$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Js9GXOazWs4tYKhLGOrAhsL00p0.roa File: Js9GXOazWs4tYKhLGOrAhsL00p0.roa (raw, json) Hash identifier: lFEyA8PP9lFbE1mbwLCx1Pr5Iazc+VblCzdVtwwcrJQ= Subject key identifier: 26:CF:46:5C:E6:B3:5A:CE:2D:60:A8:4B:18:EA:C0:86:C2:F4:D2:9D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3457 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Js9GXOazWs4tYKhLGOrAhsL00p0.roa Signing time: Mon 10 Feb 2025 13:52:17 +0000 ROA not before: Mon 10 Feb 2025 13:52:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13399 (0x3457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=26CF465CE6B35ACE2D60A84B18EAC086C2F4D29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:7d:a0:55:03:98:a1:10:5d:50:fc:be:fa: 74:70:a3:48:d4:64:0f:db:0e:53:f7:0a:3d:e5:19: 47:43:18:8d:8c:b7:17:f6:a7:e8:5b:cc:4a:23:31: 1f:d7:f2:13:b1:fa:df:7f:45:3f:a7:5a:7d:c7:60: 5a:34:6c:6c:66:10:c2:e6:d4:ce:cf:25:50:26:81: 3c:c9:54:c1:16:44:0d:a3:94:27:d7:47:b4:e2:d1: 01:1d:47:8b:db:bb:3a:64:e8:65:a8:af:0c:41:17: d4:64:d6:6f:45:1b:39:11:e0:a5:4f:3e:d3:9e:96: 99:6a:a8:db:09:ac:47:a1:ff:1f:ba:44:d1:fe:dd: ad:a9:4a:55:b4:ae:48:4b:cc:7e:d9:c5:db:a1:07: b9:a3:44:24:b0:56:8e:b2:7a:5d:f4:88:0e:a4:c8: 18:f6:30:db:9a:46:7a:6b:60:d7:01:74:49:3f:52: 49:1d:59:99:43:80:f5:3b:ad:44:25:7e:30:87:56: 2c:68:a0:5e:c5:77:00:43:dd:6d:97:60:68:2d:66: 1d:1d:40:3a:25:2f:f3:11:76:3d:11:12:ad:3c:d0: e7:e4:2d:5f:af:14:54:00:38:66:3f:29:ab:47:bf: d2:a6:e7:36:62:f2:33:1f:a4:24:2a:a9:91:b2:1f: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CF:46:5C:E6:B3:5A:CE:2D:60:A8:4B:18:EA:C0:86:C2:F4:D2:9D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Js9GXOazWs4tYKhLGOrAhsL00p0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.32.0/19 Signature Algorithm: sha256WithRSAEncryption a9:1e:3c:4d:cc:5b:6a:61:f4:7e:3e:1b:1a:81:ba:e0:64:23: 27:eb:9e:08:02:20:5f:ec:71:48:df:40:6a:11:bb:6d:a4:74: fa:10:5c:96:e0:c6:09:80:b6:ad:a3:75:88:9b:78:3d:62:cc: 22:64:70:68:ee:32:db:1e:2e:f6:45:d1:be:0e:94:07:6c:0a: d5:a8:6f:6a:2e:99:bc:98:df:fe:e9:56:33:cb:24:13:41:0a: cb:9b:87:94:d0:d7:01:8f:06:e6:08:93:56:a4:02:f3:be:1e: cb:9c:51:82:03:6f:a7:23:50:29:28:d6:86:d4:2c:4b:03:67: da:b0:8e:b3:30:97:fa:3d:60:fd:6a:ae:8f:05:26:26:df:92: c2:23:0d:15:be:a4:27:e5:51:8d:a7:11:9e:ed:1b:d0:fc:9d: 93:c7:e6:a5:59:11:8f:b6:f9:5b:fd:c2:28:7e:09:7a:37:69: 9c:b8:d2:af:7b:df:50:a8:d8:ba:52:a6:49:50:2d:6b:66:14: 15:c3:1d:a9:ef:82:31:74:7a:f8:50:c5:14:8d:de:b3:d3:57: c8:76:2f:fe:7c:7f:6e:a8:14:21:a1:ec:4f:74:f2:74:e1:15: e5:a3:76:0a:aa:1c:32:f8:ef:fa:2e:8b:21:c5:5d:f8:f5:b4: fb:0a:68:ca -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNFcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2Q0Y0NjVDRTZCMzVB Q0UyRDYwQTg0QjE4RUFDMDg2QzJGNEQyOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMoX2gVQOYoRBdUPy++nRwo0jUZA/bDlP3Cj3lGUdDGI2Mtxf2 p+hbzEojMR/X8hOx+t9/RT+nWn3HYFo0bGxmEMLm1M7PJVAmgTzJVMEWRA2jlCfX R7Ti0QEdR4vbuzpk6GWorwxBF9Rk1m9FGzkR4KVPPtOelplqqNsJrEeh/x+6RNH+ 3a2pSlW0rkhLzH7ZxduhB7mjRCSwVo6yel30iA6kyBj2MNuaRnprYNcBdEk/Ukkd WZlDgPU7rUQlfjCHVixooF7FdwBD3W2XYGgtZh0dQDolL/MRdj0REq080OfkLV+v FFQAOGY/KatHv9Km5zZi8jMfpCQqqZGyH6rdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJs9GXOazWs4tYKhLGOrAhsL00p0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pzOUdYT2F6V3M0dFlLaExH T3JBaHNMMDBwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6CAwDQYJKoZIhvcNAQELBQADggEBAKkePE3MW2ph9H4+GxqBuuBkIyfrnggCIF/s cUjfQGoRu22kdPoQXJbgxgmAtq2jdYibeD1izCJkcGjuMtseLvZF0b4OlAdsCtWo b2oumbyY3/7pVjPLJBNBCsubh5TQ1wGPBuYIk1akAvO+HsucUYIDb6cjUCko1obU LEsDZ9qwjrMwl/o9YP1qro8FJibfksIjDRW+pCflUY2nEZ7tG9D8nZPH5qVZEY+2 +Vv9wih+CXo3aZy40q9731Co2LpSpklQLWtmFBXDHanvgjF0evhQxRSN3rPTV8h2 L/58f26oFCGh7E908nThFeWjdgqqHDL47/ouiyHFXfj1tPsKaMo= -----END CERTIFICATE-----Generated at Fri Apr 18 22:37:06 2025 by rpki-client