$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GQj3lNQfCHFpttxxnZVrpy3HYdA.roa File: GQj3lNQfCHFpttxxnZVrpy3HYdA.roa (raw, json) Hash identifier: BINLrDbNVW2zD0NqUEelfQ+HIkoa5DMsV4PgxZrXF6g= Subject key identifier: 19:08:F7:94:D4:1F:08:71:69:B6:DC:71:9D:95:6B:A7:2D:C7:61:D0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34FD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GQj3lNQfCHFpttxxnZVrpy3HYdA.roa Signing time: Mon 10 Feb 2025 13:52:54 +0000 ROA not before: Mon 10 Feb 2025 13:52:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 211.76.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1908F794D41F087169B6DC719D956BA72DC761D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0c:16:4d:76:57:84:39:6d:23:71:e0:21:b5: f5:65:bc:ab:37:be:08:d4:82:52:75:10:31:1b:45: 82:61:54:57:88:1b:53:1b:41:65:02:2f:5a:f0:cc: d2:97:23:a5:85:97:2d:58:72:9f:34:8f:e6:ed:09: 51:a7:6a:ea:b3:79:8c:1a:10:68:00:ec:97:2a:09: ec:7d:7c:3d:23:e1:56:c6:db:43:39:ad:ff:a4:3b: b9:47:f2:fd:ce:34:8f:ca:78:bf:88:b5:fe:d9:1c: 4b:53:e9:7d:3b:9e:da:c1:85:f4:12:23:fa:0f:d4: 96:a7:5d:8b:7b:fb:f0:73:a6:c5:d3:5b:79:d9:fd: 4a:6f:df:f0:6c:58:12:ec:22:18:17:47:84:61:32: 2f:f2:66:48:59:ca:eb:45:2d:0b:c4:26:cc:e3:dc: 16:10:c6:76:ee:93:07:8a:67:bc:60:1a:c6:32:a4: 54:1e:9d:e0:4a:95:77:b7:83:df:a7:6f:45:71:2a: 8a:2b:9e:1b:55:f6:5e:6a:83:76:38:42:1e:94:bf: 1e:10:1b:5f:af:13:5c:e9:30:e6:9c:d3:40:16:10: 01:34:fc:8a:22:0d:42:73:5a:c5:e7:e8:b2:d9:87: 81:f6:14:e4:e1:25:69:e5:c0:d3:5f:a9:82:37:92: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:08:F7:94:D4:1F:08:71:69:B6:DC:71:9D:95:6B:A7:2D:C7:61:D0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GQj3lNQfCHFpttxxnZVrpy3HYdA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.121.0/24 Signature Algorithm: sha256WithRSAEncryption b2:f4:df:a4:e0:23:3f:06:1d:30:d2:8c:61:51:10:5d:7a:5d: 15:a4:7f:30:34:24:f7:52:45:d9:7f:79:fe:85:c9:f9:34:74: 4a:37:5e:89:90:30:e5:0c:12:c1:9b:d0:9b:24:bf:16:56:04: 3a:39:2c:ee:eb:27:f5:86:1a:85:86:da:ed:a2:72:62:92:85: b7:cb:93:00:e8:48:86:6c:2b:c4:d4:33:95:c9:93:27:4b:1a: 95:03:d5:53:7e:1f:43:94:24:60:a5:d5:18:fc:df:a2:c1:54: 7f:c7:73:65:b7:b5:ed:a5:dc:c3:c2:d8:7d:3f:8b:e7:80:cf: 17:4a:24:c0:91:a8:da:b6:3e:38:fe:50:c6:84:0e:4a:5a:63: 1a:0c:35:1f:7b:5c:c2:7e:0f:6f:c3:ad:59:7a:ec:cc:8f:9e: d6:df:f3:1d:cb:0e:87:55:e7:77:0f:14:97:c7:c6:64:31:e4: 49:15:3f:07:20:7c:ec:53:2f:70:94:41:38:32:1e:05:0d:0c: 2b:f5:0a:e7:cd:b7:fa:92:b2:eb:e4:95:72:8c:a8:27:57:bf: 5d:a1:68:d4:7f:d7:60:79:27:e0:90:4b:33:0b:a2:4b:eb:0f: 67:e0:98:22:89:43:fe:8c:f8:7f:76:38:ab:36:27:de:f2:84: f2:58:d6:b6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE5MDhGNzk0RDQxRjA4 NzE2OUI2REM3MTlEOTU2QkE3MkRDNzYxRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEDBZNdleEOW0jceAhtfVlvKs3vgjUglJ1EDEbRYJhVFeIG1Mb QWUCL1rwzNKXI6WFly1Ycp80j+btCVGnauqzeYwaEGgA7JcqCex9fD0j4VbG20M5 rf+kO7lH8v3ONI/KeL+Itf7ZHEtT6X07ntrBhfQSI/oP1JanXYt7+/BzpsXTW3nZ /Upv3/BsWBLsIhgXR4RhMi/yZkhZyutFLQvEJszj3BYQxnbukweKZ7xgGsYypFQe neBKlXe3g9+nb0VxKoornhtV9l5qg3Y4Qh6Uvx4QG1+vE1zpMOac00AWEAE0/Ioi DUJzWsXn6LLZh4H2FOThJWnlwNNfqYI3kkfXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGQj3lNQfCHFpttxxnZVrpy3HYdAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dRajNsTlFmQ0hGcHR0eHhu WlZycHkzSFlkQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THkwDQYJKoZIhvcNAQELBQADggEBALL036TgIz8GHTDSjGFREF16XRWkfzA0JPdS Rdl/ef6Fyfk0dEo3XomQMOUMEsGb0JskvxZWBDo5LO7rJ/WGGoWG2u2icmKShbfL kwDoSIZsK8TUM5XJkydLGpUD1VN+H0OUJGCl1Rj836LBVH/Hc2W3te2l3MPC2H0/ i+eAzxdKJMCRqNq2Pjj+UMaEDkpaYxoMNR97XMJ+D2/DrVl67MyPntbf8x3LDodV 53cPFJfHxmQx5EkVPwcgfOxTL3CUQTgyHgUNDCv1CufNt/qSsuvklXKMqCdXv12h aNR/12B5J+CQSzMLokvrD2fgmCKJQ/6M+H92OKs2J97yhPJY1rY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:37 2025 by rpki-client