$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3jlqxE_ZSwz4VIZ-8bpwBp8H5TI.roa File: 3jlqxE_ZSwz4VIZ-8bpwBp8H5TI.roa (raw, json) Hash identifier: 0jo7V/+2ptYMT279bCfQNoiu5w6QhZ9EyzUHohU+DWw= Subject key identifier: DE:39:6A:C4:4F:D9:4B:0C:F8:54:86:7E:F1:BA:70:06:9F:07:E5:32 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 343B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3jlqxE_ZSwz4VIZ-8bpwBp8H5TI.roa Signing time: Mon 10 Feb 2025 13:52:11 +0000 ROA not before: Mon 10 Feb 2025 13:52:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13371 (0x343b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DE396AC44FD94B0CF854867EF1BA70069F07E532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:a6:d5:dd:eb:48:48:38:22:70:5a:60:8e: a1:ea:5e:16:7c:b4:21:e4:ed:f0:f9:7d:13:17:ad: 57:39:6d:95:ba:dd:a7:7f:6c:10:bb:b4:ab:37:d5: 80:57:81:c8:d6:20:5e:75:43:ef:a4:dd:45:7c:a5: b4:8f:38:eb:df:eb:07:a1:54:72:f0:5b:2d:df:36: 9b:12:75:68:3b:73:13:65:80:3e:99:b6:48:9c:94: 87:cd:57:0a:a1:30:d7:65:6b:0d:a3:3a:93:64:28: 00:3f:8f:73:b9:35:89:85:b7:ed:01:f7:c7:6d:d0: bd:a1:b1:ab:33:d4:7f:04:d4:93:e8:6e:af:a3:41: 97:4e:a7:8e:da:7b:7d:a1:c6:5c:cb:9b:a0:c6:e9: ec:6d:0b:d0:b0:3d:49:27:f1:15:94:20:f4:4a:b9: 7b:aa:2f:8d:66:2f:b1:2a:19:2a:2e:c1:4b:55:99: 4a:68:30:84:92:46:91:58:b1:0a:4b:b9:e8:68:a3: 9d:81:2e:47:3e:2b:12:29:da:75:13:04:43:b5:db: 55:fc:5f:fa:05:1d:7e:c2:b9:c6:97:ae:ab:fc:bf: 7a:98:44:d9:77:48:a8:cb:38:10:ac:1a:f1:8f:97: 93:2c:cf:a0:3a:c1:9e:4c:d9:74:e4:c0:52:3d:15: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:39:6A:C4:4F:D9:4B:0C:F8:54:86:7E:F1:BA:70:06:9F:07:E5:32 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3jlqxE_ZSwz4VIZ-8bpwBp8H5TI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.0.0/18 Signature Algorithm: sha256WithRSAEncryption 1f:fe:5d:ce:71:eb:ab:41:96:ad:ef:82:0e:0e:d9:e7:e4:e8: 80:eb:63:ee:bb:fa:80:4c:65:48:01:b1:28:75:91:cd:02:e2: a3:17:ae:3f:53:44:cd:34:be:a3:76:2f:8c:ef:96:59:db:ce: 63:a4:33:39:b2:b9:48:af:7b:a3:37:4f:20:6b:c9:0b:ff:ad: 33:73:f0:15:11:ab:6c:36:91:9a:ee:7d:df:7f:ec:06:eb:06: 20:83:01:6d:59:d3:91:17:2b:bf:c2:ea:32:e1:a8:cf:58:a4: c8:2c:02:a9:5f:24:44:d5:f3:6e:81:20:fa:3b:22:db:67:59: ad:bf:57:83:db:ee:2d:01:26:58:bf:3c:f1:3c:57:b0:03:94: 21:66:c1:77:ce:53:e3:9e:58:1e:6c:f0:fe:a4:e8:c9:52:e2: 1a:67:45:a1:a6:c6:e9:76:44:e0:6e:a7:95:05:d1:76:0c:89: c3:38:6a:65:a6:6f:39:15:61:db:23:b5:63:2c:d7:e2:9c:c8: bb:53:45:31:00:96:82:67:71:96:ae:8f:f2:48:2b:3c:e4:8e: 71:b4:e7:8e:17:36:66:70:d2:aa:98:44:1c:71:4a:2f:db:54: 85:87:e1:3f:38:46:6a:59:78:22:98:70:c8:ae:95:f8:02:b4: d5:10:89:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERFMzk2QUM0NEZEOTRC MENGODU0ODY3RUYxQkE3MDA2OUYwN0U1MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC736bV3etISDgicFpgjqHqXhZ8tCHk7fD5fRMXrVc5bZW63ad/ bBC7tKs31YBXgcjWIF51Q++k3UV8pbSPOOvf6wehVHLwWy3fNpsSdWg7cxNlgD6Z tkiclIfNVwqhMNdlaw2jOpNkKAA/j3O5NYmFt+0B98dt0L2hsasz1H8E1JPobq+j QZdOp47ae32hxlzLm6DG6extC9CwPUkn8RWUIPRKuXuqL41mL7EqGSouwUtVmUpo MISSRpFYsQpLuehoo52BLkc+KxIp2nUTBEO121X8X/oFHX7CucaXrqv8v3qYRNl3 SKjLOBCsGvGPl5Msz6A6wZ5M2XTkwFI9FTPlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3jlqxE/ZSwz4VIZ+8bpwBp8H5TIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNqbHF4RV9aU3d6NFZJWi04 YnB3QnA4SDVUSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2 6AAwDQYJKoZIhvcNAQELBQADggEBAB/+Xc5x66tBlq3vgg4O2efk6IDrY+67+oBM ZUgBsSh1kc0C4qMXrj9TRM00vqN2L4zvllnbzmOkMzmyuUive6M3TyBryQv/rTNz 8BURq2w2kZrufd9/7AbrBiCDAW1Z05EXK7/C6jLhqM9YpMgsAqlfJETV826BIPo7 IttnWa2/V4Pb7i0BJli/PPE8V7ADlCFmwXfOU+OeWB5s8P6k6MlS4hpnRaGmxul2 ROBup5UF0XYMicM4amWmbzkVYdsjtWMs1+KcyLtTRTEAloJncZauj/JIKzzkjnG0 544XNmZw0qqYRBxxSi/bVIWH4T84RmpZeCKYcMiulfgCtNUQiU0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:13 2025 by rpki-client