$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jxu33HNT2a0sTH7ubQcu6D5sAQo.roa File: jxu33HNT2a0sTH7ubQcu6D5sAQo.roa (raw, json) Hash identifier: zETTmYuBQUu6UZT4I8vOxzJjQddAbO2cD3JSUx1JhHk= Subject key identifier: 8F:1B:B7:DC:73:53:D9:AD:2C:4C:7E:EE:6D:07:2E:E8:3E:6C:01:0A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3524 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jxu33HNT2a0sTH7ubQcu6D5sAQo.roa Signing time: Mon 10 Feb 2025 13:53:03 +0000 ROA not before: Mon 10 Feb 2025 13:53:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13604 (0x3524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8F1BB7DC7353D9AD2C4C7EEE6D072EE83E6C010A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:ed:e9:ba:9d:b2:0e:d2:c4:4f:5d:26:1b: 91:c8:88:87:38:22:29:68:2e:10:11:63:67:b8:75: 99:d7:ab:87:c6:18:ca:5b:aa:39:8b:87:33:7b:15: 3e:7b:fb:16:6c:79:dd:b9:52:f0:77:01:92:f2:4f: c1:f5:fd:25:bb:96:c3:ed:e1:85:94:d9:39:09:8e: bb:96:8a:b3:39:fe:50:a6:7d:95:f2:c4:6c:31:ad: 08:00:0a:2d:92:86:81:85:ae:35:2c:c9:ed:15:03: 48:12:5f:fb:38:00:4d:be:e8:07:87:cb:80:67:3a: 1f:e2:b2:51:04:97:7c:71:b1:06:24:e5:b5:17:ca: 4c:10:8d:92:1d:15:c5:e1:95:61:e2:da:57:80:15: ff:ee:0a:7b:34:d0:2d:cd:28:d4:87:c2:9c:a0:1e: 76:f4:b7:29:22:f4:36:de:5c:76:ac:62:f6:b3:37: d7:4f:5f:53:d8:59:c7:41:90:ae:d9:f4:2e:17:38: a7:cc:c1:49:98:98:5b:8d:f2:b5:6b:4d:de:50:eb: d3:c5:a0:68:a7:48:5e:cb:61:d9:d1:e4:08:25:07: fe:4b:53:f7:ca:95:03:6e:ba:a9:aa:8f:92:0e:e1: 23:3c:40:35:9e:6b:ae:27:1d:12:43:e7:2d:74:57: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1B:B7:DC:73:53:D9:AD:2C:4C:7E:EE:6D:07:2E:E8:3E:6C:01:0A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jxu33HNT2a0sTH7ubQcu6D5sAQo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.130.0/24 Signature Algorithm: sha256WithRSAEncryption bb:35:08:01:dd:3b:53:4c:3d:ef:da:cf:37:c7:66:e0:31:ab: 08:a8:bd:ff:cd:9b:91:ac:20:2b:2e:65:fa:bd:3b:f3:b3:93: df:ef:06:6e:ec:20:c5:e0:f4:a2:6b:ab:98:0b:06:e0:43:45: ee:9f:65:e5:37:c0:24:c8:b1:e5:9e:52:39:82:3e:88:8e:6b: 90:0c:88:f2:8a:d3:a9:53:20:dd:51:d8:07:06:fc:93:86:3e: b2:39:70:ef:80:d6:0b:9c:4a:0f:9c:29:f3:0b:0c:f0:83:b1: e1:98:48:f6:3b:91:11:a4:08:a3:0c:34:12:80:5e:0d:18:76: 12:25:95:fe:90:0a:d2:cc:f9:93:eb:e5:1b:03:21:fd:47:00: ff:c9:e3:c1:25:71:29:0d:72:e8:3c:54:c1:6b:e8:a1:57:48: 1f:55:da:9e:11:d0:56:2c:2b:ef:27:a0:f2:47:b4:49:58:c5: 31:8a:9e:df:be:24:65:4b:7f:57:33:de:21:cd:92:fe:37:0a: 95:b4:5b:b5:46:a9:97:e8:79:f9:b3:df:3e:76:da:59:dc:a4: 37:b2:c4:e4:55:7b:18:91:1b:07:fb:2a:3e:29:1c:67:1c:f7: 59:d4:69:9e:61:34:6a:45:15:18:f3:5a:73:01:b2:35:f3:0c: d1:30:46:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNSQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGMUJCN0RDNzM1M0Q5 QUQyQzRDN0VFRTZEMDcyRUU4M0U2QzAxMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkOu3pup2yDtLET10mG5HIiIc4IiloLhARY2e4dZnXq4fGGMpb qjmLhzN7FT57+xZsed25UvB3AZLyT8H1/SW7lsPt4YWU2TkJjruWirM5/lCmfZXy xGwxrQgACi2ShoGFrjUsye0VA0gSX/s4AE2+6AeHy4BnOh/islEEl3xxsQYk5bUX ykwQjZIdFcXhlWHi2leAFf/uCns00C3NKNSHwpygHnb0tyki9DbeXHasYvazN9dP X1PYWcdBkK7Z9C4XOKfMwUmYmFuN8rVrTd5Q69PFoGinSF7LYdnR5AglB/5LU/fK lQNuuqmqj5IO4SM8QDWea64nHRJD5y10V0ZfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjxu33HNT2a0sTH7ubQcu6D5sAQowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2p4dTMzSE5UMmEwc1RIN3Vi UWN1NkQ1c0FRby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYIwDQYJKoZIhvcNAQELBQADggEBALs1CAHdO1NMPe/azzfHZuAxqwiovf/Nm5Gs ICsuZfq9O/Ozk9/vBm7sIMXg9KJrq5gLBuBDRe6fZeU3wCTIseWeUjmCPoiOa5AM iPKK06lTIN1R2AcG/JOGPrI5cO+A1gucSg+cKfMLDPCDseGYSPY7kRGkCKMMNBKA Xg0YdhIllf6QCtLM+ZPr5RsDIf1HAP/J48ElcSkNcug8VMFr6KFXSB9V2p4R0FYs K+8noPJHtElYxTGKnt++JGVLf1cz3iHNkv43CpW0W7VGqZfoefmz3z522lncpDey xORVexiRGwf7Kj4pHGcc91nUaZ5hNGpFFRjzWnMBsjXzDNEwRl4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:51 2025 by rpki-client on console.sobornost.net