$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JRJBoeTx6eIb_YnNJEMAtNj6cmc.roa File: JRJBoeTx6eIb_YnNJEMAtNj6cmc.roa (raw, json) Hash identifier: EFUL6RB40R+yTYIR6WKLG463ZCBEIGWy0JWSj/TXFV8= Subject key identifier: 25:12:41:A1:E4:F1:E9:E2:1B:FD:89:CD:24:43:00:B4:D8:FA:72:67 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 347A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JRJBoeTx6eIb_YnNJEMAtNj6cmc.roa Signing time: Mon 10 Feb 2025 13:52:25 +0000 ROA not before: Mon 10 Feb 2025 13:52:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13434 (0x347a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=251241A1E4F1E9E21BFD89CD244300B4D8FA7267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:02:81:de:39:01:88:c4:85:de:20:ff:92: 22:60:43:22:4e:a8:ca:d6:d3:db:82:b4:e1:76:d5: 19:aa:e8:26:1d:21:50:69:30:8e:f6:60:16:3b:c8: 60:8e:95:3a:4a:e9:df:b5:f7:ff:0c:9b:23:f0:75: 77:0a:bb:cf:c6:eb:51:1d:45:11:fd:76:82:9d:33: 4d:b1:fb:5d:1f:12:03:fc:c8:a4:3b:e7:21:42:be: 09:54:96:3c:47:32:2e:c2:48:56:5f:21:cc:8e:db: a5:d3:45:a8:89:93:64:3d:3a:bb:78:58:21:78:84: c3:4a:28:28:9d:7f:13:11:1f:53:73:67:11:85:25: f3:00:34:a3:4e:87:7a:be:ae:b9:7c:60:1a:27:0f: 76:7c:93:6a:79:15:f9:23:47:af:dd:11:67:41:9d: 04:63:88:7b:62:0a:a0:f6:f6:84:3b:fa:d7:e6:a2: aa:b0:ae:44:b0:53:40:cc:a2:60:60:d6:38:c6:95: 58:0b:b2:b7:fa:52:f0:a3:6b:7f:e3:27:f9:79:9a: 5c:57:86:d8:3f:12:95:a7:79:76:42:b8:a3:1a:56: d0:e1:04:a5:50:f9:58:ca:13:6f:57:22:c8:7c:95: 42:f3:20:7a:68:dd:fc:a4:9d:f1:6a:86:eb:16:be: ec:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:12:41:A1:E4:F1:E9:E2:1B:FD:89:CD:24:43:00:B4:D8:FA:72:67 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JRJBoeTx6eIb_YnNJEMAtNj6cmc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.180.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:63:1c:6e:2c:2e:97:b4:85:bd:56:2c:aa:c1:f7:84:38:cf: ee:04:7e:a6:20:65:b5:b8:e4:ef:4b:70:fd:59:27:f9:38:92: ff:87:d7:16:88:2b:01:87:09:d1:dd:b8:c8:6d:9e:85:c9:03: f0:40:12:94:cd:ef:9f:55:cb:0f:43:b4:d3:5a:3f:2e:80:7d: df:5e:9b:a2:08:50:4a:3a:85:67:97:87:be:4e:9c:41:90:1b: 01:aa:69:d3:5f:92:05:6f:16:b8:5c:5f:23:35:24:4a:9c:30: dd:c2:40:ae:91:2f:db:b0:35:6a:9e:17:e6:28:6b:e1:32:aa: 1a:53:9e:13:66:62:c2:a5:ab:af:c3:76:0c:2e:e8:b0:e1:7c: 54:12:26:92:3c:a8:ce:a3:12:dc:89:74:d2:c4:6d:02:69:26: 91:99:96:ec:e7:7a:f7:4e:28:1c:49:72:30:0c:85:95:5c:02: 3c:4e:9d:07:8f:02:6f:27:0b:97:ee:cb:ae:22:12:c4:00:72: e0:f8:6a:4c:01:f3:a3:fd:9f:df:1d:2f:a0:75:b4:d5:69:b9: a0:53:e0:f7:21:4e:59:40:92:a8:4e:fa:7f:bb:e4:b1:5e:2d: 83:61:76:1a:11:83:15:32:b2:f0:75:66:63:df:21:bc:bd:ef: 2a:c6:07:19 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNHowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI1MTI0MUExRTRGMUU5 RTIxQkZEODlDRDI0NDMwMEI0RDhGQTcyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxyQKB3jkBiMSF3iD/kiJgQyJOqMrW09uCtOF21Rmq6CYdIVBp MI72YBY7yGCOlTpK6d+19/8MmyPwdXcKu8/G61EdRRH9doKdM02x+10fEgP8yKQ7 5yFCvglUljxHMi7CSFZfIcyO26XTRaiJk2Q9Ort4WCF4hMNKKCidfxMRH1NzZxGF JfMANKNOh3q+rrl8YBonD3Z8k2p5FfkjR6/dEWdBnQRjiHtiCqD29oQ7+tfmoqqw rkSwU0DMomBg1jjGlVgLsrf6UvCja3/jJ/l5mlxXhtg/EpWneXZCuKMaVtDhBKVQ +VjKE29XIsh8lULzIHpo3fyknfFqhusWvuyLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJRJBoeTx6eIb/YnNJEMAtNj6cmcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pSSkJvZVR4NmVJYl9Zbk5K RU1BdE5qNmNtYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wLQwDQYJKoZIhvcNAQELBQADggEBAC1jHG4sLpe0hb1WLKrB94Q4z+4EfqYgZbW4 5O9LcP1ZJ/k4kv+H1xaIKwGHCdHduMhtnoXJA/BAEpTN759Vyw9DtNNaPy6Afd9e m6IIUEo6hWeXh75OnEGQGwGqadNfkgVvFrhcXyM1JEqcMN3CQK6RL9uwNWqeF+Yo a+EyqhpTnhNmYsKlq6/Ddgwu6LDhfFQSJpI8qM6jEtyJdNLEbQJpJpGZluznevdO KBxJcjAMhZVcAjxOnQePAm8nC5fuy64iEsQAcuD4akwB86P9n98dL6B1tNVpuaBT 4PchTllAkqhO+n+75LFeLYNhdhoRgxUysvB1ZmPfIby97yrGBxk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:34 2025 by rpki-client