$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKYuEnosfdShPB0Kh7sZlaHwU44.roa File: JKYuEnosfdShPB0Kh7sZlaHwU44.roa (raw, json) Hash identifier: w381K/B2tN3PZwJbKso6NdAcKu6tpay7CD2ridsw8H4= Subject key identifier: 24:A6:2E:12:7A:2C:7D:D4:A1:3C:1D:0A:87:BB:19:95:A1:F0:53:8E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 364C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKYuEnosfdShPB0Kh7sZlaHwU44.roa Signing time: Mon 10 Feb 2025 13:54:11 +0000 ROA not before: Mon 10 Feb 2025 13:54:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13900 (0x364c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=24A62E127A2C7DD4A13C1D0A87BB1995A1F0538E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:79:99:8f:4a:d4:b9:38:6c:f3:74:8d:1b: ec:f5:13:5d:07:66:55:0e:1b:b1:7c:d7:c4:4f:a4: c9:0c:18:c4:8c:cf:c4:03:d2:26:77:b4:b8:71:34: 5c:d7:6a:d2:b8:fd:f3:0c:d9:48:94:22:31:ba:59: 60:62:6d:8f:51:1a:3c:d0:91:d0:e0:1a:35:c3:f9: f1:d5:8b:d5:61:dc:46:e7:be:54:c8:18:fc:16:f4: 05:c0:96:c5:9d:20:0c:5a:9b:bc:73:30:4e:7d:92: b4:41:d8:ce:98:1e:5f:c8:a9:4b:b8:4c:01:6e:a7: 88:f4:b5:f4:82:0b:53:05:f0:d6:a8:da:49:c2:60: bb:ac:af:f5:b7:91:09:f1:de:26:46:ca:57:f7:37: a9:4f:47:44:75:cd:7d:ac:40:56:c5:4f:c9:c4:d8: e1:c0:dd:92:36:4d:7c:80:12:f8:97:63:77:96:93: 0d:7c:4d:24:27:db:05:49:57:c3:36:cb:5d:b9:4c: 44:e9:c0:32:65:52:d4:54:84:8c:d5:24:cb:aa:7a: d4:e1:e6:8b:5e:f3:3d:77:64:97:b0:58:00:f1:6c: f8:1d:1e:99:69:36:14:45:61:9d:69:85:bf:0c:fd: 0e:4a:2c:3c:21:27:15:78:dc:5c:a4:ac:a9:23:43: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A6:2E:12:7A:2C:7D:D4:A1:3C:1D:0A:87:BB:19:95:A1:F0:53:8E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKYuEnosfdShPB0Kh7sZlaHwU44.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.232.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:b6:27:c1:c9:8d:79:3c:c8:39:fe:16:69:76:27:02:70:38: c7:e8:89:1d:f1:12:97:4b:af:66:59:8d:a5:d6:0a:7b:b2:84: b8:6c:e9:67:de:25:33:0c:9c:dc:f7:b2:2e:2d:32:ad:66:ee: 5e:e9:17:c2:cf:f0:54:74:49:61:7a:be:aa:e8:ce:7d:91:35: a2:db:0b:7d:11:ac:7e:8f:b9:aa:5a:9b:b6:ed:f1:0a:34:f3: 21:15:2c:fb:2b:ad:b7:95:13:02:33:cf:3a:f3:7e:c5:d5:5b: 1e:07:6f:01:54:d6:78:b2:ce:f0:6e:a7:91:48:cf:aa:31:9b: 8b:4a:d7:00:ff:a5:32:32:a9:0d:f5:25:a9:02:87:81:ac:34: e7:0f:11:bd:4d:a3:dc:9e:17:58:34:d7:93:da:b2:0a:e9:bb: 07:c8:9f:da:62:55:aa:66:83:d4:9d:d5:43:56:c4:88:6f:80: 6c:fc:04:23:a2:7e:6b:5f:a8:f7:ab:54:ff:f9:d8:05:f2:e6: 6c:38:bc:b3:a6:68:06:9b:f5:44:92:25:95:0e:b2:16:89:42: 71:6e:a9:f5:23:67:cf:d3:b9:41:41:09:02:ad:67:a2:bb:21: 40:64:5d:1d:6a:7c:e9:78:9f:03:b7:54:55:99:23:a2:ee:33: 14:5b:e5:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI0QTYyRTEyN0EyQzdE RDRBMTNDMUQwQTg3QkIxOTk1QTFGMDUzOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqvHmZj0rUuThs83SNG+z1E10HZlUOG7F818RPpMkMGMSMz8QD 0iZ3tLhxNFzXatK4/fMM2UiUIjG6WWBibY9RGjzQkdDgGjXD+fHVi9Vh3EbnvlTI GPwW9AXAlsWdIAxam7xzME59krRB2M6YHl/IqUu4TAFup4j0tfSCC1MF8Nao2knC YLusr/W3kQnx3iZGylf3N6lPR0R1zX2sQFbFT8nE2OHA3ZI2TXyAEviXY3eWkw18 TSQn2wVJV8M2y125TETpwDJlUtRUhIzVJMuqetTh5ote8z13ZJewWADxbPgdHplp NhRFYZ1phb8M/Q5KLDwhJxV43FykrKkjQ77RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJKYuEnosfdShPB0Kh7sZlaHwU44wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pLWXVFbm9zZmRTaFBCMEto N3NabGFId1U0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AegwDQYJKoZIhvcNAQELBQADggEBAC+2J8HJjXk8yDn+Fml2JwJwOMfoiR3xEpdL r2ZZjaXWCnuyhLhs6WfeJTMMnNz3si4tMq1m7l7pF8LP8FR0SWF6vqrozn2RNaLb C30RrH6Puapam7bt8Qo08yEVLPsrrbeVEwIzzzrzfsXVWx4HbwFU1niyzvBup5FI z6oxm4tK1wD/pTIyqQ31JakCh4GsNOcPEb1No9yeF1g015PasgrpuwfIn9piVapm g9Sd1UNWxIhvgGz8BCOifmtfqPerVP/52AXy5mw4vLOmaAab9USSJZUOshaJQnFu qfUjZ8/TuUFBCQKtZ6K7IUBkXR1qfOl4nwO3VFWZI6LuMxRb5Uw= -----END CERTIFICATE-----Generated at Tue Apr 22 15:01:29 2025 by rpki-client