$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Ro6sDKkV5ygvga9qJC4Htb9EB7Y.roa File: Ro6sDKkV5ygvga9qJC4Htb9EB7Y.roa (raw, json) Hash identifier: 5dvKe+adVjjIqSEHKvyOg1GknXyHhJr5TpcBMwRa/wQ= Subject key identifier: 46:8E:AC:0C:A9:15:E7:28:2F:81:AF:6A:24:2E:07:B5:BF:44:07:B6 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0FB1 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Ro6sDKkV5ygvga9qJC4Htb9EB7Y.roa Signing time: Fri 01 Sep 2023 08:29:26 +0000 ROA not before: Fri 01 Sep 2023 08:29:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 63199 IP address blocks: 150.116.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4017 (0xfb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=468EAC0CA915E7282F81AF6A242E07B5BF4407B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:83:23:f8:1e:18:fe:c6:cb:1a:02:e2:c9:84: b8:23:5c:30:20:9e:90:99:c1:e2:79:0d:a5:95:f8: 2b:8d:fd:de:b7:88:f6:f8:ad:8c:af:60:90:3a:68: 3d:01:2b:1a:9c:4c:ca:70:64:84:c7:a9:18:08:d7: 83:91:ea:25:7f:cc:22:17:3e:73:c5:1e:30:1b:4b: 20:ef:11:84:7f:b3:67:b3:98:c8:bd:c5:72:96:3d: dd:9f:c7:5d:af:1e:16:5d:fc:6e:7d:8d:f1:59:b7: ba:24:7a:34:42:55:0d:f1:45:1b:1b:ab:01:15:31: fa:53:e9:17:0d:44:74:ae:72:0a:02:27:8e:c6:b8: b9:50:a8:d2:93:6a:d7:cf:84:d8:54:cc:2f:8a:59: ed:27:b2:c6:e9:6b:9b:d0:7b:ac:e3:f8:2f:23:4d: 1e:23:fd:b5:be:19:bd:47:8c:ac:01:e8:ca:76:e0: 01:74:29:88:bb:98:07:3a:fa:31:68:dd:30:0d:7c: c6:25:ef:11:46:39:a3:6e:68:01:d6:33:b9:39:00: b3:b6:69:06:7c:3f:60:1c:d4:be:68:2a:1c:05:33: 17:c2:1f:72:ba:8f:cc:be:9a:63:1b:80:2d:bb:e3: db:c2:91:4c:c8:db:61:2e:a5:9c:18:22:a2:e7:94: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:AC:0C:A9:15:E7:28:2F:81:AF:6A:24:2E:07:B5:BF:44:07:B6 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Ro6sDKkV5ygvga9qJC4Htb9EB7Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.92.0/22 Signature Algorithm: sha256WithRSAEncryption a8:06:a4:dd:ab:bc:71:23:27:9c:98:4b:0e:2a:e1:83:f1:f0: c3:62:a6:05:79:5d:c3:8d:fd:72:49:66:a5:04:ec:e5:1b:17: db:fb:22:cd:b7:5f:92:cc:d4:8c:2a:7b:38:d8:49:e3:01:31: 3c:75:c5:83:08:a9:a7:7f:9c:ec:b5:98:88:da:30:b5:a7:4a: 85:20:a2:62:cd:76:a9:96:25:f7:25:49:1c:81:41:d5:3f:27: cd:af:35:85:a1:45:ee:04:7e:76:b0:cb:c9:68:8a:c9:3c:2c: 60:89:e1:f6:c2:21:30:6b:44:95:46:d7:aa:6b:08:da:82:eb: 04:c6:40:3e:8c:2b:67:ca:ee:1c:d4:0f:ae:d3:57:e0:a1:82: 7f:a9:51:4f:4f:74:57:c9:3c:89:43:67:1a:a0:55:da:54:0a: a6:c0:6e:e7:a1:8b:a5:68:74:54:65:c5:df:77:28:4c:a9:b5: e7:6c:15:fc:7e:c8:d9:fc:5c:f8:d4:e1:8b:4e:68:bb:00:ac: 66:18:26:09:eb:10:a7:58:9e:67:35:75:88:c5:26:ac:0d:c8: 63:3b:97:56:0b:72:47:31:69:6b:19:62:75:39:33:21:c2:18: c7:3f:a3:c6:68:6d:ab:53:56:df:fd:b5:c6:b0:4d:81:fb:a4: a2:53:03:7b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ2OEVBQzBDQTkxNUU3 MjgyRjgxQUY2QTI0MkUwN0I1QkY0NDA3QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbgyP4Hhj+xssaAuLJhLgjXDAgnpCZweJ5DaWV+CuN/d63iPb4 rYyvYJA6aD0BKxqcTMpwZITHqRgI14OR6iV/zCIXPnPFHjAbSyDvEYR/s2ezmMi9 xXKWPd2fx12vHhZd/G59jfFZt7okejRCVQ3xRRsbqwEVMfpT6RcNRHSucgoCJ47G uLlQqNKTatfPhNhUzC+KWe0nssbpa5vQe6zj+C8jTR4j/bW+Gb1HjKwB6Mp24AF0 KYi7mAc6+jFo3TANfMYl7xFGOaNuaAHWM7k5ALO2aQZ8P2Ac1L5oKhwFMxfCH3K6 j8y+mmMbgC2749vCkUzI22EupZwYIqLnlH83AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQURo6sDKkV5ygvga9qJC4Htb9EB7YwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9SbzZzREtrVjV5Z3Zn YTlxSkM0SHRiOUVCN1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClnRcMA0GCSqGSIb3DQEBCwUAA4IBAQCoBqTdq7xxIyecmEsOKuGD8fDDYqYF eV3Djf1ySWalBOzlGxfb+yLNt1+SzNSMKns42EnjATE8dcWDCKmnf5zstZiI2jC1 p0qFIKJizXapliX3JUkcgUHVPyfNrzWFoUXuBH52sMvJaIrJPCxgieH2wiEwa0SV RteqawjagusExkA+jCtnyu4c1A+u01fgoYJ/qVFPT3RXyTyJQ2caoFXaVAqmwG7n oYulaHRUZcXfdyhMqbXnbBX8fsjZ/Fz41OGLTmi7AKxmGCYJ6xCnWJ5nNXWIxSas DchjO5dWC3JHMWlrGWJ1OTMhwhjHP6PGaG2rU1bf/bXGsE2B+6SiUwN7 -----END CERTIFICATE-----Generated at Tue Jun 18 12:53:57 2024 by rpki-client on console-ams.rpki-client.org