$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1aYLuSGbWIInILZ3POTNZ2nOV5U.roa File: 1aYLuSGbWIInILZ3POTNZ2nOV5U.roa (raw, json) Hash identifier: WolA0rnUy78SyuM+iGh1pbtxEeKpfrYtfI0Y4sOmbZI= Subject key identifier: D5:A6:0B:B9:21:9B:58:82:27:20:B6:77:3C:E4:CD:67:69:CE:57:95 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1289 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1aYLuSGbWIInILZ3POTNZ2nOV5U.roa Signing time: Mon 10 Feb 2025 14:14:58 +0000 ROA not before: Mon 10 Feb 2025 14:14:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4745 (0x1289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D5A60BB9219B58822720B6773CE4CD6769CE5795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:f5:e8:f3:b7:45:59:57:c7:7b:07:7a:40: dc:69:ee:b3:f9:f8:07:22:b7:93:87:6e:af:77:2d: 13:6a:ae:c7:46:bc:f2:96:74:55:41:71:a5:5e:3e: 6f:3e:5d:0b:53:31:d1:1c:96:84:ac:a0:e9:5d:7f: 80:30:95:e3:d1:75:e7:4d:d6:e0:4a:c3:08:47:3a: ce:19:16:47:e3:6d:b5:ba:ff:ff:e8:cd:4f:98:37: 90:1f:c6:cf:9c:e2:14:c7:52:a7:e5:15:dc:47:78: 0e:c5:25:0b:26:24:62:20:4c:12:08:59:19:66:91: 07:cd:52:09:1a:ce:d6:97:95:62:a6:76:7f:77:70: 60:32:00:6b:cf:39:5b:3b:9d:f9:70:a3:18:4a:62: ae:52:df:30:d5:28:7f:8d:92:70:c0:c2:20:7e:2e: 74:38:94:34:8a:52:90:93:2e:be:21:c6:98:f9:98: 6e:4c:08:c3:96:10:cb:f9:b7:d6:73:1d:e9:2b:77: 1b:55:ed:13:ce:81:87:a3:fb:12:79:6e:5b:dd:57: 90:51:60:78:a3:78:b8:60:44:99:ff:da:6d:c0:34: fe:04:9e:43:a8:ea:4a:a3:c3:8a:ec:65:5d:07:7a: 38:69:88:0a:9c:c1:20:54:7b:42:35:0b:0b:b7:70: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A6:0B:B9:21:9B:58:82:27:20:B6:77:3C:E4:CD:67:69:CE:57:95 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1aYLuSGbWIInILZ3POTNZ2nOV5U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.176.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:e2:fb:1c:05:f5:d8:da:a7:04:1c:ac:90:61:15:4d:73:20: da:37:ba:a4:c8:29:31:51:0b:b2:99:da:07:43:b8:4d:0e:fe: 52:99:e1:9e:3e:c0:69:91:41:fc:54:21:9b:fa:18:a4:55:1d: b6:f1:e5:bf:9f:32:15:b9:4c:1a:c9:10:25:32:d4:f3:67:23: 75:61:fc:7a:d3:ac:cf:20:00:47:be:d1:2c:b9:60:00:64:a8: 03:c3:bf:a2:75:50:89:1f:9c:90:68:57:d4:f3:96:77:ab:0f: 89:be:e6:0a:b2:46:0b:09:7b:da:1f:14:f5:14:e6:03:f7:33: ba:e5:ae:d7:ea:25:33:86:a1:ee:3e:53:4a:4c:2e:59:3d:12: fc:d2:3c:38:8d:bb:5e:35:3a:07:56:9a:58:76:7c:cf:77:46: 6c:47:ba:77:16:03:c4:81:f8:5e:a3:bf:ed:23:f4:7d:f3:88: 3b:63:41:52:ae:3c:10:8d:58:68:ee:63:f5:58:a0:9a:ef:a0: f1:78:fd:37:61:9c:b5:f4:d6:4d:bb:66:5f:da:39:37:30:ee: d5:4d:1f:71:6c:bf:e8:ef:00:14:2a:3f:7f:96:0f:e9:e7:12: a1:f9:3d:53:8d:c5:4e:dc:38:e6:dd:14:7d:09:70:73:1f:f3: 1b:2b:93:ef -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1QTYwQkI5MjE5QjU4 ODIyNzIwQjY3NzNDRTRDRDY3NjlDRTU3OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCk/Xo87dFWVfHewd6QNxp7rP5+Acit5OHbq93LRNqrsdGvPKW dFVBcaVePm8+XQtTMdEcloSsoOldf4AwlePRdedN1uBKwwhHOs4ZFkfjbbW6///o zU+YN5Afxs+c4hTHUqflFdxHeA7FJQsmJGIgTBIIWRlmkQfNUgkaztaXlWKmdn93 cGAyAGvPOVs7nflwoxhKYq5S3zDVKH+NknDAwiB+LnQ4lDSKUpCTLr4hxpj5mG5M CMOWEMv5t9ZzHekrdxtV7RPOgYej+xJ5blvdV5BRYHijeLhgRJn/2m3ANP4EnkOo 6kqjw4rsZV0HejhpiAqcwSBUe0I1Cwu3cEknAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU1aYLuSGbWIInILZ3POTNZ2nOV5UwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8xYVlMdVNHYldJSW5J TFozUE9UTloybk9WNVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnSwMA0GCSqGSIb3DQEBCwUAA4IBAQAK4vscBfXY2qcEHKyQYRVNcyDaN7qk yCkxUQuymdoHQ7hNDv5SmeGePsBpkUH8VCGb+hikVR228eW/nzIVuUwayRAlMtTz ZyN1Yfx606zPIABHvtEsuWAAZKgDw7+idVCJH5yQaFfU85Z3qw+JvuYKskYLCXva HxT1FOYD9zO65a7X6iUzhqHuPlNKTC5ZPRL80jw4jbteNToHVppYdnzPd0ZsR7p3 FgPEgfheo7/tI/R984g7Y0FSrjwQjVho7mP1WKCa76DxeP03YZy19NZNu2Zf2jk3 MO7VTR9xbL/o7wAUKj9/lg/p5xKh+T1TjcVO3Djm3RR9CXBzH/MbK5Pv -----END CERTIFICATE-----Generated at Sun Apr 6 01:37:56 2025 by rpki-client