$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KUGguKjBbo5xV0_ZHNAZjNCs1Mk.roa File: KUGguKjBbo5xV0_ZHNAZjNCs1Mk.roa (raw, json) Hash identifier: sidi+L7+8AFHZDfvi9pWdU4k36snS01WZuAPwf5UDbM= Subject key identifier: 29:41:A0:B8:A8:C1:6E:8E:71:57:4F:D9:1C:D0:19:8C:D0:AC:D4:C9 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1173 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KUGguKjBbo5xV0_ZHNAZjNCs1Mk.roa Signing time: Mon 26 Aug 2024 05:10:47 +0000 ROA not before: Mon 26 Aug 2024 05:10:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10085 IP address blocks: 203.163.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4467 (0x1173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2941A0B8A8C16E8E71574FD91CD0198CD0ACD4C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:90:93:f8:e4:da:3e:04:26:7b:8e:f5:c6:ab: 51:13:b3:0c:c9:66:d7:8c:e7:e2:41:e3:ac:43:2f: 4d:d7:ed:17:da:2a:ae:d4:02:3d:cd:1e:af:a8:cc: 50:1d:75:a6:f2:4e:bf:65:79:9a:f2:84:06:10:22: 78:7f:d4:d6:2f:58:c0:d8:9d:54:fc:c1:55:63:a2: 72:c9:fa:ff:de:36:d8:46:52:2c:4d:16:e4:e4:66: a5:08:cb:af:91:4e:96:03:22:ab:d0:ac:df:7a:3f: bc:15:4d:c3:9a:a8:3a:c0:3f:b9:c5:6f:02:59:0b: 61:1d:0f:4a:ca:49:b1:12:bc:aa:bc:6d:5c:2d:7d: 3d:73:55:5d:d7:19:4d:55:e6:95:ab:13:9e:4e:31: 31:d5:cd:67:d2:b9:d7:7c:ae:9b:bf:cd:de:04:13: 4a:ba:07:bc:a2:29:6a:d6:44:1b:e4:e4:50:45:ca: 4b:04:2c:06:59:d7:7a:e0:8d:7a:ec:f7:65:7a:3f: a1:18:e5:39:f7:16:6b:31:bb:9e:c8:39:b8:43:d4: 02:70:b7:d2:d5:2c:2c:f5:69:f0:44:2d:71:e8:c5: 66:05:96:08:a9:e6:36:4e:fa:2c:0d:41:63:2b:72: c5:15:94:84:90:ac:d7:df:ba:2e:0d:c8:ba:f7:cb: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:41:A0:B8:A8:C1:6E:8E:71:57:4F:D9:1C:D0:19:8C:D0:AC:D4:C9 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KUGguKjBbo5xV0_ZHNAZjNCs1Mk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.163.194.0/23 Signature Algorithm: sha256WithRSAEncryption 91:b1:e8:e4:b3:e5:4d:5d:3a:8f:2d:e9:bc:dc:3c:44:fb:28: 30:f4:b4:53:9e:68:84:0a:67:30:57:96:90:22:62:e4:e5:70: 8f:07:81:58:9c:ce:11:69:26:d0:f3:47:2d:53:19:e2:ee:ed: 51:60:ea:1c:5d:5a:f5:a7:41:8c:65:e7:f8:6b:ae:67:93:45: 9c:57:eb:45:1e:b5:46:41:f4:81:df:17:19:46:de:36:db:79: 3a:97:02:b6:e2:47:ab:92:97:78:aa:65:16:bd:f2:01:ad:2f: aa:0c:18:60:84:93:91:b1:69:62:22:1a:d5:02:9d:e6:1d:b0: 62:a6:a8:a2:80:bb:e4:56:a1:23:41:92:a4:23:0d:dc:34:24: ce:4c:98:77:39:a6:05:8f:ac:a7:b7:c0:ba:fa:d7:e2:08:0c: c2:a3:cf:7e:7e:27:81:e3:4f:7e:7f:c9:82:4c:58:79:4a:13: c3:43:ca:31:30:ae:af:1d:cd:88:fb:20:a4:5a:59:8f:8f:8f: a8:de:69:02:4e:06:7f:2e:0f:21:98:13:7c:74:93:1e:4d:f9: e5:15:95:c6:2b:72:4c:f6:18:67:98:3b:48:15:07:34:fa:7e: 81:e0:6c:b2:f9:af:6b:f7:11:71:f9:bc:8e:d8:4b:65:ac:08: 6c:18:b7:dc -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI5NDFBMEI4QThDMTZF OEU3MTU3NEZEOTFDRDAxOThDRDBBQ0Q0QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDikJP45No+BCZ7jvXGq1ETswzJZteM5+JB46xDL03X7RfaKq7U Aj3NHq+ozFAddabyTr9leZryhAYQInh/1NYvWMDYnVT8wVVjonLJ+v/eNthGUixN FuTkZqUIy6+RTpYDIqvQrN96P7wVTcOaqDrAP7nFbwJZC2EdD0rKSbESvKq8bVwt fT1zVV3XGU1V5pWrE55OMTHVzWfSudd8rpu/zd4EE0q6B7yiKWrWRBvk5FBFyksE LAZZ13rgjXrs92V6P6EY5Tn3Fmsxu57IObhD1AJwt9LVLCz1afBELXHoxWYFlgip 5jZO+iwNQWMrcsUVlISQrNffui4NyLr3y+LJAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUKUGguKjBbo5xV0/ZHNAZjNCs1MkwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9LVUdndUtqQmJvNXhW MF9aSE5BWmpOQ3MxTWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBy6PCMA0GCSqGSIb3DQEBCwUAA4IBAQCRsejks+VNXTqPLem83DxE+ygw9LRT nmiECmcwV5aQImLk5XCPB4FYnM4RaSbQ80ctUxni7u1RYOocXVr1p0GMZef4a65n k0WcV+tFHrVGQfSB3xcZRt4223k6lwK24kerkpd4qmUWvfIBrS+qDBhghJORsWli IhrVAp3mHbBipqiigLvkVqEjQZKkIw3cNCTOTJh3OaYFj6ynt8C6+tfiCAzCo89+ fieB409+f8mCTFh5ShPDQ8oxMK6vHc2I+yCkWlmPj4+o3mkCTgZ/Lg8hmBN8dJMe TfnlFZXGK3JM9hhnmDtIFQc0+n6B4Gyy+a9r9xFx+byO2EtlrAhsGLfc -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:47 2024 by rpki-client on console-ams.rpki-client.org