$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Aq0USPcNDeLC3nJLqcE3ZXHT9gQ.roa File: Aq0USPcNDeLC3nJLqcE3ZXHT9gQ.roa (raw, json) Hash identifier: 1VSljsmib0jqNXyqcBP6sKnA8ISxNA+vCtHKrjAyhWA= Subject key identifier: 02:AD:14:48:F7:0D:0D:E2:C2:DE:72:4B:A9:C1:37:65:71:D3:F6:04 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F8A Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Aq0USPcNDeLC3nJLqcE3ZXHT9gQ.roa Signing time: Fri 01 Sep 2023 08:29:15 +0000 ROA not before: Fri 01 Sep 2023 08:29:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 223.26.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:15 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=02AD1448F70D0DE2C2DE724BA9C1376571D3F604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:dc:a1:cd:c4:c1:8d:af:fe:73:7f:8a:b3: 51:40:31:12:39:b7:ea:27:c4:74:95:92:62:cb:dc: b9:f3:bf:6f:5a:f5:0d:37:0c:46:e3:1f:df:bb:6f: f2:93:bc:49:8f:24:bd:df:6d:13:c5:ae:73:bc:24: 01:6c:cd:84:3e:d9:36:1b:91:94:95:f1:55:0e:93: 13:d5:8f:19:83:42:eb:99:c1:d0:e9:4c:32:9e:9e: bd:cd:74:22:c4:ea:1a:4b:42:b2:31:be:be:90:5f: f3:fc:d4:d3:db:91:ed:df:24:ff:6b:1d:81:43:3b: f8:d0:c2:01:4e:ce:5d:ec:97:85:bf:d1:b4:45:75: a6:6f:4a:3a:8a:43:10:10:80:57:98:76:40:4e:ac: 3f:44:f3:b5:1b:34:d1:ad:8d:37:0d:4a:42:bf:5c: 68:52:7d:6c:0a:8d:10:65:97:63:d7:24:a7:dd:0c: 46:dc:5d:a1:f9:fa:3e:44:03:d0:bc:dc:5e:c1:d5: 55:86:5b:a7:52:4a:62:fc:2e:d5:3d:24:ad:f3:97: d1:93:bb:c5:84:09:00:42:89:76:bd:b8:db:81:f6: 86:ca:14:d5:63:03:42:29:72:c2:a9:94:82:d8:c1: 86:a0:87:ed:69:f0:16:10:41:42:a4:60:02:fb:e1: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AD:14:48:F7:0D:0D:E2:C2:DE:72:4B:A9:C1:37:65:71:D3:F6:04 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Aq0USPcNDeLC3nJLqcE3ZXHT9gQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.104.0/22 Signature Algorithm: sha256WithRSAEncryption 00:a3:6a:e8:e0:c3:31:d6:37:6f:4f:f9:a3:ac:ca:f5:57:bf: 22:b8:44:28:6e:23:9d:06:f2:c6:1f:a6:46:e0:ae:72:3d:52: 8c:34:97:04:3e:02:5a:19:f9:4a:6b:16:21:0e:80:80:c3:3a: 49:cd:af:5f:a9:f9:ae:2e:ac:05:b7:28:52:34:31:4a:82:ea: d5:33:3e:d3:d4:b7:a7:37:94:be:dc:44:92:d8:a9:06:d5:74: 30:9e:e2:30:d6:cc:92:3c:8e:78:08:fe:94:17:c5:29:12:a9: be:e9:28:33:dc:78:82:e5:74:a9:cf:29:46:23:87:ba:5b:83: 50:d7:6f:f1:99:98:9a:70:51:d3:b0:2a:94:9c:5e:08:ed:69: c4:2b:b4:bd:c7:a5:de:8b:d7:37:1c:1b:8a:46:96:33:51:7d: 9e:fa:e4:15:df:0a:5c:5f:0c:60:3a:28:8f:d5:1b:13:1c:d3: 92:d4:06:2c:e1:8a:fb:3d:d6:bd:ce:d4:88:35:cd:0a:5e:73: 1b:e1:3b:e3:ef:c6:42:a4:57:04:89:65:41:eb:49:09:92:e9: 68:47:f6:19:19:48:59:b2:8e:7d:d9:8c:17:c3:0b:75:a5:09: 62:1a:4b:8e:db:42:34:d6:05:76:f4:d1:9f:63:89:cf:89:6b: 5f:fc:18:fc -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAyQUQxNDQ4RjcwRDBE RTJDMkRFNzI0QkE5QzEzNzY1NzFEM0Y2MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKxtyhzcTBja/+c3+Ks1FAMRI5t+onxHSVkmLL3Lnzv29a9Q03 DEbjH9+7b/KTvEmPJL3fbRPFrnO8JAFszYQ+2TYbkZSV8VUOkxPVjxmDQuuZwdDp TDKenr3NdCLE6hpLQrIxvr6QX/P81NPbke3fJP9rHYFDO/jQwgFOzl3sl4W/0bRF daZvSjqKQxAQgFeYdkBOrD9E87UbNNGtjTcNSkK/XGhSfWwKjRBll2PXJKfdDEbc XaH5+j5EA9C83F7B1VWGW6dSSmL8LtU9JK3zl9GTu8WECQBCiXa9uNuB9obKFNVj A0IpcsKplILYwYagh+1p8BYQQUKkYAL74YPxAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUAq0USPcNDeLC3nJLqcE3ZXHT9gQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9BcTBVU1BjTkRlTEMz bkpMcWNFM1pYSFQ5Z1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQC3xpoMA0GCSqGSIb3DQEBCwUAA4IBAQAAo2ro4MMx1jdvT/mjrMr1V78iuEQo biOdBvLGH6ZG4K5yPVKMNJcEPgJaGflKaxYhDoCAwzpJza9fqfmuLqwFtyhSNDFK gurVMz7T1LenN5S+3ESS2KkG1XQwnuIw1sySPI54CP6UF8UpEqm+6Sgz3HiC5XSp zylGI4e6W4NQ12/xmZiacFHTsCqUnF4I7WnEK7S9x6Xei9c3HBuKRpYzUX2e+uQV 3wpcXwxgOiiP1RsTHNOS1AYs4Yr7Pda9ztSINc0KXnMb4Tvj78ZCpFcEiWVB60kJ kuloR/YZGUhZso592YwXwwt1pQliGkuO20I01gV29NGfY4nPiWtf/Bj8 -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:36 2024 by rpki-client on console-fra.rpki-client.org