$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J22fnCdLmh_TKmsXM98mysBlbpc.roa File: J22fnCdLmh_TKmsXM98mysBlbpc.roa (raw, json) Hash identifier: 1D7JBWuLcXEshVuW9SuUWcCixHGieNC4KiVXY5AIH0k= Subject key identifier: 27:6D:9F:9C:27:4B:9A:1F:D3:2A:6B:17:33:DF:26:CA:C0:65:6E:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34DA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J22fnCdLmh_TKmsXM98mysBlbpc.roa Signing time: Mon 10 Feb 2025 13:52:45 +0000 ROA not before: Mon 10 Feb 2025 13:52:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13530 (0x34da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=276D9F9C274B9A1FD32A6B1733DF26CAC0656E97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:ff:79:38:c2:07:fe:02:51:f4:17:6a:c6: 02:4f:ff:68:08:83:e4:35:19:f4:37:55:1c:aa:4e: d5:ba:92:5b:d5:12:e4:8e:2d:38:12:bc:b6:90:8c: 78:a4:a2:b1:77:cf:81:b9:48:c8:aa:8a:19:0c:38: b8:e0:31:1b:51:31:49:71:93:53:e3:49:2a:b2:a0: 5c:9a:aa:c2:20:53:7c:d7:9a:a2:ad:67:d8:b5:f6: e3:80:c5:90:38:6a:0c:0a:9e:cb:05:06:fc:c4:85: 39:7a:1b:5f:fd:00:18:17:a3:59:45:d3:26:d1:71: 08:7e:8a:14:fe:02:eb:82:e2:b2:90:c3:f1:cb:ae: 55:75:af:6e:be:43:48:88:c9:8e:01:b4:a8:a7:f7: d4:60:14:08:69:5a:cf:ce:f3:60:8d:24:ac:35:c2: 42:18:58:ea:97:85:8f:41:82:a1:8c:5e:06:f3:66: fd:b2:bf:3e:b6:a5:81:92:b7:4f:29:70:b2:b4:9a: e7:7c:d8:2e:d2:c0:5c:fe:ec:f3:7b:69:d9:9f:57: 69:92:ba:f9:20:78:6c:ca:66:31:d8:c8:20:81:b0: 72:79:fc:66:66:3c:e4:46:3d:c6:cd:48:25:89:35: 5e:d2:2d:f4:32:09:98:06:7e:a9:f2:e5:5b:42:35: ed:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6D:9F:9C:27:4B:9A:1F:D3:2A:6B:17:33:DF:26:CA:C0:65:6E:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J22fnCdLmh_TKmsXM98mysBlbpc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.220.0/22 Signature Algorithm: sha256WithRSAEncryption 48:5e:6f:fc:a3:a7:76:c4:07:ff:b5:d0:ce:76:58:b7:70:e8: 45:34:1a:68:10:8a:13:a1:30:23:5e:4d:d4:38:3e:a8:7e:38: 89:29:4e:a1:13:fd:d2:d1:e0:16:42:d0:07:af:23:8b:d4:be: bb:01:56:35:63:05:2b:20:68:c9:4c:63:f4:f8:af:0b:5f:9b: 9b:29:6b:86:af:bb:3a:b1:e6:2d:7b:a8:e8:b7:fd:66:b2:16: a4:8d:2e:af:6f:27:5f:f7:30:75:46:ed:af:37:fe:c6:e9:a9: e8:c8:fd:1e:b0:7d:e8:56:e9:6b:f2:f9:d0:89:fd:4f:ea:7b: 66:8c:2d:51:c5:6c:a0:87:f2:b1:30:4a:f5:a7:22:64:4a:e0: 8c:c9:29:90:99:05:34:bc:f0:4e:cc:08:36:47:24:b9:0e:e5: 64:ee:9d:0f:c8:08:ca:93:73:72:56:70:bc:c8:17:8b:59:e9: 4e:4e:8c:af:34:ea:d7:3a:56:1f:06:f7:dd:fd:8f:e6:d3:d2: b7:b0:c6:9e:16:27:a1:10:cf:3c:6e:6e:14:00:f5:fc:43:23: c4:80:ac:9d:de:a5:01:2a:6f:40:98:37:f1:58:0e:9f:c6:98: f6:30:93:cd:da:e7:08:98:6c:d0:14:03:e2:4f:8e:db:6f:c5: 25:e8:b9:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3NkQ5RjlDMjc0QjlB MUZEMzJBNkIxNzMzREYyNkNBQzA2NTZFOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0ev95OMIH/gJR9BdqxgJP/2gIg+Q1GfQ3VRyqTtW6klvVEuSO LTgSvLaQjHikorF3z4G5SMiqihkMOLjgMRtRMUlxk1PjSSqyoFyaqsIgU3zXmqKt Z9i19uOAxZA4agwKnssFBvzEhTl6G1/9ABgXo1lF0ybRcQh+ihT+AuuC4rKQw/HL rlV1r26+Q0iIyY4BtKin99RgFAhpWs/O82CNJKw1wkIYWOqXhY9BgqGMXgbzZv2y vz62pYGSt08pcLK0mud82C7SwFz+7PN7admfV2mSuvkgeGzKZjHYyCCBsHJ5/GZm PORGPcbNSCWJNV7SLfQyCZgGfqny5VtCNe0NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJ22fnCdLmh/TKmsXM98mysBlbpcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0oyMmZuQ2RMbWhfVEttc1hN OThteXNCbGJwYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6dwwDQYJKoZIhvcNAQELBQADggEBAEheb/yjp3bEB/+10M52WLdw6EU0GmgQihOh MCNeTdQ4Pqh+OIkpTqET/dLR4BZC0AevI4vUvrsBVjVjBSsgaMlMY/T4rwtfm5sp a4avuzqx5i17qOi3/WayFqSNLq9vJ1/3MHVG7a83/sbpqejI/R6wfehW6Wvy+dCJ /U/qe2aMLVHFbKCH8rEwSvWnImRK4IzJKZCZBTS88E7MCDZHJLkO5WTunQ/ICMqT c3JWcLzIF4tZ6U5OjK806tc6Vh8G9939j+bT0rewxp4WJ6EQzzxubhQA9fxDI8SA rJ3epQEqb0CYN/FYDp/GmPYwk83a5wiYbNAUA+JPjttvxSXoub8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:58 2025 by rpki-client