3d:bc:f1:a6:5d:cf:46:c5:29:99:bb:e6:9b:5d:5a:1f: c8:97:42:63:c6:8a:a2:86:98:ed:ab:b8:62:a6:54:1b:32:e5: 77:de:64:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNEODJFQzQ2MjQyNkMx ODlENDA1QTIwQzI3QzZGN0FFRTQwQUU2OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlwCBYvBVXDKt0Q9OyJ6d0zcfOPUeedY1wvSXySTxhdY13ZSwa WZUSekWZNwhaL5nrmsLzaxgpp1GWSaY0vGTr25pQYLnlb9C+Dd1/yJmCTp5nRs9Z KUtc8qm7PHlHIYXzuFtzLgootd5JL4Q4V7vBhdiDOCFUVLiLMhOfxxgR+cAHNhAt Tma6ZBuUcphn0+cdBRUxOIef+RopeGIQltS+o2qlTMtnpDg4JUWboNE7xUhArWHA FeG0ToAG6Bas0+e5c6JdJbli9ZPRi/NAQuXmy67mnqnGjhxVVQoG2GijzU9Rs41J yQj5UhXrsxXMeFpWAsqJ57iLESUsMcdLnDJFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPYLsRiQmwYnUBaIMJ8b3ruQK5p0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BZTHNSaVFtd1luVUJhSU1K OGIzcnVRSzVwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ATwwDQYJKoZIhvcNAQELBQADggEBAKV6v/J9LNbAL08R7BxlB8P8hx1NGubpEXXF fom2AtZWnI20vnT+S8m0cOtd2CpMeGhPbKOZeTUVQg5tZZ5ze3kBTeJEpzwuam5V cNj8bmhS9YQjA9kA9tAYaBSI4MVqQQd/BBg9oitgrKHaPIPRtJzXNzPJSozKyl2G lY89RwcjzHVRmB1+LXiVsUuynhP0jmcvPRpI2b0OT3/qksb5QH4cWL6+qBsAPDvn PUiYPil6WfXlqU1UuCoHB4W5ZyW87oSMMXvCTHT0etk832wGZ1apfZWVpI4EHS0h Pbzxpl3PRsUpmbvmm11aH8iXQmPGiqKGmO2ruGKmVBsy5XfeZEU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:48 2025 by rpki-client on console.sobornost.net