$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fYmzTzIQ-LYi9Yo60JMVivDqfRo.roa File: fYmzTzIQ-LYi9Yo60JMVivDqfRo.roa (raw, json) Hash identifier: Cx9XsK0yjHsgj/TjsKrWhEj3/fd4EK+waZsMzJj6ZOg= Subject key identifier: 7D:89:B3:4F:32:10:F8:B6:22:F5:8A:3A:D0:93:15:8A:F0:EA:7D:1A Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 11AB Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fYmzTzIQ-LYi9Yo60JMVivDqfRo.roa Signing time: Mon 26 Aug 2024 05:11:02 +0000 ROA not before: Mon 26 Aug 2024 05:11:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7532 IP address blocks: 150.116.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4523 (0x11ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:11:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7D89B34F3210F8B622F58A3AD093158AF0EA7D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:8b:b2:b9:4b:42:a5:f0:fb:f6:62:a5:7d: 76:c8:36:ee:bc:54:25:97:85:e4:42:e2:2c:0e:83: 2c:6f:0b:54:f4:80:d3:85:a8:04:08:0b:5c:13:94: 97:6c:cb:51:7c:3f:a3:c0:2f:91:8a:33:ec:6a:f6: c6:29:1e:84:82:0a:31:d1:cd:53:7d:b9:24:4a:29: b6:2d:29:48:48:ad:6a:ec:9a:b2:b8:dc:e4:46:51: 3e:69:c3:72:e9:ce:5e:01:ca:8c:85:fc:db:3c:95: 27:1b:d9:0c:fd:38:64:62:f5:b4:66:9a:84:70:b8: 4f:7b:5d:f0:92:cd:69:7d:6f:3d:75:be:37:ed:cd: b3:94:8b:e2:8f:23:1f:97:c5:72:54:66:aa:37:7a: d5:0a:63:99:c6:d3:a4:df:a3:bf:56:13:78:f1:fc: 15:1a:54:6f:82:7e:7b:d3:18:cb:5c:07:94:1f:1b: 23:2b:1b:e0:b3:73:dd:b0:d4:18:63:0e:45:56:47: 61:fb:8c:df:0a:d6:96:76:87:8e:ad:be:c7:a9:87: 39:d5:75:48:a2:76:e2:b7:b1:d4:65:9b:c5:b4:16: d8:21:e1:03:01:79:d4:45:4a:68:ec:f2:b7:51:70: 18:7b:0b:72:72:26:78:54:82:c3:99:78:35:cd:38: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:89:B3:4F:32:10:F8:B6:22:F5:8A:3A:D0:93:15:8A:F0:EA:7D:1A X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fYmzTzIQ-LYi9Yo60JMVivDqfRo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.56.0/21 Signature Algorithm: sha256WithRSAEncryption 19:57:8a:d3:4c:fd:c6:a1:36:5e:6e:82:93:fc:f9:dd:48:dd: 8e:b1:6b:7e:70:1d:60:ef:f5:2a:e1:2d:84:72:a3:f2:9b:da: a0:d3:39:75:f2:f2:d2:04:62:23:8c:a5:0a:db:2e:63:9c:6d: e2:bb:0e:73:a1:b5:0b:36:f7:b0:95:ca:08:7b:57:07:e0:9c: 6b:98:e4:ca:46:b5:30:d9:3e:bc:64:e4:ff:29:e6:2e:7b:e6: 2f:48:60:fd:e4:76:31:7b:13:83:05:6b:d9:bc:b6:39:0c:7d: e9:30:bb:e9:da:5d:5a:9a:de:61:26:0c:4a:5d:64:af:0e:91: 35:33:03:c1:b8:6e:89:64:17:d2:a0:72:4d:5c:a6:dc:aa:51: 5c:09:16:d7:5d:7e:8b:4b:33:fb:28:29:eb:e2:06:ea:67:f7: 89:9a:cc:c4:14:b8:0e:01:16:03:e6:93:d8:13:c0:ec:93:08: 3d:29:75:f9:8b:83:fb:92:c6:f8:b5:35:5f:34:f4:3c:cc:46: a9:82:1e:7b:34:38:ad:24:2d:66:de:e7:0e:ab:31:1e:0a:13: a5:94:94:ba:94:f0:3e:d5:0c:23:89:94:bf:e4:dc:29:f8:78: 03:58:be:65:99:97:b3:44:e0:03:b5:e6:cf:98:82:3a:8b:e3: b5:61:be:93 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTExMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdEODlCMzRGMzIxMEY4 QjYyMkY1OEEzQUQwOTMxNThBRjBFQTdEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJVYuyuUtCpfD79mKlfXbINu68VCWXheRC4iwOgyxvC1T0gNOF qAQIC1wTlJdsy1F8P6PAL5GKM+xq9sYpHoSCCjHRzVN9uSRKKbYtKUhIrWrsmrK4 3ORGUT5pw3Lpzl4ByoyF/Ns8lScb2Qz9OGRi9bRmmoRwuE97XfCSzWl9bz11vjft zbOUi+KPIx+XxXJUZqo3etUKY5nG06Tfo79WE3jx/BUaVG+CfnvTGMtcB5QfGyMr G+Czc92w1BhjDkVWR2H7jN8K1pZ2h46tvsephznVdUiiduK3sdRlm8W0Ftgh4QMB edRFSmjs8rdRcBh7C3JyJnhUgsOZeDXNOG5ZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUfYmzTzIQ+LYi9Yo60JMVivDqfRowHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9mWW16VHpJUS1MWWk5 WW82MEpNVml2RHFmUm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnQ4MA0GCSqGSIb3DQEBCwUAA4IBAQAZV4rTTP3GoTZeboKT/PndSN2OsWt+ cB1g7/Uq4S2EcqPym9qg0zl18vLSBGIjjKUK2y5jnG3iuw5zobULNvewlcoIe1cH 4JxrmOTKRrUw2T68ZOT/KeYue+YvSGD95HYxexODBWvZvLY5DH3pMLvp2l1amt5h JgxKXWSvDpE1MwPBuG6JZBfSoHJNXKbcqlFcCRbXXX6LSzP7KCnr4gbqZ/eJmszE FLgOARYD5pPYE8Dskwg9KXX5i4P7ksb4tTVfNPQ8zEapgh57NDitJC1m3ucOqzEe ChOllJS6lPA+1QwjiZS/5Nwp+HgDWL5lmZezROADtebPmII6i+O1Yb6T -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:47 2024 by rpki-client on console-ams.rpki-client.org