$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/24PrChtalK_fMOIIGNeP3NcNpxQ.roa File: 24PrChtalK_fMOIIGNeP3NcNpxQ.roa (raw, json) Hash identifier: 3bIrKqvOeei9ua6lyO9qDEIZzjD2j/RMBdOGQyoxw8g= Subject key identifier: DB:83:EB:0A:1B:5A:94:AF:DF:30:E2:08:18:D7:8F:DC:D7:0D:A7:14 Certificate issuer: /CN=67782BDA48257463ADCDA6D72F2EE41B5FD94A11 Certificate serial: 0F07 Authority key identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/24PrChtalK_fMOIIGNeP3NcNpxQ.roa Signing time: Mon 10 Feb 2025 13:46:19 +0000 ROA not before: Mon 10 Feb 2025 13:46:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 2404:a3c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 13:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3847 (0xf07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67782BDA48257463ADCDA6D72F2EE41B5FD94A11 Validity Not Before: Feb 10 13:46:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DB83EB0A1B5A94AFDF30E20818D78FDCD70DA714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:76:21:9e:a8:16:84:11:75:f7:56:c0:a7: 94:5a:cd:42:13:a3:53:16:02:17:76:8a:20:b5:a4: 22:60:84:20:63:57:6c:66:a3:f4:26:4c:af:de:7a: 6b:0c:4d:78:5d:ca:66:48:35:e0:b6:13:42:19:d6: 21:de:2e:68:13:88:db:da:4e:1e:34:7d:1c:c8:96: 9c:95:36:91:1a:21:ef:e8:ea:5d:37:ef:f9:1f:1b: d1:dd:79:e1:32:6b:68:1a:53:e0:50:e9:6f:33:09: 93:45:cf:33:dd:08:2d:9e:ce:2a:8b:40:47:4e:52: b7:7d:a2:4e:3e:84:4f:9d:00:92:ab:d4:f3:24:bb: 37:1d:70:56:83:16:30:64:38:4f:86:cb:2e:85:d2: 5f:3e:2e:90:c0:1d:60:35:83:ad:4f:c3:77:5d:c2: ae:73:5a:0b:fe:b1:e5:66:9b:64:f2:74:1f:02:4a: 94:27:db:b0:fe:a5:b5:ef:2a:63:8e:dc:6f:85:4d: 21:3d:dc:e2:d1:fe:da:db:97:3b:02:dd:c0:f9:9b: 0a:52:73:35:e1:24:41:94:1d:a9:47:eb:0e:ff:d7: 93:46:09:4b:5b:4c:b4:97:18:bd:5e:48:c1:20:a5: d9:93:e7:28:72:f7:31:e3:fa:48:6d:e4:1e:54:74: 8a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:83:EB:0A:1B:5A:94:AF:DF:30:E2:08:18:D7:8F:DC:D7:0D:A7:14 X509v3 Authority Key Identifier: keyid:67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/24PrChtalK_fMOIIGNeP3NcNpxQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:a3c0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:62:db:91:9e:60:6b:fc:83:94:5a:d9:85:83:44:bf:06:c7: a9:4a:78:ce:3b:a8:ca:be:a8:88:0c:be:04:c8:6a:97:6f:4a: e2:41:12:bd:63:23:c5:b6:14:05:45:32:57:9c:16:fa:7d:7e: b6:b8:cc:4e:5b:dc:bc:fd:9b:e9:88:fb:2d:c4:d0:34:a1:15: 9a:fb:33:f9:f4:fe:9a:5b:d1:0a:a1:58:17:5e:bf:27:eb:ba: 50:5c:74:e8:19:f2:65:7b:08:84:12:0c:4c:0b:76:00:f7:62: 11:d3:4c:81:b8:fe:c3:5f:f7:06:dd:b1:7d:dd:14:8d:45:32: 99:0f:fa:a3:e9:dc:af:c1:d0:8a:86:48:0e:fe:22:9f:00:76: 93:2c:db:1d:e1:d1:ec:45:a3:09:d5:76:6f:83:44:4d:56:39: eb:3a:87:46:9c:de:6d:02:ab:bc:57:de:ca:ec:e8:f6:af:93: d4:3c:ab:5b:ea:55:42:da:af:de:90:4f:bf:e9:06:1e:d5:c9: af:9b:1a:07:67:d1:17:4d:0e:b2:3b:ac:7f:c9:09:b1:90:ea: cb:72:0c:20:ac:ef:84:3d:f8:d0:93:ea:04:72:5b:c4:0c:7b: 22:94:63:ca:85:0b:6e:18:6a:1e:84:a4:b6:2b:e3:91:87:9f: 94:37:ff:c3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc3 ODJCREE0ODI1NzQ2M0FEQ0RBNkQ3MkYyRUU0MUI1RkQ5NEExMTAeFw0yNTAyMTAx MzQ2MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERCODNFQjBBMUI1QTk0 QUZERjMwRTIwODE4RDc4RkRDRDcwREE3MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTB3YhnqgWhBF191bAp5RazUITo1MWAhd2iiC1pCJghCBjV2xm o/QmTK/eemsMTXhdymZINeC2E0IZ1iHeLmgTiNvaTh40fRzIlpyVNpEaIe/o6l03 7/kfG9HdeeEya2gaU+BQ6W8zCZNFzzPdCC2eziqLQEdOUrd9ok4+hE+dAJKr1PMk uzcdcFaDFjBkOE+Gyy6F0l8+LpDAHWA1g61Pw3ddwq5zWgv+seVmm2TydB8CSpQn 27D+pbXvKmOO3G+FTSE93OLR/trblzsC3cD5mwpSczXhJEGUHalH6w7/15NGCUtb TLSXGL1eSMEgpdmT5yhy9zHj+kht5B5UdIrDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU24PrChtalK/fMOIIGNeP3NcNpxQwHwYDVR0jBBgwFoAUZ3gr2kgldGOtzabX Ly7kG1/ZShEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DTE9V RC9aM2dyMmtnbGRHT3R6YWJYTHk3a0cxX1pTaEUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1ozZ3Iya2dsZEdPdHphYlhMeTdrRzFfWlNoRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lNQ0xPVUQvMjRQckNodGFsS19mTU9J SUdOZVAzTmNOcHhRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQEo8AwDQYJKoZIhvcNAQELBQADggEBACxi25GeYGv8g5Ra2YWDRL8Gx6lKeM47 qMq+qIgMvgTIapdvSuJBEr1jI8W2FAVFMlecFvp9fra4zE5b3Lz9m+mI+y3E0DSh FZr7M/n0/ppb0QqhWBdevyfrulBcdOgZ8mV7CIQSDEwLdgD3YhHTTIG4/sNf9wbd sX3dFI1FMpkP+qPp3K/B0IqGSA7+Ip8AdpMs2x3h0exFownVdm+DRE1WOes6h0ac 3m0Cq7xX3srs6Pavk9Q8q1vqVULar96QT7/pBh7Vya+bGgdn0RdNDrI7rH/JCbGQ 6styDCCs74Q9+NCT6gRyW8QMeyKUY8qFC24Yah6EpLYr45GHn5Q3/8M= -----END CERTIFICATE-----Generated at Sat Apr 5 09:33:26 2025 by rpki-client