$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/a0EBaHmB0jG8680fYtLxAZkitUE.roa File: a0EBaHmB0jG8680fYtLxAZkitUE.roa (raw, json) Hash identifier: r/39E32nQtD2TK3iWoAdDzsCFjTGCq3NaYlGLoU7KnU= Subject key identifier: 6B:41:01:68:79:81:D2:31:BC:EB:CD:1F:62:D2:F1:01:99:22:B5:41 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12C1 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/a0EBaHmB0jG8680fYtLxAZkitUE.roa Signing time: Mon 10 Feb 2025 14:15:11 +0000 ROA not before: Mon 10 Feb 2025 14:15:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4801 (0x12c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6B4101687981D231BCEBCD1F62D2F1019922B541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:c0:2e:01:86:1e:8c:53:c1:84:08:31:4d: d3:cb:65:ea:38:30:df:c5:b0:a2:90:b0:bd:e4:47: 93:5f:54:e2:25:d1:af:c7:f2:87:28:2a:f0:60:ee: 83:9f:c7:91:e5:52:6c:88:6c:23:39:8d:0f:05:dd: 24:f4:31:43:cc:bd:0b:e4:87:d1:5e:9b:21:20:6f: 66:4f:36:d7:5a:18:9d:bc:5c:e9:9b:08:25:9a:f9: 72:8e:ab:69:69:8f:13:85:0a:99:4b:e2:33:70:29: 21:1a:4d:83:24:24:52:c5:3f:72:57:63:b4:81:0f: 86:bf:97:74:a9:81:1c:7c:ec:39:0f:31:0e:3a:58: 60:38:f1:d1:97:8c:1b:a9:53:a8:60:c4:c4:0e:9f: 2f:33:c2:45:b7:74:0e:b8:3d:b3:e9:7b:b3:a8:6e: 2f:2f:02:eb:3a:74:46:d2:bf:99:47:3d:2c:a7:25: cc:97:8a:3c:c6:84:91:1d:1e:88:65:fa:e9:de:8f: 60:e6:bb:2a:b2:71:28:3a:4e:b9:7a:c6:df:82:0c: 6f:fb:7c:94:51:8d:cf:f8:59:df:f3:7d:34:a4:6f: c3:5a:92:6f:f6:77:51:d4:1e:67:d9:7c:52:db:0b: 7f:8d:51:72:53:53:a4:39:34:4f:3c:25:be:00:a7: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:41:01:68:79:81:D2:31:BC:EB:CD:1F:62:D2:F1:01:99:22:B5:41 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/a0EBaHmB0jG8680fYtLxAZkitUE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.48.0/22 Signature Algorithm: sha256WithRSAEncryption 31:a2:a9:4f:a7:71:50:46:ef:ce:69:8b:53:ca:fd:2c:ee:a8: 09:7a:13:d1:30:d0:50:fc:87:e1:9a:56:ff:3e:1d:6e:ec:b1: 5a:fc:ce:c7:5e:39:13:c2:0c:ee:87:d2:cb:25:e4:cf:e5:d0: c5:e4:32:e4:a1:97:9a:04:44:91:e8:da:0e:43:cc:7a:80:dc: fa:63:6b:67:fc:ef:d4:13:06:21:40:45:f3:d3:b8:e1:3c:72: db:c5:43:97:6e:ad:dc:25:4f:d6:15:55:c0:fd:26:25:d0:9b: a2:9d:86:8f:ec:e4:21:4e:39:c8:ab:66:2b:08:6c:f8:58:c2: 72:d5:87:6b:25:eb:25:da:37:4e:ab:55:35:3b:75:81:5e:86: 8b:e6:73:89:42:bc:4a:82:8f:41:83:35:87:8a:03:af:cd:d9: b1:dd:6b:7d:dd:f7:42:2f:d3:19:ae:81:35:60:95:fb:d9:ba: e6:14:9d:72:0c:28:eb:98:53:84:81:63:33:4d:c1:75:18:44: 18:ca:a5:94:04:59:f2:5d:fa:5d:92:2c:74:dd:73:65:3f:dc: 37:01:88:e5:21:c4:c4:16:eb:01:69:b5:13:e9:1d:41:0c:24: 30:85:c8:f5:07:7a:9d:86:35:94:64:f3:a1:9e:0a:1c:15:7f: 57:7a:b7:fa -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCNDEwMTY4Nzk4MUQy MzFCQ0VCQ0QxRjYyRDJGMTAxOTkyMkI1NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy8MAuAYYejFPBhAgxTdPLZeo4MN/FsKKQsL3kR5NfVOIl0a/H 8ocoKvBg7oOfx5HlUmyIbCM5jQ8F3ST0MUPMvQvkh9FemyEgb2ZPNtdaGJ28XOmb CCWa+XKOq2lpjxOFCplL4jNwKSEaTYMkJFLFP3JXY7SBD4a/l3SpgRx87DkPMQ46 WGA48dGXjBupU6hgxMQOny8zwkW3dA64PbPpe7Oobi8vAus6dEbSv5lHPSynJcyX ijzGhJEdHohl+unej2DmuyqycSg6Trl6xt+CDG/7fJRRjc/4Wd/zfTSkb8Nakm/2 d1HUHmfZfFLbC3+NUXJTU6Q5NE88Jb4Ap5yhAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUa0EBaHmB0jG8680fYtLxAZkitUEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9hMEVCYUhtQjBqRzg2 ODBmWXRMeEFaa2l0VUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClnQwMA0GCSqGSIb3DQEBCwUAA4IBAQAxoqlPp3FQRu/OaYtTyv0s7qgJehPR MNBQ/Ifhmlb/Ph1u7LFa/M7HXjkTwgzuh9LLJeTP5dDF5DLkoZeaBESR6NoOQ8x6 gNz6Y2tn/O/UEwYhQEXz07jhPHLbxUOXbq3cJU/WFVXA/SYl0JuinYaP7OQhTjnI q2YrCGz4WMJy1YdrJesl2jdOq1U1O3WBXoaL5nOJQrxKgo9BgzWHigOvzdmx3Wt9 3fdCL9MZroE1YJX72brmFJ1yDCjrmFOEgWMzTcF1GEQYyqWUBFnyXfpdkix03XNl P9w3AYjlIcTEFusBabUT6R1BDCQwhcj1B3qdhjWUZPOhngocFX9Xerf6 -----END CERTIFICATE-----Generated at Sat Apr 5 16:28:46 2025 by rpki-client