$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/UkRG8-gaMe9LhiSFTryYEP_xczk.roa File: UkRG8-gaMe9LhiSFTryYEP_xczk.roa (raw, json) Hash identifier: bGBLuRHMKiuoac5y5O2xygk4Xgrc2rvOGVNln+yS+AU= Subject key identifier: 52:44:46:F3:E8:1A:31:EF:4B:86:24:85:4E:BC:98:10:FF:F1:73:39 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 125D Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/UkRG8-gaMe9LhiSFTryYEP_xczk.roa Signing time: Mon 10 Feb 2025 14:14:45 +0000 ROA not before: Mon 10 Feb 2025 14:14:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.117.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4701 (0x125d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=524446F3E81A31EF4B8624854EBC9810FFF17339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:e1:58:bd:b2:df:19:4c:a1:e4:7d:f8:06: d0:e3:fd:b5:e9:f6:ee:c8:5f:e8:6d:e1:9f:80:9d: e5:8c:06:e8:65:7f:ab:13:94:d8:1f:b5:cb:c7:5a: 17:fe:63:a1:66:9a:4e:ee:a9:7f:6a:72:58:3c:ba: bf:8c:b4:c4:dd:01:da:fc:6a:df:13:f3:ab:90:b2: 6c:71:e8:33:9e:46:d6:49:17:56:56:c8:4b:53:a6: aa:fb:95:ce:3d:38:ef:f3:51:52:ac:f9:bf:15:51: 0e:de:bf:1c:a2:7d:f8:73:a9:2e:2b:50:5d:70:e5: fd:77:9e:97:19:b0:c1:f8:4f:00:0c:27:40:27:51: c5:88:a8:82:b2:30:44:8e:40:65:14:c9:51:41:f9: b9:a6:ad:08:9b:b4:a4:f1:17:48:ba:e2:73:c1:14: 59:82:c0:78:50:85:ca:76:e5:80:24:88:b1:85:0d: df:c5:b8:d7:5f:92:37:a4:3a:d9:15:43:2f:40:94: 3c:51:c3:53:16:1e:52:5a:20:07:6a:f6:5b:91:55: 61:98:ce:56:f3:72:4e:46:3f:5f:bb:e8:29:82:6b: 5e:43:68:47:90:6a:d2:6b:44:f2:4b:d6:ac:af:b5: 38:c2:b6:49:b2:2b:e0:5d:5c:f0:61:f7:82:7b:81: 03:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:44:46:F3:E8:1A:31:EF:4B:86:24:85:4E:BC:98:10:FF:F1:73:39 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/UkRG8-gaMe9LhiSFTryYEP_xczk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.128.0/19 Signature Algorithm: sha256WithRSAEncryption 53:56:7f:2a:8e:be:6f:28:a4:e9:f1:f0:9a:51:e9:fa:16:73: 04:62:c9:5d:c3:7f:0d:9a:4d:17:43:84:94:90:de:49:95:c7: fe:ec:2e:19:e0:7e:65:db:3e:8d:9c:61:39:0f:1d:f8:5c:36: dd:55:c8:6c:e5:c6:11:58:78:14:52:af:18:f3:a2:f4:05:0b: fa:28:d9:e7:5c:80:70:6b:7b:5d:ec:39:8d:f4:70:e7:cf:e4: f3:8c:58:a9:7d:26:7c:bc:b1:1a:c4:1e:c1:a5:12:56:88:6e: 1b:9e:31:0c:ed:49:41:8c:80:69:25:c0:f8:60:5d:a7:21:10: a1:16:8e:d1:33:11:4a:14:e7:f5:78:56:38:d0:49:45:41:dc: 21:15:75:80:fc:ce:34:3d:8e:2a:59:10:38:ee:d5:4d:16:3c: c9:f0:7f:e7:22:98:8d:3f:b2:12:89:d9:30:6b:06:09:51:8b: 12:9d:01:19:3c:b3:84:dd:9f:51:23:ea:2a:1f:15:21:0f:b4: 80:73:fd:d8:5d:f4:75:7c:6f:81:d0:8a:b1:c6:fe:90:07:89: ac:55:25:7c:3e:07:28:0b:ca:10:d7:fb:09:76:b9:80:7a:4f: a6:56:d3:bf:31:be:57:24:fd:ce:5a:6f:a3:10:13:0f:df:35: 2e:b6:6f:a1 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUyNDQ0NkYzRTgxQTMx RUY0Qjg2MjQ4NTRFQkM5ODEwRkZGMTczMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNoeFYvbLfGUyh5H34BtDj/bXp9u7IX+ht4Z+AneWMBuhlf6sT lNgftcvHWhf+Y6Fmmk7uqX9qclg8ur+MtMTdAdr8at8T86uQsmxx6DOeRtZJF1ZW yEtTpqr7lc49OO/zUVKs+b8VUQ7evxyiffhzqS4rUF1w5f13npcZsMH4TwAMJ0An UcWIqIKyMESOQGUUyVFB+bmmrQibtKTxF0i64nPBFFmCwHhQhcp25YAkiLGFDd/F uNdfkjekOtkVQy9AlDxRw1MWHlJaIAdq9luRVWGYzlbzck5GP1+76CmCa15DaEeQ atJrRPJL1qyvtTjCtkmyK+BdXPBh94J7gQNPAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUUkRG8+gaMe9LhiSFTryYEP/xczkwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9Va1JHOC1nYU1lOUxo aVNGVHJ5WUVQX3hjemsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFlnWAMA0GCSqGSIb3DQEBCwUAA4IBAQBTVn8qjr5vKKTp8fCaUen6FnMEYsld w38Nmk0XQ4SUkN5Jlcf+7C4Z4H5l2z6NnGE5Dx34XDbdVchs5cYRWHgUUq8Y86L0 BQv6KNnnXIBwa3td7DmN9HDnz+TzjFipfSZ8vLEaxB7BpRJWiG4bnjEM7UlBjIBp JcD4YF2nIRChFo7RMxFKFOf1eFY40ElFQdwhFXWA/M40PY4qWRA47tVNFjzJ8H/n IpiNP7ISidkwawYJUYsSnQEZPLOE3Z9RI+oqHxUhD7SAc/3YXfR1fG+B0Iqxxv6Q B4msVSV8PgcoC8oQ1/sJdrmAek+mVtO/Mb5XJP3OWm+jEBMP3zUutm+h -----END CERTIFICATE-----Generated at Sun Apr 6 01:57:34 2025 by rpki-client