$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5AtqSHFctAqT5nfF1TGk1zBxTWE.roa File: 5AtqSHFctAqT5nfF1TGk1zBxTWE.roa (raw, json) Hash identifier: 8LOEGqX1rUj22ZFFP0WCxvfrkyBZ7jrnd9Q00xV5RtU= Subject key identifier: E4:0B:6A:48:71:5C:B4:0A:93:E6:77:C5:D5:31:A4:D7:30:71:4D:61 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F72 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5AtqSHFctAqT5nfF1TGk1zBxTWE.roa Signing time: Fri 01 Sep 2023 08:29:09 +0000 ROA not before: Fri 01 Sep 2023 08:29:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 150.116.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3954 (0xf72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E40B6A48715CB40A93E677C5D531A4D730714D61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:4c:2d:b5:68:d8:ac:5a:36:8f:8e:ae:ef: bd:0d:03:68:c3:00:27:11:aa:02:ce:91:dc:33:86: 10:e2:3f:8a:0c:94:6e:7c:e2:d6:a5:2d:21:d7:c5: bf:1f:df:82:cc:ee:66:21:83:7c:98:f0:31:08:4e: e3:b3:9f:c7:ff:bf:a6:d0:b9:52:88:cc:53:53:7b: 64:51:81:40:4c:63:85:24:c5:cf:aa:99:3e:21:62: 30:7a:ff:d8:aa:6f:63:c4:48:ae:c4:3f:64:66:51: 09:f8:8d:20:6f:35:aa:fe:21:cf:ed:fa:f6:d5:e6: 0e:bc:a6:ed:28:41:cf:db:b1:3e:76:1a:b8:7f:e2: b5:75:76:79:cb:e1:b1:41:38:df:51:70:2c:8d:57: 42:0c:3f:2e:6e:4a:1f:e6:5d:73:da:e6:01:e2:5c: 89:2a:59:12:c2:45:90:2f:4f:2b:8a:94:ba:a3:f8: 85:de:4d:16:e5:d1:26:bf:ab:52:ac:89:09:cc:1e: 2e:c9:b4:ce:8b:d4:43:22:34:0e:45:a8:39:ad:c3: 5e:ce:94:65:27:43:dc:13:60:64:d2:9f:94:12:73: 42:90:28:0a:9d:0a:94:11:d0:7e:c8:66:64:78:6d: 65:94:03:bf:e2:91:6b:76:41:c6:bf:5b:2f:87:bc: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0B:6A:48:71:5C:B4:0A:93:E6:77:C5:D5:31:A4:D7:30:71:4D:61 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5AtqSHFctAqT5nfF1TGk1zBxTWE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.170.0/23 Signature Algorithm: sha256WithRSAEncryption ac:4d:2e:49:2b:57:47:c3:f8:2d:98:42:45:fb:e9:bb:58:78: 23:46:e6:44:82:99:58:6d:56:a8:16:2c:ab:28:03:4a:12:2e: 63:0c:55:76:af:a1:86:08:6d:2d:bf:4d:a0:a9:94:af:be:fe: e4:1e:c8:40:d6:ce:c4:73:44:f1:df:c3:e5:ff:61:3b:8d:67: be:7f:3a:e3:75:9d:ac:eb:52:10:4b:77:32:51:3f:43:37:72: ba:d6:15:b2:9e:4a:ea:6e:d7:ae:ac:f7:b3:29:a0:b8:5d:b7: e5:ba:e7:55:9f:ca:19:5c:d8:e4:99:68:bf:de:23:5f:22:f3: d2:7d:ef:5c:39:de:1c:50:06:03:5c:53:b8:92:86:74:33:55: 8d:74:05:17:a8:e3:c4:3b:cf:9a:79:1c:a3:eb:31:ac:2c:d8: 19:df:c1:87:0c:fb:24:7a:54:18:71:f9:d0:34:9f:e0:0b:fd: 49:a6:80:ef:11:71:2b:6a:9a:3f:e6:92:b4:ee:d4:51:9c:c4: 9b:63:52:a2:22:9c:bb:e9:c1:56:c8:1c:8a:b8:70:0a:37:ab: e1:40:a8:ae:6e:61:cb:1a:41:16:ff:1b:4c:8d:9e:39:42:5c: 0e:ab:c3:5a:d0:13:22:c0:96:09:ee:38:9c:2d:3a:dd:d7:59: 38:8c:5c:54 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU0MEI2QTQ4NzE1Q0I0 MEE5M0U2NzdDNUQ1MzFBNEQ3MzA3MTRENjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5i0wttWjYrFo2j46u770NA2jDACcRqgLOkdwzhhDiP4oMlG58 4talLSHXxb8f34LM7mYhg3yY8DEITuOzn8f/v6bQuVKIzFNTe2RRgUBMY4Ukxc+q mT4hYjB6/9iqb2PESK7EP2RmUQn4jSBvNar+Ic/t+vbV5g68pu0oQc/bsT52Grh/ 4rV1dnnL4bFBON9RcCyNV0IMPy5uSh/mXXPa5gHiXIkqWRLCRZAvTyuKlLqj+IXe TRbl0Sa/q1KsiQnMHi7JtM6L1EMiNA5FqDmtw17OlGUnQ9wTYGTSn5QSc0KQKAqd CpQR0H7IZmR4bWWUA7/ikWt2Qca/Wy+HvKBjAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU5AtqSHFctAqT5nfF1TGk1zBxTWEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy81QXRxU0hGY3RBcVQ1 bmZGMVRHazF6QnhUV0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBlnSqMA0GCSqGSIb3DQEBCwUAA4IBAQCsTS5JK1dHw/gtmEJF++m7WHgjRuZE gplYbVaoFiyrKANKEi5jDFV2r6GGCG0tv02gqZSvvv7kHshA1s7Ec0Tx38Pl/2E7 jWe+fzrjdZ2s61IQS3cyUT9DN3K61hWynkrqbteurPezKaC4XbfluudVn8oZXNjk mWi/3iNfIvPSfe9cOd4cUAYDXFO4koZ0M1WNdAUXqOPEO8+aeRyj6zGsLNgZ38GH DPskelQYcfnQNJ/gC/1JpoDvEXErapo/5pK07tRRnMSbY1KiIpy76cFWyByKuHAK N6vhQKiubmHLGkEW/xtMjZ45QlwOq8Na0BMiwJYJ7jicLTrd11k4jFxU -----END CERTIFICATE-----Generated at Tue Jun 18 12:53:57 2024 by rpki-client on console-ams.rpki-client.org