$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-i8X8eTEm6-R3c0Q0Tkqk1kLcwU.roa File: -i8X8eTEm6-R3c0Q0Tkqk1kLcwU.roa (raw, json) Hash identifier: cU0gEWNwT+r/mDm2vrc18MfZUzWt5nv33Et0aSPlMvo= Subject key identifier: FA:2F:17:F1:E4:C4:9B:AF:91:DD:CD:10:D1:39:2A:93:59:0B:73:05 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0FB0 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-i8X8eTEm6-R3c0Q0Tkqk1kLcwU.roa Signing time: Fri 01 Sep 2023 08:29:25 +0000 ROA not before: Fri 01 Sep 2023 08:29:25 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 150.116.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4016 (0xfb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:25 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FA2F17F1E4C49BAF91DDCD10D1392A93590B7305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:63:cc:f7:25:29:86:c7:89:13:b9:0e:60: 63:40:e7:5e:9c:88:ab:84:10:5c:d1:64:e8:ba:a4: 46:b8:71:b4:a4:97:77:f5:c7:54:91:13:27:3b:48: c7:8b:da:1f:a0:9e:7e:23:96:69:b7:0a:32:06:03: 92:5e:83:74:a1:9d:19:9f:74:14:4e:55:16:56:f3: 1c:40:62:3c:6b:06:b0:78:e5:d1:a7:89:25:a0:6e: 66:cf:16:9a:6f:d0:5c:a3:1c:2d:29:ba:39:29:3f: 49:6e:95:3c:82:0a:8b:04:1a:08:de:2d:2f:9d:de: 88:ff:78:e8:69:c5:fc:61:56:12:4d:ba:5e:01:a5: a8:4a:fb:e0:a9:00:b8:ab:29:8a:20:c1:43:3d:3f: e7:06:e9:3e:7f:91:61:cc:66:c6:24:6d:e6:8c:3c: 8a:35:86:10:1e:57:e3:20:69:81:c4:d6:4a:cc:4a: 22:94:87:a6:56:57:eb:11:97:31:15:3a:1a:b4:fe: 97:a5:aa:0a:d5:a4:0c:2e:5a:cd:1e:30:8c:c1:b8: 58:1e:9e:18:aa:fd:d4:24:d4:09:ab:66:f2:97:40: 71:2c:44:76:1c:13:1f:75:9d:fa:ff:cc:17:41:52: 70:21:36:4c:aa:d1:f2:d6:27:b8:51:5e:cf:ad:1c: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2F:17:F1:E4:C4:9B:AF:91:DD:CD:10:D1:39:2A:93:59:0B:73:05 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-i8X8eTEm6-R3c0Q0Tkqk1kLcwU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.32.0/20 Signature Algorithm: sha256WithRSAEncryption 01:0b:41:03:5f:cd:f4:4e:8e:aa:2e:9b:7c:36:78:50:60:57: e1:22:9b:1f:2c:f5:da:e3:be:7b:d0:f4:13:c7:53:fd:2d:a0: d6:9e:75:b8:f3:a5:79:bb:fc:a0:3a:63:99:81:32:51:a2:8f: e8:10:72:12:dc:96:51:cf:3b:a9:c4:3a:cc:37:c7:36:14:aa: e0:39:be:f8:e0:c3:9d:50:96:ef:ec:41:c5:d0:aa:20:55:ef: f0:a9:d9:ac:b7:3d:2d:41:9f:27:f7:b6:cf:8e:3b:b4:69:9e: 54:6b:4f:25:ff:45:f4:08:9b:94:ff:89:a8:13:e2:f9:fa:9a: 6b:9f:72:97:61:bc:db:09:79:0d:bf:2b:0c:9e:d1:f0:62:61: 07:b8:5b:66:6c:36:eb:12:bd:73:b8:46:e1:11:83:e9:2c:50: 1e:3a:24:23:f6:27:b6:65:75:30:1c:f6:1c:99:b2:d8:bc:2e: 6d:4b:1a:a3:80:76:ee:04:91:94:38:1f:d9:34:b0:e9:0e:7b: 00:e7:63:fd:a2:0e:43:bb:dd:f3:7a:3e:11:34:18:9c:cc:66: 02:0b:80:23:34:7e:8c:09:51:9a:34:58:2f:4c:83:c0:c8:dd: 3f:08:cf:18:52:ef:17:a9:70:56:20:6e:a7:71:e3:07:4d:2b: 0a:2f:d5:83 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZBMkYxN0YxRTRDNDlC QUY5MUREQ0QxMEQxMzkyQTkzNTkwQjczMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2a2PM9yUphseJE7kOYGNA516ciKuEEFzRZOi6pEa4cbSkl3f1 x1SREyc7SMeL2h+gnn4jlmm3CjIGA5Jeg3ShnRmfdBROVRZW8xxAYjxrBrB45dGn iSWgbmbPFppv0FyjHC0pujkpP0lulTyCCosEGgjeLS+d3oj/eOhpxfxhVhJNul4B pahK++CpALirKYogwUM9P+cG6T5/kWHMZsYkbeaMPIo1hhAeV+MgaYHE1krMSiKU h6ZWV+sRlzEVOhq0/pelqgrVpAwuWs0eMIzBuFgenhiq/dQk1AmrZvKXQHEsRHYc Ex91nfr/zBdBUnAhNkyq0fLWJ7hRXs+tHBGDAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU+i8X8eTEm6+R3c0Q0Tkqk1kLcwUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8taThYOGVURW02LVIz YzBRMFRrcWsxa0xjd1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnQgMA0GCSqGSIb3DQEBCwUAA4IBAQABC0EDX830To6qLpt8NnhQYFfhIpsf LPXa47570PQTx1P9LaDWnnW486V5u/ygOmOZgTJRoo/oEHIS3JZRzzupxDrMN8c2 FKrgOb744MOdUJbv7EHF0KogVe/wqdmstz0tQZ8n97bPjju0aZ5Ua08l/0X0CJuU /4moE+L5+pprn3KXYbzbCXkNvysMntHwYmEHuFtmbDbrEr1zuEbhEYPpLFAeOiQj 9ie2ZXUwHPYcmbLYvC5tSxqjgHbuBJGUOB/ZNLDpDnsA52P9og5Du93zej4RNBic zGYCC4AjNH6MCVGaNFgvTIPAyN0/CM8YUu8XqXBWIG6nceMHTSsKL9WD -----END CERTIFICATE-----Generated at Tue Jun 18 12:53:57 2024 by rpki-client on console-ams.rpki-client.org