$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jXKNqiovPc1grYX2ErlhNp5UIe4.roa File: jXKNqiovPc1grYX2ErlhNp5UIe4.roa (raw, json) Hash identifier: jo6dsv50LXlC6IqghOsSEx2D0FBq5W+BK3AtMMN3pgU= Subject key identifier: 8D:72:8D:AA:2A:2F:3D:CD:60:AD:85:F6:12:B9:61:36:9E:54:21:EE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3562 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jXKNqiovPc1grYX2ErlhNp5UIe4.roa Signing time: Mon 10 Feb 2025 13:53:17 +0000 ROA not before: Mon 10 Feb 2025 13:53:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13666 (0x3562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:53:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8D728DAA2A2F3DCD60AD85F612B961369E5421EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:b5:a2:b7:68:cc:e5:18:c0:3d:0b:12:b5: 05:52:7f:37:a5:96:a2:60:a3:ed:3f:4d:59:2b:28: db:f1:34:5f:6b:64:e9:9b:77:6f:92:a2:e1:87:0f: 7e:64:2e:38:b3:67:ce:96:ed:bb:76:1a:f1:fb:8d: 88:c1:d2:40:53:b8:11:f2:f1:b8:9b:15:e8:bf:ee: 29:c6:dd:ce:f2:52:31:5f:37:e3:f9:04:41:3f:d6: 53:ef:34:3e:50:67:c8:79:b7:58:21:80:b1:da:3a: 23:64:20:5f:d3:b9:0a:d9:99:fa:b6:b8:20:55:9f: 47:67:9d:5d:50:bd:48:55:f6:4e:b2:8c:88:17:93: 6e:22:d4:72:05:71:34:2f:78:ff:9e:22:62:ce:bb: 50:a9:2e:d4:0e:dd:f3:3a:43:20:49:68:24:18:38: 24:7c:ac:5b:9c:24:c2:a4:94:fb:30:b2:02:34:20: da:42:e5:54:06:51:40:ed:58:76:82:24:0d:91:fa: 4e:97:89:03:d8:68:1a:f4:a5:33:a4:7a:30:6b:78: 7e:05:84:3a:9a:16:73:16:cb:93:ad:cd:af:dc:3b: 9f:7e:b7:33:c9:94:54:62:92:87:5c:2e:f9:07:17: ed:a9:96:71:de:88:e4:5b:4e:86:f3:d9:c2:c9:8e: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:72:8D:AA:2A:2F:3D:CD:60:AD:85:F6:12:B9:61:36:9E:54:21:EE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jXKNqiovPc1grYX2ErlhNp5UIe4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.232.0/21 Signature Algorithm: sha256WithRSAEncryption 90:8f:ae:ed:2e:ae:fd:d0:ea:d8:d8:10:87:7e:41:c6:15:80: 0c:56:c2:56:61:24:0b:50:42:06:aa:8f:62:db:71:af:4c:61: 62:3c:ce:8a:ec:e2:bd:3c:35:20:84:04:1b:78:a8:1d:8e:7e: 32:e1:7b:76:22:df:98:1f:02:cd:64:32:d9:0d:dd:38:ed:a6: c8:b6:76:97:0b:d3:ec:bd:4e:45:0c:39:b4:9c:b1:ae:0c:91: 71:98:e2:af:ec:86:55:e5:d6:69:40:c2:5d:a2:d2:9d:b7:73: c7:88:11:66:0d:55:7c:85:c9:ea:f5:fb:12:3e:45:40:61:1d: 46:51:6a:fe:49:41:aa:f0:1f:f9:65:8a:01:6d:6b:bb:43:2c: eb:09:05:e1:57:20:b4:f5:2b:41:fa:99:a0:45:65:54:8d:58: 28:2d:1f:43:32:fe:5d:af:5d:87:b3:a7:2d:82:88:1d:05:da: f3:7a:5a:7e:a0:8b:3c:28:2c:2d:d6:dd:50:56:c0:72:b2:29: 02:6c:14:e1:86:c7:2d:e9:42:a0:f0:68:3a:eb:ca:9b:ac:63: 90:87:98:5b:b4:6d:c7:b3:e1:5b:0e:12:62:e7:8a:66:7d:eb: 5e:eb:f1:01:66:40:f2:20:06:b2:cd:a3:c6:0f:29:ba:c3:1d: 51:08:be:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUzMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhENzI4REFBMkEyRjNE Q0Q2MEFEODVGNjEyQjk2MTM2OUU1NDIxRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIZ7Wit2jM5RjAPQsStQVSfzellqJgo+0/TVkrKNvxNF9rZOmb d2+SouGHD35kLjizZ86W7bt2GvH7jYjB0kBTuBHy8bibFei/7inG3c7yUjFfN+P5 BEE/1lPvND5QZ8h5t1ghgLHaOiNkIF/TuQrZmfq2uCBVn0dnnV1QvUhV9k6yjIgX k24i1HIFcTQveP+eImLOu1CpLtQO3fM6QyBJaCQYOCR8rFucJMKklPswsgI0INpC 5VQGUUDtWHaCJA2R+k6XiQPYaBr0pTOkejBreH4FhDqaFnMWy5Otza/cO59+tzPJ lFRikodcLvkHF+2plnHeiORbTobz2cLJjrLLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjXKNqiovPc1grYX2ErlhNp5UIe4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pYS05xaW92UGMxZ3JZWDJF cmxoTnA1VUllNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6OgwDQYJKoZIhvcNAQELBQADggEBAJCPru0urv3Q6tjYEId+QcYVgAxWwlZhJAtQ Qgaqj2Lbca9MYWI8zors4r08NSCEBBt4qB2OfjLhe3Yi35gfAs1kMtkN3Tjtpsi2 dpcL0+y9TkUMObScsa4MkXGY4q/shlXl1mlAwl2i0p23c8eIEWYNVXyFyer1+xI+ RUBhHUZRav5JQarwH/lligFta7tDLOsJBeFXILT1K0H6maBFZVSNWCgtH0My/l2v XYezpy2CiB0F2vN6Wn6gizwoLC3W3VBWwHKyKQJsFOGGxy3pQqDwaDrrypusY5CH mFu0bcez4VsOEmLnimZ9617r8QFmQPIgBrLNo8YPKbrDHVEIvh8= -----END CERTIFICATE-----Generated at Fri Apr 18 22:36:53 2025 by rpki-client