$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2kijmvHaq3d8fjJlL_YEgb0zj8.roa File: i2kijmvHaq3d8fjJlL_YEgb0zj8.roa (raw, json) Hash identifier: 9HYDHaAiN1FjpEJLDHD6NLd+ipwE4i3HFGW1LUVyMx4= Subject key identifier: 8B:69:22:8E:6B:C7:6A:AD:DD:F1:F8:C9:94:BF:D8:12:06:F4:CE:3F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 365F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2kijmvHaq3d8fjJlL_YEgb0zj8.roa Signing time: Mon 10 Feb 2025 13:54:15 +0000 ROA not before: Mon 10 Feb 2025 13:54:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13919 (0x365f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8B69228E6BC76AADDDF1F8C994BFD81206F4CE3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:12:ae:59:5f:b2:77:dc:97:b9:3a:e1:dd:28: 2c:17:21:e6:e4:97:88:cf:64:e4:37:ac:ab:f2:41: 60:d6:e3:20:88:fe:e6:6b:e5:6f:f0:ef:31:04:36: ec:2f:06:07:7e:7a:e7:7c:05:72:3d:96:0d:47:ac: b5:47:8f:27:11:3c:9a:aa:85:04:33:4f:62:b9:69: d2:ab:6c:4d:1d:f3:6b:78:ca:51:6c:04:c0:e0:e5: 0b:4b:c6:1a:9d:cf:c5:2e:c4:ef:3c:bf:67:f3:62: 2c:57:8d:8b:4e:ca:14:3b:11:84:92:b2:a2:52:43: a2:01:3b:46:90:48:1f:5f:bf:c6:ab:8d:4a:96:cb: 60:86:8f:71:15:ac:19:4d:d0:87:0a:2d:a0:14:c7: a4:3a:50:6c:d8:a7:2b:7e:25:20:d5:fa:d0:56:a1: 2a:d4:d2:17:b8:03:04:b5:e2:e5:27:64:72:4a:60: 77:39:af:f5:60:8b:a7:08:fc:2d:de:3e:e1:40:99: f1:23:9e:03:ba:73:cb:f8:03:ed:2c:a8:89:90:87: c6:88:39:f2:00:59:34:37:9e:34:01:c6:24:7a:bb: 2c:c3:95:b7:63:14:92:c2:93:da:70:3f:09:e5:65: ee:d8:ac:51:28:ed:31:91:8e:35:c0:a9:eb:39:d8: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:69:22:8E:6B:C7:6A:AD:DD:F1:F8:C9:94:BF:D8:12:06:F4:CE:3F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2kijmvHaq3d8fjJlL_YEgb0zj8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.46.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:67:4d:f4:46:44:77:2f:ad:2e:d0:b7:68:f8:db:f9:03:f3: bf:55:51:57:c3:90:82:d9:11:3c:af:8e:90:59:90:77:f8:f6: 64:30:49:5a:cc:17:40:f8:37:7c:de:2b:bb:fa:15:66:01:ff: 2f:ea:4d:80:e1:23:61:1d:0d:23:6f:16:e0:c0:05:7d:79:52: ff:a1:2e:0e:c5:34:31:16:1b:84:79:57:6f:bd:4a:57:18:5b: 23:b4:9c:9c:c8:ec:1e:97:74:1f:cf:af:7a:47:89:d6:e9:49: 92:c6:ab:6a:12:73:90:93:5a:21:41:a5:ba:24:5c:56:55:27: 49:a2:4e:f8:87:da:89:d3:fb:f8:a8:dd:ad:a0:db:70:c6:52: 4e:0c:fa:1d:90:fc:24:e2:27:4d:b5:4a:b0:29:de:4b:d4:b2: fd:09:8d:49:77:78:c4:0c:39:53:87:f8:63:bf:ca:cb:6c:2e: e7:be:46:a5:23:17:73:39:9c:80:72:15:ac:b1:4d:6c:3c:44: e2:17:0c:79:fb:c6:b9:87:ce:73:d5:d6:95:16:d6:03:3d:92: 0d:e3:1c:d4:00:0a:ca:25:d2:5d:53:e2:d0:1e:8f:90:95:4a: af:34:39:84:99:77:94:93:bd:17:35:d2:66:80:07:1b:0e:1f: 25:9a:ee:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCNjkyMjhFNkJDNzZB QUREREYxRjhDOTk0QkZEODEyMDZGNENFM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrEq5ZX7J33Je5OuHdKCwXIebkl4jPZOQ3rKvyQWDW4yCI/uZr 5W/w7zEENuwvBgd+eud8BXI9lg1HrLVHjycRPJqqhQQzT2K5adKrbE0d82t4ylFs BMDg5QtLxhqdz8UuxO88v2fzYixXjYtOyhQ7EYSSsqJSQ6IBO0aQSB9fv8arjUqW y2CGj3EVrBlN0IcKLaAUx6Q6UGzYpyt+JSDV+tBWoSrU0he4AwS14uUnZHJKYHc5 r/Vgi6cI/C3ePuFAmfEjngO6c8v4A+0sqImQh8aIOfIAWTQ3njQBxiR6uyzDlbdj FJLCk9pwPwnlZe7YrFEo7TGRjjXAqes52DZpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUi2kijmvHaq3d8fjJlL/YEgb0zj8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2kya2lqbXZIYXEzZDhmakps TF9ZRWdiMHpqOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AS4wDQYJKoZIhvcNAQELBQADggEBAExnTfRGRHcvrS7Qt2j42/kD879VUVfDkILZ ETyvjpBZkHf49mQwSVrMF0D4N3zeK7v6FWYB/y/qTYDhI2EdDSNvFuDABX15Uv+h Lg7FNDEWG4R5V2+9SlcYWyO0nJzI7B6XdB/Pr3pHidbpSZLGq2oSc5CTWiFBpbok XFZVJ0miTviH2onT+/io3a2g23DGUk4M+h2Q/CTiJ021SrAp3kvUsv0JjUl3eMQM OVOH+GO/ystsLue+RqUjF3M5nIByFayxTWw8ROIXDHn7xrmHznPV1pUW1gM9kg3j HNQACsol0l1T4tAej5CVSq80OYSZd5STvRc10maABxsOHyWa7uo= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:51 2025 by rpki-client on console.sobornost.net