$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z-d2Roaag_55hpSbU_6VzNdWvRE.roa File: Z-d2Roaag_55hpSbU_6VzNdWvRE.roa (raw, json) Hash identifier: nvlV1fIEUj07p6CHtk0GxWtSkPDiHpAOB6QZU/ncFJU= Subject key identifier: 67:E7:76:46:86:9A:83:FE:79:86:94:9B:53:FE:95:CC:D7:56:BD:11 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34B5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z-d2Roaag_55hpSbU_6VzNdWvRE.roa Signing time: Mon 10 Feb 2025 13:52:38 +0000 ROA not before: Mon 10 Feb 2025 13:52:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13493 (0x34b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=67E77646869A83FE7986949B53FE95CCD756BD11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:cc:39:eb:30:e8:74:43:48:09:c7:d0:0a: d3:53:73:43:7b:2c:d6:e3:b3:6c:13:38:9b:d2:9e: ac:94:b9:38:79:fd:ba:10:20:7f:f6:03:52:6d:cc: 26:7e:04:54:6a:75:0a:db:94:21:48:de:46:9b:11: 9d:e4:9c:68:96:21:ce:57:c7:e4:e8:21:99:a9:37: 77:1f:6f:5b:3f:cb:24:88:4d:0a:22:eb:e6:ea:cd: ac:d3:76:66:0b:f2:2c:7b:a2:7a:56:84:ec:06:b3: f1:e5:05:f0:5e:33:66:99:85:49:39:fa:3c:ac:8d: 0e:36:20:e5:0a:7d:c0:e8:b9:ff:9f:a7:8f:34:3d: bd:3f:4b:0b:92:5a:04:13:ad:c0:a6:64:7d:15:b0: 8f:c7:d2:b4:f9:e1:70:98:c3:63:66:c8:1a:92:99: 02:31:e4:ee:ab:61:f3:55:cc:5d:7f:f7:e8:2c:f4: 05:98:8b:99:b1:8c:c0:64:3d:7d:bc:05:c2:7c:1e: 86:16:68:62:85:c5:fb:81:c9:a0:6a:d4:3d:8e:cc: 87:51:b1:af:90:b6:91:c5:9e:10:dc:23:2e:28:5f: 84:29:be:d5:86:2e:06:33:1a:fa:5c:d2:0b:f6:96: 1d:25:ee:27:5b:d9:86:0e:a6:83:38:15:8c:98:c0: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E7:76:46:86:9A:83:FE:79:86:94:9B:53:FE:95:CC:D7:56:BD:11 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z-d2Roaag_55hpSbU_6VzNdWvRE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.205.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:14:a2:81:ef:2f:b8:ef:92:43:ef:58:5c:7f:f6:4a:d6:57: 3e:14:b2:a8:e5:14:29:b0:62:39:9b:5f:10:cb:01:f1:dc:e3: 16:d4:4e:da:75:b6:6e:86:35:5c:5c:a7:11:ed:9c:de:74:86: 07:ed:af:a1:14:22:61:ff:5c:e1:28:4c:0e:0b:21:77:ac:85: 7a:07:a3:9b:f6:95:14:8d:e4:78:6f:62:5e:54:dd:03:fc:fd: 24:b5:eb:7d:92:a3:05:fc:13:f5:da:84:d3:18:c3:91:8b:ed: 0a:d6:a9:06:a7:1a:5e:d0:e2:e8:d4:a4:9f:85:bf:4b:08:97: d9:c9:da:59:72:21:4c:68:3f:4c:3b:d7:a2:6d:bd:48:b2:6b: 5e:91:98:89:21:a9:86:f1:9f:c9:36:4f:3f:35:6f:b4:d9:43: cd:5e:1c:a0:f6:0b:52:27:00:36:42:36:f7:1a:c9:25:e5:e4: 94:fe:38:09:ff:6e:d1:b7:af:cf:74:c8:1f:58:11:95:cb:c6: c9:9c:7c:a9:91:a1:32:ec:24:89:ba:83:3d:10:fc:94:81:03: af:c8:6a:10:6d:eb:18:71:a0:2a:2b:9e:83:cd:98:43:45:af: ab:13:9f:52:e1:b7:8f:50:de:c1:29:2a:3b:9f:e9:c0:e2:ae: aa:54:93:f6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY3RTc3NjQ2ODY5QTgz RkU3OTg2OTQ5QjUzRkU5NUNDRDc1NkJEMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtM8w56zDodENICcfQCtNTc0N7LNbjs2wTOJvSnqyUuTh5/boQ IH/2A1JtzCZ+BFRqdQrblCFI3kabEZ3knGiWIc5Xx+ToIZmpN3cfb1s/yySITQoi 6+bqzazTdmYL8ix7onpWhOwGs/HlBfBeM2aZhUk5+jysjQ42IOUKfcDouf+fp480 Pb0/SwuSWgQTrcCmZH0VsI/H0rT54XCYw2NmyBqSmQIx5O6rYfNVzF1/9+gs9AWY i5mxjMBkPX28BcJ8HoYWaGKFxfuByaBq1D2OzIdRsa+QtpHFnhDcIy4oX4QpvtWG LgYzGvpc0gv2lh0l7idb2YYOpoM4FYyYwB4xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZ+d2Roaag/55hpSbU/6VzNdWvREwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1otZDJSb2FhZ181NWhwU2JV XzZWek5kV3ZSRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq Ac0wDQYJKoZIhvcNAQELBQADggEBAAoUooHvL7jvkkPvWFx/9krWVz4UsqjlFCmw YjmbXxDLAfHc4xbUTtp1tm6GNVxcpxHtnN50hgftr6EUImH/XOEoTA4LIXeshXoH o5v2lRSN5HhvYl5U3QP8/SS1632SowX8E/XahNMYw5GL7QrWqQanGl7Q4ujUpJ+F v0sIl9nJ2llyIUxoP0w716JtvUiya16RmIkhqYbxn8k2Tz81b7TZQ81eHKD2C1In ADZCNvcaySXl5JT+OAn/btG3r890yB9YEZXLxsmcfKmRoTLsJIm6gz0Q/JSBA6/I ahBt6xhxoCornoPNmENFr6sTn1Lht49Q3sEpKjuf6cDirqpUk/Y= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:49 2025 by rpki-client on console.sobornost.net