$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3fr9Wij-4miulUaTz4iK3kSZVhE.roa File: 3fr9Wij-4miulUaTz4iK3kSZVhE.roa (raw, json) Hash identifier: nvk6C/hhqGzamKGTmdkDhz9ADUWyD2f/0jVR6mBJ5to= Subject key identifier: DD:FA:FD:5A:28:FE:E2:68:AE:95:46:93:CF:88:8A:DE:44:99:56:11 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F9A Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3fr9Wij-4miulUaTz4iK3kSZVhE.roa Signing time: Fri 01 Sep 2023 08:29:20 +0000 ROA not before: Fri 01 Sep 2023 08:29:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131607 IP address blocks: 150.117.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3994 (0xf9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DDFAFD5A28FEE268AE954693CF888ADE44995611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:a6:dd:12:38:57:56:8b:6e:cb:48:d6:33: b6:19:4c:80:f9:89:b8:d4:32:51:16:d3:b6:e7:df: bb:3c:f5:f9:e2:95:4a:51:31:f4:44:2a:43:fe:d7: 46:af:2a:04:2a:82:23:f3:5e:8e:32:81:90:72:bd: 07:c9:8e:9b:ac:55:56:04:cf:0e:d3:53:8c:ec:c5: a4:24:8b:fc:cf:62:92:a6:52:06:25:3c:b2:75:5c: 6a:12:91:cd:73:f1:fb:f0:ee:3b:7c:13:e9:e6:1b: 08:a9:60:4b:fc:00:8a:5f:ee:00:79:28:c6:1a:9b: a0:35:93:33:1b:42:5b:c7:a9:d9:63:9d:4d:44:ed: 32:4c:e2:47:d8:53:1a:f3:46:dd:d0:0c:0a:b1:7c: 35:76:82:b3:36:c8:de:dd:81:12:29:fd:fa:85:0f: b5:91:6e:43:04:3c:12:5b:e1:4d:3a:7a:dd:77:11: 44:36:29:af:c3:06:e6:11:f7:ca:b7:41:bc:7e:53: d2:03:1b:28:c8:c2:a4:dd:25:62:da:fe:b0:2c:59: 78:dd:8b:5d:bb:dd:c2:5e:ef:ae:95:bd:34:e2:7b: 54:1f:98:aa:dc:15:bc:84:ed:6f:a5:f2:0a:ad:8b: f2:10:6d:c7:7b:70:c6:c9:b1:f0:4d:c9:e3:fc:4a: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FA:FD:5A:28:FE:E2:68:AE:95:46:93:CF:88:8A:DE:44:99:56:11 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3fr9Wij-4miulUaTz4iK3kSZVhE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.80.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:05:35:e2:c9:e8:c6:15:93:6e:02:67:41:e7:c9:65:bf:54: 73:8a:e2:54:37:10:b7:c1:35:7f:85:3c:09:71:11:7b:80:1a: 9f:b5:71:bf:74:e8:17:d2:0b:70:9b:ec:ce:ef:b5:2e:5b:ad: fb:de:14:a7:f9:81:b7:da:eb:dd:34:88:46:94:24:b5:e1:94: 61:fe:8d:3a:19:f4:5e:ad:0d:5f:ee:05:a5:59:87:a3:9f:39: 9f:50:f1:bb:8f:2a:7a:06:0c:f2:b0:7e:4e:c8:91:9b:d0:6f: 9f:81:96:e9:79:94:01:e6:13:b4:b2:5a:e4:4c:e0:41:d5:c9: a4:4e:e1:15:b1:e1:f8:e1:60:46:e1:72:6e:e3:69:f5:d1:c2: fc:1d:ea:d4:68:42:ca:fe:ee:4f:ee:fd:e2:a2:cc:54:66:c0: be:74:00:74:35:85:d0:ca:d6:a2:82:a4:fd:a4:68:74:cb:39: f8:28:6e:60:c8:13:c5:88:30:fe:63:0d:fd:ec:84:1a:7c:a1: 34:0e:f0:d6:57:ca:bd:86:79:61:e4:62:d6:92:ff:6b:04:0b: 49:d9:2e:e8:7b:7c:1b:86:54:ff:8d:34:a9:69:35:82:a7:59: 9c:99:88:a9:31:4f:7d:a0:8e:69:c9:4c:f1:17:cd:9b:0f:2e: c5:d7:a0:f2 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERERkFGRDVBMjhGRUUy NjhBRTk1NDY5M0NGODg4QURFNDQ5OTU2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAyKbdEjhXVotuy0jWM7YZTID5ibjUMlEW07bn37s89fnilUpR MfREKkP+10avKgQqgiPzXo4ygZByvQfJjpusVVYEzw7TU4zsxaQki/zPYpKmUgYl PLJ1XGoSkc1z8fvw7jt8E+nmGwipYEv8AIpf7gB5KMYam6A1kzMbQlvHqdljnU1E 7TJM4kfYUxrzRt3QDAqxfDV2grM2yN7dgRIp/fqFD7WRbkMEPBJb4U06et13EUQ2 Ka/DBuYR98q3Qbx+U9IDGyjIwqTdJWLa/rAsWXjdi1273cJe766VvTTie1QfmKrc FbyE7W+l8gqti/IQbcd7cMbJsfBNyeP8So8BAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU3fr9Wij+4miulUaTz4iK3kSZVhEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8zZnI5V2lqLTRtaXVs VWFUejRpSzNrU1pWaEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnVQMA0GCSqGSIb3DQEBCwUAA4IBAQBcBTXiyejGFZNuAmdB58llv1RziuJU NxC3wTV/hTwJcRF7gBqftXG/dOgX0gtwm+zO77UuW6373hSn+YG32uvdNIhGlCS1 4ZRh/o06GfRerQ1f7gWlWYejnzmfUPG7jyp6BgzysH5OyJGb0G+fgZbpeZQB5hO0 slrkTOBB1cmkTuEVseH44WBG4XJu42n10cL8HerUaELK/u5P7v3iosxUZsC+dAB0 NYXQytaigqT9pGh0yzn4KG5gyBPFiDD+Yw397IQafKE0DvDWV8q9hnlh5GLWkv9r BAtJ2S7oe3wbhlT/jTSpaTWCp1mcmYipMU99oI5pyUzxF82bDy7F16Dy -----END CERTIFICATE-----Generated at Tue Jun 18 12:53:57 2024 by rpki-client on console-ams.rpki-client.org