$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XD-KJ3ViNd3Ytz3g97ZBgOoGvtg.roa File: XD-KJ3ViNd3Ytz3g97ZBgOoGvtg.roa (raw, json) Hash identifier: PS5U8TRAD2oAftkkV/5FvtHS5WPXO3IolT80Yed91yQ= Subject key identifier: 5C:3F:8A:27:75:62:35:DD:D8:B7:3D:E0:F7:B6:41:80:EA:06:BE:D8 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F8C Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XD-KJ3ViNd3Ytz3g97ZBgOoGvtg.roa Signing time: Fri 01 Sep 2023 08:29:16 +0000 ROA not before: Fri 01 Sep 2023 08:29:16 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131607 IP address blocks: 150.117.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3980 (0xf8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:16 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5C3F8A27756235DDD8B73DE0F7B64180EA06BED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:32:4b:3b:93:26:e5:1f:40:09:63:23:48:ba: 35:91:50:cf:0f:8b:00:31:70:c4:85:0d:7d:13:c8: 69:7a:f7:34:7d:e3:b1:2e:65:6b:1f:b2:e7:14:31: 92:24:3d:32:51:34:dd:bc:fb:19:98:63:0b:d1:aa: 5a:61:ed:ab:3e:e0:37:bf:94:03:89:7f:80:98:1a: d5:dd:0c:06:37:ae:88:c9:f2:84:26:10:a7:ab:88: 1e:1b:28:73:9f:f6:6a:90:0e:21:7f:27:2c:f2:a1: 3e:6d:39:7d:db:92:d5:ea:0b:f9:92:bf:ea:7c:7a: da:80:67:23:cb:c0:68:9b:cf:9f:8b:cb:c8:ab:5f: b0:43:d0:83:92:58:c8:6d:68:a0:0b:49:45:eb:7f: bf:3e:59:1a:25:3f:58:f2:85:07:4a:dc:17:bb:0d: 32:6f:5d:f3:e9:14:c4:02:90:aa:37:cd:98:af:02: ab:2f:e0:ba:a0:ff:ce:13:da:16:66:c7:87:1d:17: 69:e3:68:36:73:3f:f4:be:09:36:01:a7:2b:a3:b7: b1:ee:b1:9c:2d:c6:65:3b:d9:ea:75:d2:75:2c:c0: 35:5f:d2:ec:3f:dc:dd:30:19:f1:4b:e8:ef:c2:d1: 04:28:c3:59:78:b9:4f:1f:b8:0e:b6:0c:da:54:14: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3F:8A:27:75:62:35:DD:D8:B7:3D:E0:F7:B6:41:80:EA:06:BE:D8 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XD-KJ3ViNd3Ytz3g97ZBgOoGvtg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.176.0/20 Signature Algorithm: sha256WithRSAEncryption 23:49:fd:00:af:8a:9d:5f:ad:2e:ff:7b:e7:98:e6:88:ba:b6: b7:8b:32:4e:4d:6e:8b:90:19:ca:e7:37:ac:ef:31:a4:83:d6: a0:16:3e:69:2f:af:18:3c:fd:19:b6:9e:7f:b9:9f:7d:f7:46: ba:ed:03:21:1c:df:e7:a7:4b:c8:c8:44:02:c7:1b:95:40:37: 27:e0:09:12:69:e2:24:c4:c0:64:56:25:83:94:19:90:00:4c: 6c:0e:e6:73:09:80:7e:b2:a3:73:b0:81:5f:48:08:51:71:f4: 76:6a:c3:62:35:cc:30:b2:fb:64:8a:cc:ff:04:a9:df:f9:65: 12:63:8a:0b:f6:0f:e1:83:0a:0d:18:92:1d:12:09:89:06:57: d6:61:2e:a9:09:ef:dc:5c:77:39:e0:c6:3e:d6:3d:66:dc:04: 5d:2e:28:60:40:8b:82:06:cd:81:78:41:b1:8f:a4:2b:83:58: 64:cd:d2:e0:3b:30:54:8e:27:ff:4f:44:71:7b:79:3a:ea:7b: 3d:06:93:04:51:3f:6c:eb:90:65:04:4b:33:6b:12:63:dc:df: b5:cd:b6:95:f1:65:d4:a8:f9:f8:a8:b5:69:40:d8:9a:e0:d7: 41:4d:bb:ce:2e:2d:1c:20:7a:e3:10:db:bf:c5:31:9b:ff:7a: 69:ba:a3:6a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVDM0Y4QTI3NzU2MjM1 REREOEI3M0RFMEY3QjY0MTgwRUEwNkJFRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtMks7kyblH0AJYyNIujWRUM8PiwAxcMSFDX0TyGl69zR947Eu ZWsfsucUMZIkPTJRNN28+xmYYwvRqlph7as+4De/lAOJf4CYGtXdDAY3rojJ8oQm EKeriB4bKHOf9mqQDiF/JyzyoT5tOX3bktXqC/mSv+p8etqAZyPLwGibz5+Ly8ir X7BD0IOSWMhtaKALSUXrf78+WRolP1jyhQdK3Be7DTJvXfPpFMQCkKo3zZivAqsv 4Lqg/84T2hZmx4cdF2njaDZzP/S+CTYBpyujt7HusZwtxmU72ep10nUswDVf0uw/ 3N0wGfFL6O/C0QQow1l4uU8fuA62DNpUFOcnAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUXD+KJ3ViNd3Ytz3g97ZBgOoGvtgwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9YRC1LSjNWaU5kM1l0 ejNnOTdaQmdPb0d2dGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnWwMA0GCSqGSIb3DQEBCwUAA4IBAQAjSf0Ar4qdX60u/3vnmOaIura3izJO TW6LkBnK5zes7zGkg9agFj5pL68YPP0Ztp5/uZ9990a67QMhHN/np0vIyEQCxxuV QDcn4AkSaeIkxMBkViWDlBmQAExsDuZzCYB+sqNzsIFfSAhRcfR2asNiNcwwsvtk isz/BKnf+WUSY4oL9g/hgwoNGJIdEgmJBlfWYS6pCe/cXHc54MY+1j1m3ARdLihg QIuCBs2BeEGxj6Qrg1hkzdLgOzBUjif/T0Rxe3k66ns9BpMEUT9s65BlBEszaxJj 3N+1zbaV8WXUqPn4qLVpQNia4NdBTbvOLi0cIHrjENu/xTGb/3ppuqNq -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:36 2024 by rpki-client on console-fra.rpki-client.org