$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ijv9fS64_e7RrObY2KcvsCmVejE.roa File: ijv9fS64_e7RrObY2KcvsCmVejE.roa (raw, json) Hash identifier: Yp1zYVXdyc37HwH4CTz52Ag7XRldodf5MLHTRhkuSto= Subject key identifier: 8A:3B:FD:7D:2E:B8:FD:EE:D1:AC:E6:D8:D8:A7:2F:B0:29:95:7A:31 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 34B4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ijv9fS64_e7RrObY2KcvsCmVejE.roa Signing time: Mon 10 Feb 2025 13:52:38 +0000 ROA not before: Mon 10 Feb 2025 13:52:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 211.76.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13492 (0x34b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:52:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8A3BFD7D2EB8FDEED1ACE6D8D8A72FB029957A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:54:91:8e:42:09:9a:2b:96:19:22:6c:5c: eb:99:0d:6f:19:80:d9:1a:08:b3:78:60:e9:00:69: 85:6e:ea:ff:91:87:0e:87:e2:bf:b7:2c:d7:1e:aa: ea:4f:33:79:16:d3:37:6e:52:79:78:4c:28:08:29: 79:b6:8a:8b:a8:da:5d:62:a5:79:33:67:7c:44:ec: c1:d0:7a:c5:a2:09:98:c4:6c:98:2b:7a:63:cb:09: 68:7f:50:f2:5d:0a:dd:c3:b9:f6:c8:dd:dd:82:9e: 45:0b:a9:bf:f0:9d:b9:9c:15:0a:d1:8e:65:7a:be: 85:b4:36:ed:fc:fa:84:c4:ed:11:22:a6:b7:5e:26: a3:40:37:44:e4:40:89:e6:a6:6a:f3:d9:2e:5a:99: 11:ed:b6:a5:ed:ac:8b:46:6b:ae:a4:9e:dc:87:18: 7a:0f:29:00:04:8d:fc:ed:8b:5b:d9:34:4d:05:79: 5e:7b:8a:86:45:2a:1f:55:2d:f3:da:89:6a:05:ee: e3:44:52:05:6c:1a:2d:7a:e8:d7:c6:95:13:5b:4a: b0:b1:42:5d:e5:e4:98:4d:1f:bd:54:a5:1e:7b:c5: 31:cc:b7:52:c8:71:1a:79:a3:01:35:9c:75:2a:05: 72:17:01:32:d4:09:9e:b0:9a:72:6e:19:dd:75:85: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:FD:7D:2E:B8:FD:EE:D1:AC:E6:D8:D8:A7:2F:B0:29:95:7A:31 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ijv9fS64_e7RrObY2KcvsCmVejE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.115.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:9c:87:9a:4f:79:77:5e:f0:e8:68:87:df:73:d3:11:dc:2b: b2:6f:85:47:83:d9:e2:eb:ce:cf:de:3a:03:f9:76:99:49:d3: 45:1a:f3:6b:68:16:22:73:06:74:f8:1d:9e:18:e0:d9:d3:aa: 08:cb:36:54:ca:2b:ab:df:4e:59:9a:0a:ee:26:27:ed:e7:ac: 9c:59:2c:00:7d:62:b8:77:c6:7f:72:bf:b5:dc:02:71:8a:ff: ee:f4:60:0e:20:41:3c:83:2e:85:0d:22:98:8a:6f:8f:bd:24: f0:c7:67:6d:bb:95:70:ed:70:22:fc:6d:8a:13:15:43:85:57: 82:a5:57:7b:c8:bf:d5:e8:60:ae:09:f3:46:cb:a9:09:35:73: da:fc:c0:a7:66:84:b8:02:80:5a:3d:87:28:1d:29:42:88:4a: 81:bc:e2:5a:d1:e3:de:2e:4e:8a:c7:f0:f0:f9:79:48:8c:53: a8:a5:2b:60:ea:0b:56:02:d8:cd:00:28:a3:35:82:35:f4:54: df:44:0b:78:09:ea:6a:7f:1a:2a:98:1d:b1:6f:4d:0b:d7:54: f4:fa:67:f2:9c:57:89:bd:70:aa:7d:00:ed:9a:41:96:26:15: 41:92:41:32:70:83:e8:c9:5f:df:64:ea:1f:d0:fd:33:99:65: e4:86:ce:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhBM0JGRDdEMkVCOEZE RUVEMUFDRTZEOEQ4QTcyRkIwMjk5NTdBMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkZlSRjkIJmiuWGSJsXOuZDW8ZgNkaCLN4YOkAaYVu6v+Rhw6H 4r+3LNcequpPM3kW0zduUnl4TCgIKXm2iouo2l1ipXkzZ3xE7MHQesWiCZjEbJgr emPLCWh/UPJdCt3DufbI3d2CnkULqb/wnbmcFQrRjmV6voW0Nu38+oTE7REiprde JqNAN0TkQInmpmrz2S5amRHttqXtrItGa66kntyHGHoPKQAEjfzti1vZNE0FeV57 ioZFKh9VLfPaiWoF7uNEUgVsGi166NfGlRNbSrCxQl3l5JhNH71UpR57xTHMt1LI cRp5owE1nHUqBXIXATLUCZ6wmnJuGd11heENAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUijv9fS64/e7RrObY2KcvsCmVejEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lqdjlmUzY0X2U3UnJPYlky S2N2c0NtVmVqRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THMwDQYJKoZIhvcNAQELBQADggEBAFqch5pPeXde8Ohoh99z0xHcK7JvhUeD2eLr zs/eOgP5dplJ00Ua82toFiJzBnT4HZ4Y4NnTqgjLNlTKK6vfTlmaCu4mJ+3nrJxZ LAB9Yrh3xn9yv7XcAnGK/+70YA4gQTyDLoUNIpiKb4+9JPDHZ227lXDtcCL8bYoT FUOFV4KlV3vIv9XoYK4J80bLqQk1c9r8wKdmhLgCgFo9hygdKUKISoG84lrR494u TorH8PD5eUiMU6ilK2DqC1YC2M0AKKM1gjX0VN9EC3gJ6mp/GiqYHbFvTQvXVPT6 Z/KcV4m9cKp9AO2aQZYmFUGSQTJwg+jJX99k6h/Q/TOZZeSGzvA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:58 2025 by rpki-client