$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sWl4mTzw2AcsppWq18u3m5VJSYY.roa File: sWl4mTzw2AcsppWq18u3m5VJSYY.roa (raw, json) Hash identifier: USG7Y7oSwlOkwj6HTjI+SMh231uFoG1KxV2NOhLEgHE= Subject key identifier: B1:69:78:99:3C:F0:D8:07:2C:A6:95:AA:D7:CB:B7:9B:95:49:49:86 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34F6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sWl4mTzw2AcsppWq18u3m5VJSYY.roa Signing time: Mon 10 Feb 2025 13:52:52 +0000 ROA not before: Mon 10 Feb 2025 13:52:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13558 (0x34f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B16978993CF0D8072CA695AAD7CBB79B95494986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:df:99:7b:31:9f:42:22:77:d1:e9:03:13: ba:bc:7a:b6:9a:2a:84:49:e4:28:1c:de:6b:cb:a9: 1b:ee:30:33:1f:35:f0:1c:c9:a3:f8:6e:3d:3a:9c: fa:2e:9d:7f:15:ab:aa:ce:c7:d1:c2:74:0b:9b:69: 5e:47:82:f0:dc:2e:4f:22:ef:a8:6c:25:3b:de:8a: 60:50:dc:96:42:f8:10:70:1c:54:c8:85:46:37:24: 0d:60:1e:22:b9:b6:cf:92:ef:77:97:01:b7:29:c9: 78:dc:27:f4:46:25:d2:46:d0:cc:c8:64:6f:24:71: 54:c4:f9:ad:0a:a0:cf:17:52:9b:69:12:25:1f:1d: c3:0a:fa:54:b3:3e:76:90:1a:a1:81:93:d2:58:f8: f6:a8:95:0f:38:43:a0:e7:64:3b:ec:67:5c:c8:bb: 0c:a7:30:3f:86:4a:d8:19:5b:73:90:ea:1b:93:a8: 35:52:88:a6:03:d7:be:2a:c8:f0:e1:1e:da:33:f9: f7:11:e4:28:4e:bf:9a:3a:ea:ba:7a:82:2a:f7:86: cd:dd:05:cb:fb:2b:c2:db:74:79:3c:16:fc:d4:d1: 00:59:90:3d:e8:b3:64:22:e7:2f:c2:37:66:c5:8d: 01:74:c6:a5:3f:90:b8:b0:7f:12:0d:47:e2:0d:6f: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:69:78:99:3C:F0:D8:07:2C:A6:95:AA:D7:CB:B7:9B:95:49:49:86 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sWl4mTzw2AcsppWq18u3m5VJSYY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.129.0/24 Signature Algorithm: sha256WithRSAEncryption ba:c4:bd:cf:6c:cc:a0:1a:75:50:b8:a9:38:09:eb:28:87:1b: c0:40:7b:9a:f2:d0:85:47:bf:00:8d:2d:52:d3:cb:fd:a7:cb: 79:10:49:e7:0a:4a:f0:ed:81:43:5c:bf:9b:04:d1:98:5e:d2: d6:c1:c1:dc:9d:53:e1:82:0f:bc:04:dd:18:03:9f:a7:da:50: 7f:7f:58:11:5b:37:f5:f2:df:99:5e:e2:2b:17:ca:0b:6b:88: 03:1c:b3:f1:41:30:d1:bd:ed:2a:a3:ef:d9:a7:9b:e5:7a:ae: 13:e9:33:71:c3:87:2e:d3:36:56:b7:71:26:2e:3a:45:d7:62: bb:14:a7:3d:17:8b:2a:15:f3:55:ec:e0:62:89:e9:04:c0:b7: 90:ee:de:44:63:75:ee:44:81:19:e2:2e:74:9f:7c:2d:e1:9f: 9b:1a:bf:06:5f:87:5d:01:75:25:59:82:fb:ec:b6:71:44:15: 49:9d:8e:d8:5d:68:31:9b:ed:53:cb:85:b4:ce:51:fd:cb:f6: db:32:97:77:22:5d:48:c1:59:e1:07:5a:56:e6:ee:81:08:eb: 36:87:7a:c1:87:ea:e4:e4:9f:d6:0f:26:b3:c2:f9:99:59:60: 6e:0b:df:48:3d:3e:62:e4:13:49:e9:4a:61:e1:22:dd:fa:93: 77:8a:34:e5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxNjk3ODk5M0NGMEQ4 MDcyQ0E2OTVBQUQ3Q0JCNzlCOTU0OTQ5ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIFd+ZezGfQiJ30ekDE7q8eraaKoRJ5Cgc3mvLqRvuMDMfNfAc yaP4bj06nPounX8Vq6rOx9HCdAubaV5HgvDcLk8i76hsJTveimBQ3JZC+BBwHFTI hUY3JA1gHiK5ts+S73eXAbcpyXjcJ/RGJdJG0MzIZG8kcVTE+a0KoM8XUptpEiUf HcMK+lSzPnaQGqGBk9JY+PaolQ84Q6DnZDvsZ1zIuwynMD+GStgZW3OQ6huTqDVS iKYD174qyPDhHtoz+fcR5ChOv5o66rp6gir3hs3dBcv7K8LbdHk8FvzU0QBZkD3o s2Qi5y/CN2bFjQF0xqU/kLiwfxINR+INb6WrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsWl4mTzw2AcsppWq18u3m5VJSYYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NXbDRtVHp3MkFjc3BwV3Ex OHUzbTVWSlNZWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYEwDQYJKoZIhvcNAQELBQADggEBALrEvc9szKAadVC4qTgJ6yiHG8BAe5ry0IVH vwCNLVLTy/2ny3kQSecKSvDtgUNcv5sE0Zhe0tbBwdydU+GCD7wE3RgDn6faUH9/ WBFbN/Xy35le4isXygtriAMcs/FBMNG97Sqj79mnm+V6rhPpM3HDhy7TNla3cSYu OkXXYrsUpz0XiyoV81Xs4GKJ6QTAt5Du3kRjde5EgRniLnSffC3hn5savwZfh10B dSVZgvvstnFEFUmdjthdaDGb7VPLhbTOUf3L9tsyl3ciXUjBWeEHWlbm7oEI6zaH esGH6uTkn9YPJrPC+ZlZYG4L30g9PmLkE0npSmHhIt36k3eKNOU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:52 2025 by rpki-client on console.sobornost.net