$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TdI2a6b72I_bQe7auSCrkhZvhfU.roa File: TdI2a6b72I_bQe7auSCrkhZvhfU.roa (raw, json) Hash identifier: SSH29jb/XINlYXag/jTrX7WS2COjGYEhC63raaxVx/8= Subject key identifier: 4D:D2:36:6B:A6:FB:D8:8F:DB:41:EE:DA:B9:20:AB:92:16:6F:85:F5 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F89 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TdI2a6b72I_bQe7auSCrkhZvhfU.roa Signing time: Fri 01 Sep 2023 08:29:15 +0000 ROA not before: Fri 01 Sep 2023 08:29:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9831 IP address blocks: 203.163.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3977 (0xf89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:15 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4DD2366BA6FBD88FDB41EEDAB920AB92166F85F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:55:9e:4c:34:b6:cf:2d:94:89:44:41:f7: 44:5f:9d:39:f5:a5:95:ac:0e:36:4e:30:98:60:ea: e0:97:ac:c3:93:51:0f:ec:ca:3c:6f:32:5f:87:dc: f6:e0:1d:50:1a:aa:08:0d:56:bc:be:f8:95:07:c9: 90:ec:e7:f8:40:e3:79:6f:89:f6:ee:06:f8:11:c1: c2:f4:a9:92:b2:f3:a3:79:57:98:92:14:09:81:c1: 0a:18:43:d5:1f:3a:27:4e:55:d4:00:c4:23:5f:73: 7b:88:fc:1d:85:76:3a:3c:79:99:da:01:b9:39:49: f1:f3:8a:d4:a3:43:2a:4b:0a:f2:52:7c:03:be:42: 2c:06:67:87:a0:73:7e:5f:8a:0d:00:84:b9:9d:71: b4:14:9a:19:2f:fb:70:29:8b:41:b0:1f:30:c0:a5: 3d:24:16:c4:3f:89:49:1a:76:20:25:92:5d:13:e8: c3:50:2f:dd:78:39:ec:e7:64:31:2e:59:72:c8:e2: 55:01:39:c7:c3:91:df:15:ac:d1:41:b3:f1:e3:7e: f4:34:5b:77:e4:7b:b3:81:d0:62:06:f0:c3:4c:7d: c2:e6:4c:95:42:b7:91:cb:ff:9b:83:ad:08:49:36: 78:ba:8e:f0:49:e9:d1:0a:c7:39:1c:39:85:9b:eb: df:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D2:36:6B:A6:FB:D8:8F:DB:41:EE:DA:B9:20:AB:92:16:6F:85:F5 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TdI2a6b72I_bQe7auSCrkhZvhfU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.163.201.0/24 Signature Algorithm: sha256WithRSAEncryption 67:f4:74:2b:4d:77:51:d8:65:db:fd:86:de:99:78:f0:df:97: 7a:38:01:91:bc:b3:33:9d:4e:13:ef:59:fc:47:36:48:7c:d8: 23:80:40:34:58:38:29:9d:08:eb:a7:bb:20:c4:be:81:46:14: 5e:59:d9:8b:f7:1e:a3:05:90:d4:57:37:a2:30:4c:70:d0:0b: ad:8a:05:4f:1c:52:81:61:d2:4f:ba:d2:e9:18:35:93:ee:f2: 46:15:44:dd:67:f8:80:9e:84:b8:98:d9:b1:ad:c0:1f:df:9f: 1a:fc:0b:85:92:36:f0:e8:b4:3f:93:8b:ae:bc:66:c2:93:db: a8:3b:3b:d5:98:57:06:cb:5c:9e:d1:a0:38:34:61:d3:16:bd: 80:df:55:a2:02:ba:bc:b3:34:88:8c:a3:10:b7:ca:cd:7a:50: 7f:85:3a:b3:23:ba:18:b6:d3:6b:cc:f0:8b:0a:ed:76:7d:ea: d9:85:20:4e:f5:7c:f9:99:d6:ba:78:93:bb:e5:e7:8f:cc:fb: 0e:6c:f4:fa:4e:4b:52:6a:77:8a:78:16:da:84:0d:99:6a:36: d7:2f:ae:4f:3f:3c:f5:f9:30:9b:24:d8:3d:8d:68:54:cd:cc: 7b:3d:f9:f9:0a:9f:14:1f:90:7b:80:26:cf:10:7f:97:d1:09: db:de:61:4e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRERDIzNjZCQTZGQkQ4 OEZEQjQxRUVEQUI5MjBBQjkyMTY2Rjg1RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB/lWeTDS2zy2UiURB90RfnTn1pZWsDjZOMJhg6uCXrMOTUQ/s yjxvMl+H3PbgHVAaqggNVry++JUHyZDs5/hA43lvifbuBvgRwcL0qZKy86N5V5iS FAmBwQoYQ9UfOidOVdQAxCNfc3uI/B2Fdjo8eZnaAbk5SfHzitSjQypLCvJSfAO+ QiwGZ4egc35fig0AhLmdcbQUmhkv+3Api0GwHzDApT0kFsQ/iUkadiAlkl0T6MNQ L914OeznZDEuWXLI4lUBOcfDkd8VrNFBs/HjfvQ0W3fke7OB0GIG8MNMfcLmTJVC t5HL/5uDrQhJNni6jvBJ6dEKxzkcOYWb699FAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUTdI2a6b72I/bQe7auSCrkhZvhfUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9UZEkyYTZiNzJJX2JR ZTdhdVNDcmtoWnZoZlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAy6PJMA0GCSqGSIb3DQEBCwUAA4IBAQBn9HQrTXdR2GXb/YbemXjw35d6OAGR vLMznU4T71n8RzZIfNgjgEA0WDgpnQjrp7sgxL6BRhReWdmL9x6jBZDUVzeiMExw 0AutigVPHFKBYdJPutLpGDWT7vJGFUTdZ/iAnoS4mNmxrcAf358a/AuFkjbw6LQ/ k4uuvGbCk9uoOzvVmFcGy1ye0aA4NGHTFr2A31WiArq8szSIjKMQt8rNelB/hTqz I7oYttNrzPCLCu12ferZhSBO9Xz5mda6eJO75eePzPsObPT6TktSaneKeBbahA2Z ajbXL65PPzz1+TCbJNg9jWhUzcx7Pfn5Cp8UH5B7gCbPEH+X0Qnb3mFO -----END CERTIFICATE-----Generated at Tue Jun 18 12:53:57 2024 by rpki-client on console-ams.rpki-client.org