$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6UXflNjb8f4YqsFYV6uYLhUpj9c.roa File: 6UXflNjb8f4YqsFYV6uYLhUpj9c.roa (raw, json) Hash identifier: DshMI9qaqs1fk1L1n7FIT/jcQL1b2nJ9usjLMN0IGkY= Subject key identifier: E9:45:DF:94:D8:DB:F1:FE:18:AA:C1:58:57:AB:98:2E:15:29:8F:D7 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 115D Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6UXflNjb8f4YqsFYV6uYLhUpj9c.roa Signing time: Mon 26 Aug 2024 05:10:42 +0000 ROA not before: Mon 26 Aug 2024 05:10:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10133 IP address blocks: 203.163.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4445 (0x115d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E945DF94D8DBF1FE18AAC15857AB982E15298FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:3e:fb:73:88:84:76:f9:4e:b3:da:e3:ee: 9d:5d:b0:0e:59:9d:4d:d8:a9:5a:3d:90:d8:65:65: 5c:73:eb:17:32:76:a1:30:70:fc:1b:2e:ca:3f:ee: c7:62:ec:f0:2d:e2:f5:e1:46:45:b2:7b:29:8a:27: b2:f8:a7:6e:29:b0:3c:f6:b9:a8:c6:aa:9b:f9:de: 20:8b:7d:f6:53:d8:ef:70:98:e1:44:fa:75:dc:3f: f6:df:3d:c8:91:aa:11:60:3e:ff:bd:ab:1c:43:82: 25:3c:12:3d:ad:b9:ba:6c:67:2f:c4:0e:3d:32:9b: 36:8a:c6:5d:a9:81:80:9b:a8:20:cf:8a:51:37:f7: b7:69:6c:48:d0:4a:bd:65:81:d1:d5:53:6f:6e:a7: 32:f3:59:cb:f4:44:84:28:d5:b2:62:8b:c3:d9:eb: 62:b2:1a:4d:74:8a:e6:c0:f8:2b:b5:f8:6e:c2:1b: 1b:53:62:a4:f3:43:6a:7c:54:e0:b1:a1:13:57:98: 4b:e2:c9:af:23:44:90:1f:44:17:91:8e:80:7f:e6: 0f:ab:ce:4b:fa:5a:a1:e3:03:2c:43:e2:05:91:82: 95:b0:3c:cb:06:91:42:4d:74:c2:f5:4d:af:18:df: dd:74:b7:1a:af:79:09:a3:7b:ae:f9:55:b9:74:18: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:45:DF:94:D8:DB:F1:FE:18:AA:C1:58:57:AB:98:2E:15:29:8F:D7 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6UXflNjb8f4YqsFYV6uYLhUpj9c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.163.222.0/23 Signature Algorithm: sha256WithRSAEncryption 02:64:d5:b5:d3:cc:0f:b6:c6:5a:0d:04:ba:82:ac:25:72:53: c4:32:8b:54:ef:1e:15:d0:db:dd:a1:af:b6:d1:9a:db:5a:30: 61:81:58:47:a2:16:c9:75:27:2a:68:c9:37:8b:a7:c3:c8:33: bb:0e:9b:66:e4:87:ea:48:e8:c4:c5:47:f3:7a:23:bc:e4:35: b2:3c:43:8d:ff:f4:ed:55:a8:88:be:e3:b5:34:75:8c:ea:22: 29:d8:1b:ab:37:cd:f5:eb:13:d9:0e:5f:11:bc:8c:61:a7:e5: 04:91:51:b1:8a:b0:86:4b:5b:73:70:b6:be:d1:0b:ba:6e:71: d6:c1:a3:f4:a5:7b:b0:25:a6:5f:44:ba:bf:f9:86:9f:1f:57: 45:7b:b4:90:f3:a8:01:e9:41:6f:b7:cd:42:73:d7:01:17:21: ac:b7:94:98:32:cd:16:2f:e5:67:5f:d3:98:d4:0b:34:34:16: 69:2a:9a:bc:fd:fa:22:ae:e2:6b:f3:fb:e8:84:84:e9:4d:b7: 99:1f:f0:68:c2:35:3d:27:07:6e:1c:c6:b1:4c:89:c4:05:58: 93:98:70:44:bb:bf:83:df:30:7b:b6:2d:23:96:08:74:91:7f: bb:cb:01:1d:d9:2b:08:dc:0f:9e:98:91:2e:5e:2b:a5:2a:4a: 8e:d5:f8:e4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU5NDVERjk0RDhEQkYx RkUxOEFBQzE1ODU3QUI5ODJFMTUyOThGRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv0j77c4iEdvlOs9rj7p1dsA5ZnU3YqVo9kNhlZVxz6xcydqEw cPwbLso/7sdi7PAt4vXhRkWyeymKJ7L4p24psDz2uajGqpv53iCLffZT2O9wmOFE +nXcP/bfPciRqhFgPv+9qxxDgiU8Ej2tubpsZy/EDj0ymzaKxl2pgYCbqCDPilE3 97dpbEjQSr1lgdHVU29upzLzWcv0RIQo1bJii8PZ62KyGk10iubA+Cu1+G7CGxtT YqTzQ2p8VOCxoRNXmEviya8jRJAfRBeRjoB/5g+rzkv6WqHjAyxD4gWRgpWwPMsG kUJNdML1Ta8Y3910txqveQmje675Vbl0GNPrAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU6UXflNjb8f4YqsFYV6uYLhUpj9cwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy82VVhmbE5qYjhmNFlx c0ZZVjZ1WUxoVXBqOWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBy6PeMA0GCSqGSIb3DQEBCwUAA4IBAQACZNW108wPtsZaDQS6gqwlclPEMotU 7x4V0Nvdoa+20ZrbWjBhgVhHohbJdScqaMk3i6fDyDO7Dptm5IfqSOjExUfzeiO8 5DWyPEON//TtVaiIvuO1NHWM6iIp2BurN8316xPZDl8RvIxhp+UEkVGxirCGS1tz cLa+0Qu6bnHWwaP0pXuwJaZfRLq/+YafH1dFe7SQ86gB6UFvt81Cc9cBFyGst5SY Ms0WL+VnX9OY1As0NBZpKpq8/foiruJr8/vohITpTbeZH/BowjU9JwduHMaxTInE BViTmHBEu7+D3zB7ti0jlgh0kX+7ywEd2SsI3A+emJEuXiulKkqO1fjk -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:41 2024 by rpki-client on console-fra.rpki-client.org