$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JQLIa5Iab3woVRLQg2ShBvJtXaQ.roa File: JQLIa5Iab3woVRLQg2ShBvJtXaQ.roa (raw, json) Hash identifier: 1DPARH3fsBtnJj/WfPSADhDkOHmhRAF1AkFuxsDuIM0= Subject key identifier: 25:02:C8:6B:92:1A:6F:7C:28:55:12:D0:83:64:A1:06:F2:6D:5D:A4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 33B8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JQLIa5Iab3woVRLQg2ShBvJtXaQ.roa Signing time: Mon 10 Feb 2025 13:51:42 +0000 ROA not before: Mon 10 Feb 2025 13:51:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.113.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13240 (0x33b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2502C86B921A6F7C285512D08364A106F26D5DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:56:f5:f0:04:f8:4d:e4:a9:95:48:f6:cc: 2b:c2:3b:27:a8:e9:6d:85:a5:59:f5:72:b6:57:1a: 4c:37:58:23:ea:e3:53:3e:89:74:f1:de:0b:d1:6d: c6:71:2c:fd:82:2e:b7:d8:58:3e:b9:c6:f2:59:5a: fa:7e:83:1b:87:9c:7b:b2:4a:f1:76:2f:fd:33:5d: 55:f8:d8:dd:a7:40:ef:6c:1f:6b:f1:8e:db:e6:ac: d1:11:a1:f9:3f:7c:ed:dd:96:d2:08:3e:fe:09:2a: 71:18:ce:d0:39:86:56:8b:45:c2:30:4d:21:ce:da: c2:e7:da:67:56:b5:94:2e:69:81:1e:95:1c:d7:78: b1:d7:d2:e8:f6:e1:07:a5:1a:86:2b:34:85:20:ab: ca:a8:43:31:89:25:1d:01:f2:f8:b9:d2:11:60:a5: 13:f2:3b:c3:ce:88:f5:c3:4b:d0:d5:11:b2:f3:ed: e1:ba:2f:c6:b7:8e:69:35:03:32:75:fb:97:2b:aa: 51:22:25:ec:c0:01:23:03:13:bd:43:8d:d4:d9:7e: b4:54:eb:8e:b6:d9:fd:f8:19:05:bf:26:c0:9f:ff: 6a:9d:91:e1:25:64:b5:e8:ad:84:33:91:aa:26:26: 37:bb:fc:31:81:8f:e9:f3:aa:d0:4d:90:25:6a:2b: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:C8:6B:92:1A:6F:7C:28:55:12:D0:83:64:A1:06:F2:6D:5D:A4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JQLIa5Iab3woVRLQg2ShBvJtXaQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.113.128/25 Signature Algorithm: sha256WithRSAEncryption a1:3d:26:f6:be:eb:97:4e:68:55:d9:bb:c7:73:1f:95:d0:2d: a2:56:1b:f9:b6:89:96:88:aa:89:57:78:90:36:97:b4:31:c9: ee:12:31:33:de:21:fd:68:dd:4a:d4:0b:f4:2e:5c:7a:5c:9b: 99:01:14:ca:eb:d9:cd:57:6f:cd:2e:b2:f3:d7:a5:0c:17:f3: 86:fb:9c:22:5a:09:8e:47:6e:a3:e5:aa:00:ad:b5:14:ca:91: 16:6b:71:2b:b9:2d:69:98:b5:10:55:b1:e1:a3:1f:c6:59:75: 25:00:fa:ec:f3:62:d1:eb:d2:14:5c:33:9c:31:2e:59:75:09: 12:19:85:b6:c6:e2:04:50:d3:af:74:d5:12:34:70:21:e3:04: aa:61:d0:07:9b:cd:46:7f:54:b4:d8:b1:c5:ac:71:90:e1:98: 0a:d1:86:09:22:5f:23:80:56:77:39:36:66:6b:cf:fe:fb:95: 74:3e:d9:20:d2:e7:a7:77:42:16:ac:49:50:be:d2:76:85:a1: f0:9c:bf:79:eb:f2:46:c8:4a:68:d1:e0:02:f3:f9:cf:6c:c6: 0d:c6:e9:2b:bc:8d:ae:6e:b7:f9:c6:c0:fd:d4:9a:da:cf:ac: 3c:85:43:90:27:0a:2a:47:35:80:00:64:49:91:10:d0:eb:52: f8:db:38:01 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICM7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI1MDJDODZCOTIxQTZG N0MyODU1MTJEMDgzNjRBMTA2RjI2RDVEQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC15Vb18AT4TeSplUj2zCvCOyeo6W2FpVn1crZXGkw3WCPq41M+ iXTx3gvRbcZxLP2CLrfYWD65xvJZWvp+gxuHnHuySvF2L/0zXVX42N2nQO9sH2vx jtvmrNERofk/fO3dltIIPv4JKnEYztA5hlaLRcIwTSHO2sLn2mdWtZQuaYEelRzX eLHX0uj24QelGoYrNIUgq8qoQzGJJR0B8vi50hFgpRPyO8POiPXDS9DVEbLz7eG6 L8a3jmk1AzJ1+5crqlEiJezAASMDE71DjdTZfrRU64622f34GQW/JsCf/2qdkeEl ZLXorYQzkaomJje7/DGBj+nzqtBNkCVqK2QlAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUJQLIa5Iab3woVRLQg2ShBvJtXaQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pRTElhNUlhYjN3b1ZSTFFn MlNoQnZKdFhhUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THGAMA0GCSqGSIb3DQEBCwUAA4IBAQChPSb2vuuXTmhV2bvHcx+V0C2iVhv5tomW iKqJV3iQNpe0McnuEjEz3iH9aN1K1Av0Llx6XJuZARTK69nNV2/NLrLz16UMF/OG +5wiWgmOR26j5aoArbUUypEWa3EruS1pmLUQVbHhox/GWXUlAPrs82LR69IUXDOc MS5ZdQkSGYW2xuIEUNOvdNUSNHAh4wSqYdAHm81Gf1S02LHFrHGQ4ZgK0YYJIl8j gFZ3OTZma8/++5V0Ptkg0uend0IWrElQvtJ2haHwnL956/JGyEpo0eAC8/nPbMYN xukrvI2ubrf5xsD91Jraz6w8hUOQJwoqRzWAAGRJkRDQ61L42zgB -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:47 2025 by rpki-client on console.sobornost.net