$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3QJKhaQ0qcHWs3wv2RcZpLs5cQs.roa File: 3QJKhaQ0qcHWs3wv2RcZpLs5cQs.roa (raw, json) Hash identifier: BUJEdFVBuYXviPxM/w5o4auM7MX40t0y7x1Q6Ziqo/U= Subject key identifier: DD:02:4A:85:A4:34:A9:C1:D6:B3:7C:2F:D9:17:19:A4:BB:39:71:0B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 342A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3QJKhaQ0qcHWs3wv2RcZpLs5cQs.roa Signing time: Mon 10 Feb 2025 13:52:08 +0000 ROA not before: Mon 10 Feb 2025 13:52:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13354 (0x342a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DD024A85A434A9C1D6B37C2FD91719A4BB39710B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:d1:47:a8:6f:2f:ec:84:23:52:c4:56:e8: 28:8f:4d:c0:e8:e3:d6:ce:77:ce:19:bf:0c:29:a0: 6b:16:49:13:f0:f1:e5:f2:c2:fd:64:dc:b6:cd:8d: 56:6d:91:14:a6:d6:18:86:cf:b8:ed:53:7b:c9:de: be:49:92:99:fa:f9:94:ea:03:98:ba:20:5e:97:1b: 76:ff:2d:74:ce:20:a2:56:f1:31:84:f2:4e:4a:d7: 8f:2e:52:48:87:4a:f2:a5:41:bd:76:1c:09:c4:f1: ba:1d:77:b9:91:52:aa:20:5f:bc:86:a3:88:62:81: 60:b0:23:3c:b1:49:4a:1b:3c:c4:7d:14:62:aa:0b: fd:67:ff:7d:e9:39:f3:d8:3d:c1:bb:e6:bd:95:cb: 12:6c:28:3b:c7:dc:77:8e:41:15:0f:f0:13:14:e9: 3b:37:d3:61:ad:e4:34:1a:76:e3:b3:db:93:ca:e4: c5:59:e2:f7:98:7e:e8:e7:36:ea:f9:57:b8:29:df: b6:ea:ac:a0:3e:e6:c6:20:d2:e7:d9:f3:aa:43:8d: 9f:60:1b:91:c3:da:a8:9e:4a:35:df:78:5d:42:c8: f6:6e:54:f1:f5:a4:c7:e3:a0:27:b4:e7:0b:04:21: 57:c8:bf:ea:3d:c3:b0:9e:15:44:52:14:58:c1:7f: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:02:4A:85:A4:34:A9:C1:D6:B3:7C:2F:D9:17:19:A4:BB:39:71:0B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3QJKhaQ0qcHWs3wv2RcZpLs5cQs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.32.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:4e:1e:1e:08:f3:55:c4:8b:bf:30:7e:ae:46:89:ef:fe:d0: 53:ee:52:28:de:89:00:b1:3f:ed:7b:6e:62:f9:73:c5:66:6d: 6a:e6:01:be:e9:12:82:7b:17:55:63:c6:8e:30:fe:81:fa:12: ac:0f:e6:a9:ae:e1:68:6d:d4:59:2f:ab:c5:d1:5b:f8:bf:ad: a7:e4:1e:6e:5c:3f:f0:59:18:89:0d:4a:e5:9c:a0:f5:8f:b5: 23:bc:98:d5:cb:6b:16:5f:06:23:70:c0:93:e8:7f:2c:b6:6e: 0a:1a:b4:ae:23:d4:d4:5f:d3:ab:68:94:3d:f2:03:0b:79:25: b9:c0:cf:f9:8d:85:ad:b9:38:dc:36:e2:69:ad:d2:49:a4:60: db:6c:80:49:fb:c6:55:58:db:19:7e:8a:45:0b:12:1d:27:82: 71:25:f9:3c:b5:f7:95:8d:e1:d9:9f:aa:02:4f:2a:69:fe:73: 6f:d6:7b:66:b4:3a:cb:95:39:68:21:b8:25:08:e6:e8:43:94: a5:3d:54:6b:d4:7b:c9:c3:37:ed:f0:9f:b3:72:75:c1:06:54: ce:ce:22:09:7a:c8:c4:c4:60:b5:82:6f:b2:5d:3b:f9:ee:3c: 36:63:dc:2c:fe:a4:e1:fe:6f:3c:b1:80:07:a9:57:66:1d:79: d4:70:7d:15 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNCowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEREMDI0QTg1QTQzNEE5 QzFENkIzN0MyRkQ5MTcxOUE0QkIzOTcxMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9UNFHqG8v7IQjUsRW6CiPTcDo49bOd84ZvwwpoGsWSRPw8eXy wv1k3LbNjVZtkRSm1hiGz7jtU3vJ3r5Jkpn6+ZTqA5i6IF6XG3b/LXTOIKJW8TGE 8k5K148uUkiHSvKlQb12HAnE8bodd7mRUqogX7yGo4higWCwIzyxSUobPMR9FGKq C/1n/33pOfPYPcG75r2VyxJsKDvH3HeOQRUP8BMU6Ts302Gt5DQaduOz25PK5MVZ 4veYfujnNur5V7gp37bqrKA+5sYg0ufZ86pDjZ9gG5HD2qieSjXfeF1CyPZuVPH1 pMfjoCe05wsEIVfIv+o9w7CeFURSFFjBfyjhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3QJKhaQ0qcHWs3wv2RcZpLs5cQswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNRSktoYVEwcWNIV3Mzd3Yy UmNacExzNWNRcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6CAwDQYJKoZIhvcNAQELBQADggEBAH1OHh4I81XEi78wfq5Gie/+0FPuUijeiQCx P+17bmL5c8VmbWrmAb7pEoJ7F1Vjxo4w/oH6EqwP5qmu4Wht1Fkvq8XRW/i/rafk Hm5cP/BZGIkNSuWcoPWPtSO8mNXLaxZfBiNwwJPofyy2bgoatK4j1NRf06tolD3y Awt5JbnAz/mNha25ONw24mmt0kmkYNtsgEn7xlVY2xl+ikULEh0ngnEl+Ty195WN 4dmfqgJPKmn+c2/We2a0OsuVOWghuCUI5uhDlKU9VGvUe8nDN+3wn7NydcEGVM7O Igl6yMTEYLWCb7JdO/nuPDZj3Cz+pOH+bzyxgAepV2YdedRwfRU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:15 2025 by rpki-client