$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ijw7KBKeaakW5LneTqQQB7o8S8c.roa File: Ijw7KBKeaakW5LneTqQQB7o8S8c.roa (raw, json) Hash identifier: m0c4sJZL6d6R+0h2qLG91UUDzlQTEGb8nZh776L1iLI= Subject key identifier: 22:3C:3B:28:12:9E:69:A9:16:E4:B9:DE:4E:A4:10:07:BA:3C:4B:C7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3634 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ijw7KBKeaakW5LneTqQQB7o8S8c.roa Signing time: Mon 10 Feb 2025 13:54:05 +0000 ROA not before: Mon 10 Feb 2025 13:54:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13876 (0x3634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:54:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=223C3B28129E69A916E4B9DE4EA41007BA3C4BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:70:3f:91:84:b4:31:70:8f:2e:27:68:79: 54:65:ad:48:e3:a8:08:c3:c6:b2:ee:a7:34:e3:33: 53:bf:9b:3b:12:ba:f5:b6:55:1c:2b:89:c1:10:5b: 63:d6:1d:40:8d:83:ea:58:85:12:cd:60:e5:2b:1d: 89:67:de:4f:8d:b6:93:5c:6b:29:8b:e1:1d:85:b9: 8e:0a:01:ef:8f:b5:5e:ee:63:52:ca:d8:71:99:70: 05:eb:0e:61:45:74:57:69:7c:2b:eb:4c:09:35:1d: eb:65:0e:5a:4b:b7:84:8c:db:4e:ce:8f:9c:73:a8: 36:29:5b:a0:a9:38:ca:57:9e:50:95:0e:5d:3a:54: bf:7b:0c:ba:46:78:5f:d2:2b:fe:a8:b1:c7:0a:5e: 16:2e:02:02:69:e1:44:41:9a:c4:5a:59:8a:1a:a4: c9:7c:b8:ce:62:a8:14:e5:5c:e8:08:65:66:d6:64: ce:94:c5:c8:d5:95:5c:dc:66:36:a1:8d:6b:de:d4: af:81:ee:a9:32:7e:3c:07:9a:e2:35:34:aa:c6:5b: 2f:71:ed:80:02:94:6c:9e:67:21:c3:34:f1:c0:21: 57:7a:ea:dc:64:e6:10:11:38:16:de:26:f3:bc:c0: cd:de:b9:a1:df:f4:96:f8:c2:6f:ad:4d:38:fc:71: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3C:3B:28:12:9E:69:A9:16:E4:B9:DE:4E:A4:10:07:BA:3C:4B:C7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ijw7KBKeaakW5LneTqQQB7o8S8c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.224.0/19 Signature Algorithm: sha256WithRSAEncryption 18:b8:3e:d7:81:90:96:87:a3:3e:b7:22:16:30:a7:6e:0e:63: 2e:20:a0:06:b3:dc:36:c6:c8:cd:fc:14:71:fd:4f:8a:ff:28: ca:7e:3d:67:f4:a7:f9:81:74:15:dd:1b:85:9b:32:f7:0b:3c: 9b:50:e8:23:4d:8a:82:0e:f2:56:42:1c:f7:4a:55:aa:fa:34: a4:d7:11:fc:fa:67:75:a8:65:d9:47:d3:95:3c:ca:22:ec:d6: cc:a1:fa:14:50:2e:a3:e6:bd:55:7d:1f:de:f8:07:a7:0f:7a: ad:6d:1b:56:e7:f8:70:94:d5:fa:50:ab:3f:86:7b:23:ab:d7: 67:9e:f3:21:24:ed:5c:86:78:c6:7e:91:18:8e:1f:d7:9b:d9: 10:f9:b0:95:99:18:fd:6c:f0:e7:dd:9e:d2:c9:64:b1:c4:b7: aa:6e:96:11:31:a9:f0:42:ee:d5:12:e3:cc:09:f7:94:f5:4a: 84:91:f1:e3:1f:f2:cf:01:d1:14:d8:38:c1:c5:75:c4:ea:58: 3b:0b:23:6b:62:bc:28:b9:c6:52:26:c3:8a:b6:aa:bc:24:4f: 05:57:e5:d4:95:fe:e5:12:b5:20:b1:57:a8:f2:16:68:04:08: 75:3d:f0:f7:bd:ca:52:0a:14:67:19:09:02:cf:3d:90:9c:46: 74:de:54:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzU0MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIyM0MzQjI4MTI5RTY5 QTkxNkU0QjlERTRFQTQxMDA3QkEzQzRCQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvKXA/kYS0MXCPLidoeVRlrUjjqAjDxrLupzTjM1O/mzsSuvW2 VRwricEQW2PWHUCNg+pYhRLNYOUrHYln3k+NtpNcaymL4R2FuY4KAe+PtV7uY1LK 2HGZcAXrDmFFdFdpfCvrTAk1HetlDlpLt4SM207Oj5xzqDYpW6CpOMpXnlCVDl06 VL97DLpGeF/SK/6osccKXhYuAgJp4URBmsRaWYoapMl8uM5iqBTlXOgIZWbWZM6U xcjVlVzcZjahjWve1K+B7qkyfjwHmuI1NKrGWy9x7YAClGyeZyHDNPHAIVd66txk 5hAROBbeJvO8wM3euaHf9Jb4wm+tTTj8cSY7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIjw7KBKeaakW5LneTqQQB7o8S8cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lqdzdLQktlYWFrVzVMbmVU cVFRQjdvOFM4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6OAwDQYJKoZIhvcNAQELBQADggEBABi4PteBkJaHoz63IhYwp24OYy4goAaz3DbG yM38FHH9T4r/KMp+PWf0p/mBdBXdG4WbMvcLPJtQ6CNNioIO8lZCHPdKVar6NKTX Efz6Z3WoZdlH05U8yiLs1syh+hRQLqPmvVV9H974B6cPeq1tG1bn+HCU1fpQqz+G eyOr12ee8yEk7VyGeMZ+kRiOH9eb2RD5sJWZGP1s8OfdntLJZLHEt6pulhExqfBC 7tUS48wJ95T1SoSR8eMf8s8B0RTYOMHFdcTqWDsLI2tivCi5xlImw4q2qrwkTwVX 5dSV/uUStSCxV6jyFmgECHU98Pe9ylIKFGcZCQLPPZCcRnTeVO4= -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:22 2025 by rpki-client