$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C9l_dx5i7fL-g_dLY5pZPM9EPLU.roa File: C9l_dx5i7fL-g_dLY5pZPM9EPLU.roa (raw, json) Hash identifier: lGrN5wOhv/L2lBsMG3hle79CWN1DCSJpu+Ur1moMdZA= Subject key identifier: 0B:D9:7F:77:1E:62:ED:F2:FE:83:F7:4B:63:9A:59:3C:CF:44:3C:B5 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0FCE Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C9l_dx5i7fL-g_dLY5pZPM9EPLU.roa Signing time: Fri 01 Sep 2023 08:29:35 +0000 ROA not before: Fri 01 Sep 2023 08:29:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 118.150.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4046 (0xfce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0BD97F771E62EDF2FE83F74B639A593CCF443CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:55:c3:bf:b7:24:34:0f:bb:12:a7:ef:38: 3c:ee:1a:b6:1f:e8:be:13:7e:fc:97:5a:05:6e:10: eb:8a:6a:e9:f8:2c:8c:54:46:4b:b9:8a:3f:54:43: bc:7b:13:d8:07:ea:e5:34:f2:d8:7e:ab:c5:6b:f2: 56:40:59:86:15:54:c7:93:08:ec:b8:86:81:3d:ed: 93:0e:55:d6:d5:ab:bf:0c:a5:83:4d:ca:6a:60:65: 75:a1:9b:7a:c1:14:8b:73:b4:72:74:51:b3:3d:33: 78:ad:53:10:38:10:68:0b:bf:1e:52:44:ab:2a:cd: b4:39:3e:dd:8d:67:d6:d6:69:be:89:6b:74:82:92: 3d:d0:3b:0e:69:c9:a2:2f:57:08:5b:b3:27:7c:15: 37:d1:d1:71:7d:19:d2:28:08:2b:0b:21:5c:45:b6: 6c:81:ea:57:be:f6:ac:41:a8:97:7b:f1:73:b1:8d: e5:84:5b:c8:3d:0b:1f:19:91:70:23:30:4c:f7:f6: dd:bf:de:f4:98:de:74:68:a3:92:31:ee:f1:01:fd: e7:97:35:a3:5d:46:d9:3f:8a:34:84:a0:85:39:37: 7c:ad:6e:89:11:c8:d1:fe:1a:e2:87:64:54:27:15: e4:ae:df:02:60:03:f9:eb:3e:0a:92:e3:5a:cf:6e: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D9:7F:77:1E:62:ED:F2:FE:83:F7:4B:63:9A:59:3C:CF:44:3C:B5 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C9l_dx5i7fL-g_dLY5pZPM9EPLU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.150.232.0/21 Signature Algorithm: sha256WithRSAEncryption 07:f0:12:b9:3e:91:08:e6:1a:81:42:64:95:80:54:19:c2:74: 56:b8:01:ba:3b:cd:b2:64:0e:25:fd:b0:ca:6f:df:ad:e2:0f: 1c:6d:bb:2f:96:88:0e:fc:a2:98:2e:c1:f5:5c:e7:60:be:f9: 0b:31:ee:15:32:cb:b2:61:a9:8e:36:88:25:20:5f:4d:10:4a: a1:3e:5a:bd:94:a9:48:b1:e4:5c:e1:60:a6:d1:b0:de:30:1f: 6e:ed:1f:56:fb:f6:10:81:16:30:e7:09:5e:45:48:23:58:8a: 49:d2:c2:c8:9a:83:97:11:ec:c5:40:c1:6f:14:b2:fd:2f:66: 07:9e:52:af:5f:47:df:be:53:d8:39:be:54:5b:d0:d5:7b:eb: f6:f3:d0:49:26:71:ff:a2:ea:22:aa:bb:96:0a:b0:22:46:21: 01:61:b3:04:a4:85:7b:5e:aa:39:26:1a:95:4c:c8:f4:04:bb: a0:5d:a6:e4:15:3c:60:86:79:56:42:fe:d7:ec:fa:ea:c3:2a: e3:d2:6f:b7:9b:56:d2:64:55:64:ee:fe:65:f0:a9:fc:f7:e6: 10:18:d8:47:c2:58:db:e1:f3:24:3e:95:2b:7a:88:1e:b0:f5: 8c:96:c7:5f:cf:e4:29:6c:e2:6e:77:43:3c:b1:2e:59:f8:1f: 29:eb:5c:36 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBCRDk3Rjc3MUU2MkVE RjJGRTgzRjc0QjYzOUE1OTNDQ0Y0NDNDQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCly1XDv7ckNA+7EqfvODzuGrYf6L4TfvyXWgVuEOuKaun4LIxU Rku5ij9UQ7x7E9gH6uU08th+q8Vr8lZAWYYVVMeTCOy4hoE97ZMOVdbVq78MpYNN ympgZXWhm3rBFItztHJ0UbM9M3itUxA4EGgLvx5SRKsqzbQ5Pt2NZ9bWab6Ja3SC kj3QOw5pyaIvVwhbsyd8FTfR0XF9GdIoCCsLIVxFtmyB6le+9qxBqJd78XOxjeWE W8g9Cx8ZkXAjMEz39t2/3vSY3nRoo5Ix7vEB/eeXNaNdRtk/ijSEoIU5N3ytbokR yNH+GuKHZFQnFeSu3wJgA/nrPgqS41rPbqdLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUC9l/dx5i7fL+g/dLY5pZPM9EPLUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9DOWxfZHg1aTdmTC1n X2RMWTVwWlBNOUVQTFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDdpboMA0GCSqGSIb3DQEBCwUAA4IBAQAH8BK5PpEI5hqBQmSVgFQZwnRWuAG6 O82yZA4l/bDKb9+t4g8cbbsvlogO/KKYLsH1XOdgvvkLMe4VMsuyYamONoglIF9N EEqhPlq9lKlIseRc4WCm0bDeMB9u7R9W+/YQgRYw5wleRUgjWIpJ0sLImoOXEezF QMFvFLL9L2YHnlKvX0ffvlPYOb5UW9DVe+v289BJJnH/ouoiqruWCrAiRiEBYbME pIV7Xqo5JhqVTMj0BLugXabkFTxghnlWQv7X7Prqwyrj0m+3m1bSZFVk7v5l8Kn8 9+YQGNhHwljb4fMkPpUreogesPWMlsdfz+QpbOJud0M8sS5Z+B8p61w2 -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:36 2024 by rpki-client on console-fra.rpki-client.org