$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjajskBidtRKs83Un5yE45v9T44.roa File: PjajskBidtRKs83Un5yE45v9T44.roa (raw, json) Hash identifier: rpRjUA+6SAyrm6LD03pQVi+BEEcE5Z3B8jXh7Ro5Q4E= Subject key identifier: 3E:36:A3:B2:40:62:76:D4:4A:B3:CD:D4:9F:9C:84:E3:9B:FD:4F:8E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 36BB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjajskBidtRKs83Un5yE45v9T44.roa Signing time: Mon 10 Feb 2025 13:54:37 +0000 ROA not before: Mon 10 Feb 2025 13:54:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14011 (0x36bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3E36A3B2406276D44AB3CDD49F9C84E39BFD4F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bb:36:7f:73:51:59:6e:49:3d:91:6a:73:a4: 4e:00:34:0b:67:9d:83:38:ef:a7:cb:cf:d7:d0:82: e0:fc:7b:02:87:b1:c5:08:8a:3d:2c:6c:12:8c:54: 73:87:9c:e0:01:48:66:9a:32:5d:57:bf:9d:ea:91: 4d:42:7e:8d:02:7e:f9:57:70:b3:5c:d8:0e:3e:84: 5c:5e:b8:f5:16:39:07:21:ab:6d:c5:4f:c2:4e:d3: a6:cd:25:3d:42:b3:d5:b1:41:97:05:e3:bb:1c:23: f0:68:8e:a7:b5:81:8e:d7:ad:14:45:04:69:32:61: 61:71:05:3e:8b:55:36:6b:f8:41:55:ef:7e:fc:4c: 9c:05:13:0f:a2:34:eb:3b:3d:51:88:2f:24:b4:7a: 9a:60:08:ef:68:8d:1c:a5:1f:0a:09:14:7f:4e:86: 2d:6a:3d:e5:e9:8a:c3:e2:9c:aa:0f:34:3c:97:e1: 05:b9:19:ea:62:e7:09:4e:2f:70:ab:9e:c8:b3:6c: 57:4d:16:ff:cf:62:77:24:0c:36:d9:75:04:2d:6d: c3:f6:1c:18:5d:da:9e:7f:90:e1:9c:87:32:dd:01: 2b:37:5a:c7:70:cb:b7:f3:21:55:9f:ae:92:04:16: 26:cd:d4:70:cd:af:e4:60:35:1c:a8:7c:98:c3:8e: b9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:36:A3:B2:40:62:76:D4:4A:B3:CD:D4:9F:9C:84:E3:9B:FD:4F:8E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjajskBidtRKs83Un5yE45v9T44.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.116.0/24 Signature Algorithm: sha256WithRSAEncryption 99:27:8f:b5:e9:6f:7e:a5:b1:79:1d:90:29:77:44:ba:62:f6: ab:d2:59:0a:aa:37:c5:0d:93:dc:4f:d3:40:88:1d:07:79:d6: ac:ed:d2:19:e2:5d:8e:58:af:ae:f8:34:cb:64:0d:ad:a9:31: 7e:72:1d:dd:04:26:8e:59:84:c6:05:8f:87:fd:3a:be:8e:6c: 9b:3e:9b:80:48:1c:00:7c:14:b8:cc:7a:79:32:ca:b8:61:5e: 77:25:fb:37:30:b1:d6:0c:d1:94:a9:8f:57:0a:72:cf:d7:4a: b8:1e:03:48:fb:3e:80:fa:9c:56:49:36:09:44:98:92:57:c4: d4:20:80:a8:c0:61:58:91:bd:d3:64:ef:bc:ad:e3:79:7c:2e: ff:1d:5e:74:2b:4f:dd:73:99:70:62:54:92:b4:53:ff:d6:45: ec:54:2d:e1:30:25:9f:50:22:50:ff:f5:56:28:b5:5c:7c:34: 98:f4:c1:2b:3c:36:13:23:c6:91:1c:89:31:cb:1c:f1:56:60: a9:bd:69:74:dc:72:53:bc:fe:6f:91:4b:6a:8b:bd:d1:9d:bb: 6f:be:c8:6f:06:11:c6:ab:3e:d9:a9:f0:d8:77:61:01:98:bd: f7:00:a1:d1:7a:13:2e:a1:8b:c4:4c:a4:b7:b3:66:72:5a:06: cf:7b:01:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNrswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFMzZBM0IyNDA2Mjc2 RDQ0QUIzQ0RENDlGOUM4NEUzOUJGRDRGOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcuzZ/c1FZbkk9kWpzpE4ANAtnnYM476fLz9fQguD8ewKHscUI ij0sbBKMVHOHnOABSGaaMl1Xv53qkU1Cfo0CfvlXcLNc2A4+hFxeuPUWOQchq23F T8JO06bNJT1Cs9WxQZcF47scI/Bojqe1gY7XrRRFBGkyYWFxBT6LVTZr+EFV7378 TJwFEw+iNOs7PVGILyS0eppgCO9ojRylHwoJFH9Ohi1qPeXpisPinKoPNDyX4QW5 Gepi5wlOL3CrnsizbFdNFv/PYnckDDbZdQQtbcP2HBhd2p5/kOGchzLdASs3Wsdw y7fzIVWfrpIEFibN1HDNr+RgNRyofJjDjrnpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPjajskBidtRKs83Un5yE45v9T44wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BqYWpza0JpZHRSS3M4M1Vu NXlFNDV2OVQ0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THQwDQYJKoZIhvcNAQELBQADggEBAJknj7Xpb36lsXkdkCl3RLpi9qvSWQqqN8UN k9xP00CIHQd51qzt0hniXY5Yr674NMtkDa2pMX5yHd0EJo5ZhMYFj4f9Or6ObJs+ m4BIHAB8FLjMenkyyrhhXncl+zcwsdYM0ZSpj1cKcs/XSrgeA0j7PoD6nFZJNglE mJJXxNQggKjAYViRvdNk77yt43l8Lv8dXnQrT91zmXBiVJK0U//WRexULeEwJZ9Q IlD/9VYotVx8NJj0wSs8NhMjxpEciTHLHPFWYKm9aXTcclO8/m+RS2qLvdGdu2++ yG8GEcarPtmp8Nh3YQGYvfcAodF6Ey6hi8RMpLezZnJaBs97ARM= -----END CERTIFICATE-----Generated at Fri Apr 18 23:12:32 2025 by rpki-client