$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjeQ77YfGNItJUsw-pZ-HH4z2mI.roa File: PjeQ77YfGNItJUsw-pZ-HH4z2mI.roa (raw, json) Hash identifier: mduSfsBv2qY0gYtQ1+SbF4ln4LSQ2NjlWSTIb+dVekg= Subject key identifier: 3E:37:90:EF:B6:1F:18:D2:2D:25:4B:30:FA:96:7E:1C:7E:33:DA:62 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3502 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjeQ77YfGNItJUsw-pZ-HH4z2mI.roa Signing time: Mon 10 Feb 2025 13:52:55 +0000 ROA not before: Mon 10 Feb 2025 13:52:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 211.76.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13570 (0x3502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3E3790EFB61F18D22D254B30FA967E1C7E33DA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:c0:ad:74:18:a6:33:f9:c1:42:d9:53:23: f4:e8:18:a4:57:0f:8b:8f:e6:d9:6d:eb:2b:50:13: 9f:38:1d:09:bf:b6:fa:29:96:58:70:56:be:9f:af: 8a:2e:fb:ef:41:d8:a0:96:e3:dd:75:9c:c2:d4:70: 04:99:4c:8f:f0:28:06:21:a4:d7:2b:9a:4e:a9:be: ca:dd:29:6e:9e:e7:c2:e4:f9:4e:68:89:71:a5:ba: ef:ad:5b:ea:82:1c:73:1d:72:04:ed:99:20:fc:be: 41:af:21:f6:5d:60:e7:3c:59:26:74:39:df:fb:e6: cf:b8:d0:33:06:4d:15:42:e7:bb:94:5e:51:72:ec: f7:df:57:df:ed:d4:99:94:6c:0c:c1:17:3e:e2:42: e3:8e:b4:d4:50:60:3b:8a:42:1a:90:9d:d8:22:2a: b9:9f:12:b9:07:e2:10:02:bd:79:a6:80:e3:af:96: c3:69:bc:59:02:27:14:d4:b0:62:80:22:7c:b3:02: 11:02:a4:d9:00:61:c3:5d:7c:60:d5:49:ad:64:39: b7:63:ec:96:d6:33:41:fa:b6:ef:36:51:47:35:22: b4:37:08:e2:c0:86:ce:93:ea:82:ca:68:42:29:ad: bd:d5:89:22:70:7f:30:d0:b1:03:c1:a8:ab:78:6f: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:37:90:EF:B6:1F:18:D2:2D:25:4B:30:FA:96:7E:1C:7E:33:DA:62 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjeQ77YfGNItJUsw-pZ-HH4z2mI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.113.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:42:45:e2:bc:24:71:29:cc:d4:15:fa:be:55:72:c5:e0:18: fe:bf:45:f1:1d:ca:84:5b:94:ca:e3:27:44:13:d7:f9:ac:00: 82:29:48:40:ed:ef:62:6d:e1:ed:19:00:8d:e1:0c:62:c5:59: 45:63:47:65:55:eb:13:4a:bd:d6:bf:f3:3a:69:68:8e:c8:cc: 53:ef:00:3f:bd:18:f6:b9:cf:e9:74:8e:3d:4f:c6:d2:93:d5: 08:bb:40:a4:d2:14:44:31:48:33:70:57:0d:cd:0c:bd:59:fd: d8:f3:15:84:3a:62:79:bc:f2:f6:38:4d:1b:88:d3:14:eb:b2: 7f:b8:0b:70:a9:52:32:d5:1b:82:13:d1:af:6d:e0:5f:df:80: 42:0c:cb:bb:65:82:3f:28:b3:d8:a3:2c:a2:aa:5e:e5:c3:0a: de:18:0a:0c:b2:42:dd:ba:58:98:a4:32:9c:39:dc:e6:e9:80: c9:f6:d7:08:a9:4b:14:3f:2d:36:bd:a6:cc:b0:46:a9:e0:da: 01:17:b8:0d:6b:e3:8a:7a:39:c7:da:a7:dd:34:b4:92:e9:cf: 36:53:2f:9a:f2:52:0a:bf:cf:a7:27:42:b1:de:1c:9f:ea:8f: e6:a1:24:39:19:38:8d:bf:87:0c:bd:29:68:1c:e5:a7:fd:a5: d1:7c:ea:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFMzc5MEVGQjYxRjE4 RDIyRDI1NEIzMEZBOTY3RTFDN0UzM0RBNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPmMCtdBimM/nBQtlTI/ToGKRXD4uP5tlt6ytQE584HQm/tvop llhwVr6fr4ou++9B2KCW4911nMLUcASZTI/wKAYhpNcrmk6pvsrdKW6e58Lk+U5o iXGluu+tW+qCHHMdcgTtmSD8vkGvIfZdYOc8WSZ0Od/75s+40DMGTRVC57uUXlFy 7PffV9/t1JmUbAzBFz7iQuOOtNRQYDuKQhqQndgiKrmfErkH4hACvXmmgOOvlsNp vFkCJxTUsGKAInyzAhECpNkAYcNdfGDVSa1kObdj7JbWM0H6tu82UUc1IrQ3COLA hs6T6oLKaEIprb3ViSJwfzDQsQPBqKt4b9iHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPjeQ77YfGNItJUsw+pZ+HH4z2mIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BqZVE3N1lmR05JdEpVc3ct cFotSEg0ejJtSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THEwDQYJKoZIhvcNAQELBQADggEBAH1CReK8JHEpzNQV+r5VcsXgGP6/RfEdyoRb lMrjJ0QT1/msAIIpSEDt72Jt4e0ZAI3hDGLFWUVjR2VV6xNKvda/8zppaI7IzFPv AD+9GPa5z+l0jj1PxtKT1Qi7QKTSFEQxSDNwVw3NDL1Z/djzFYQ6Ynm88vY4TRuI 0xTrsn+4C3CpUjLVG4IT0a9t4F/fgEIMy7tlgj8os9ijLKKqXuXDCt4YCgyyQt26 WJikMpw53ObpgMn21wipSxQ/LTa9psywRqng2gEXuA1r44p6Ocfap900tJLpzzZT L5ryUgq/z6cnQrHeHJ/qj+ahJDkZOI2/hwy9KWgc5af9pdF86sg= -----END CERTIFICATE-----Generated at Fri Apr 18 22:23:41 2025 by rpki-client