$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/sTsVNrKL4Y9xa0M3kXZlE1lxaIA.roa File: sTsVNrKL4Y9xa0M3kXZlE1lxaIA.roa (raw, json) Hash identifier: e8+PnmhGjzhwDiJMc4Zt0ToKgF03OjpRmtdGArqeAKU= Subject key identifier: B1:3B:15:36:B2:8B:E1:8F:71:6B:43:37:91:76:65:13:59:71:68:80 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1284 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/sTsVNrKL4Y9xa0M3kXZlE1lxaIA.roa Signing time: Mon 10 Feb 2025 14:14:57 +0000 ROA not before: Mon 10 Feb 2025 14:14:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131607 IP address blocks: 150.117.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4740 (0x1284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B13B1536B28BE18F716B43379176651359716880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:55:7f:9a:34:0f:3a:41:7e:dc:e2:1d:48: 50:2b:04:d9:a8:9d:09:9f:77:45:14:af:71:91:d4: 1d:28:2f:06:0f:ed:71:e7:90:26:cb:26:9a:3e:85: 21:0f:52:b1:b1:b1:ef:7c:b4:26:a5:ed:b1:c8:37: 0e:9f:f5:08:00:38:61:fb:04:12:39:dd:8f:96:4f: b5:d8:74:05:a1:eb:0e:a7:25:aa:3d:84:20:97:59: 69:13:0b:d6:f9:bc:c6:c0:ab:db:2c:bf:a1:a8:81: a6:2e:29:1c:a4:c5:9a:67:63:03:f7:81:4d:30:70: 72:9a:05:b6:89:4d:5f:68:90:d8:06:69:90:99:f9: 87:db:b5:45:77:a4:05:9b:82:f9:29:33:db:2b:31: 62:64:ae:62:b9:61:96:35:2b:27:36:2b:8c:49:df: 9c:bb:33:7a:b0:df:15:3e:ef:47:e8:c5:5a:6a:bb: a7:57:03:09:be:a2:de:03:02:d3:15:06:6a:cd:53: d6:ab:9e:2e:7e:1d:78:be:cc:45:ba:0b:69:0e:2b: d5:7a:02:94:ba:5b:d6:2d:9d:f7:13:f0:50:74:22: d2:21:28:41:01:7e:6a:58:4a:77:d8:4f:f5:b5:e1: ff:13:6d:40:49:51:1c:3a:ea:b8:74:b5:2b:ee:05: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3B:15:36:B2:8B:E1:8F:71:6B:43:37:91:76:65:13:59:71:68:80 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/sTsVNrKL4Y9xa0M3kXZlE1lxaIA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.176.0/20 Signature Algorithm: sha256WithRSAEncryption 72:0d:c5:ac:6f:35:12:af:25:f9:ce:02:7e:8c:2e:f6:bb:34: 82:c4:c1:19:3d:1a:8a:28:44:25:c6:86:bc:32:bd:3a:14:13: 05:5f:f0:fb:32:60:08:ae:9f:dd:a2:86:91:3a:9d:6a:ef:bf: d1:a2:7e:6a:c0:da:d1:30:f7:0e:6c:ae:db:bf:1c:7a:be:1a: 16:46:cb:ac:a9:b1:d6:60:e5:5b:d3:cc:b9:13:a0:a3:f8:9f: e2:d1:3b:40:84:e9:bf:d9:a9:b9:ab:74:42:f7:47:2b:fe:68: 1e:44:7a:e6:5b:f1:52:fd:51:c1:fa:7d:5d:64:44:0c:d0:b2: 77:56:e3:be:d2:92:36:99:1b:e2:3c:be:71:e1:2d:9b:b9:ac: 67:16:ed:aa:45:8c:d3:ad:84:08:83:d6:68:c3:39:8b:bb:66: d1:17:83:7c:e7:26:1f:12:fe:22:ac:86:19:0d:58:01:60:c2: e1:51:61:c5:2b:81:00:fc:92:92:9e:04:da:9e:42:38:24:dd: e6:57:00:a7:95:a5:9a:b3:cc:3d:12:e4:ba:df:c1:c0:2f:b4: af:bb:eb:ad:78:7c:12:5b:2e:98:70:f3:d8:c6:eb:22:23:b1: 09:92:e3:3b:42:4c:75:27:e7:d7:d3:6c:96:ad:40:d2:9a:ce: 1b:8b:ff:32 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxM0IxNTM2QjI4QkUx OEY3MTZCNDMzNzkxNzY2NTEzNTk3MTY4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgaFV/mjQPOkF+3OIdSFArBNmonQmfd0UUr3GR1B0oLwYP7XHn kCbLJpo+hSEPUrGxse98tCal7bHINw6f9QgAOGH7BBI53Y+WT7XYdAWh6w6nJao9 hCCXWWkTC9b5vMbAq9ssv6GogaYuKRykxZpnYwP3gU0wcHKaBbaJTV9okNgGaZCZ +YfbtUV3pAWbgvkpM9srMWJkrmK5YZY1Kyc2K4xJ35y7M3qw3xU+70foxVpqu6dX Awm+ot4DAtMVBmrNU9arni5+HXi+zEW6C2kOK9V6ApS6W9YtnfcT8FB0ItIhKEEB fmpYSnfYT/W14f8TbUBJURw66rh0tSvuBfwrAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUsTsVNrKL4Y9xa0M3kXZlE1lxaIAwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9zVHNWTnJLTDRZOXhh ME0za1habEUxbHhhSUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnWwMA0GCSqGSIb3DQEBCwUAA4IBAQByDcWsbzUSryX5zgJ+jC72uzSCxMEZ PRqKKEQlxoa8Mr06FBMFX/D7MmAIrp/dooaROp1q77/Ron5qwNrRMPcObK7bvxx6 vhoWRsusqbHWYOVb08y5E6Cj+J/i0TtAhOm/2am5q3RC90cr/mgeRHrmW/FS/VHB +n1dZEQM0LJ3VuO+0pI2mRviPL5x4S2buaxnFu2qRYzTrYQIg9ZowzmLu2bRF4N8 5yYfEv4irIYZDVgBYMLhUWHFK4EA/JKSngTankI4JN3mVwCnlaWas8w9EuS638HA L7Svu+uteHwSWy6YcPPYxusiI7EJkuM7Qkx1J+fX02yWrUDSms4bi/8y -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:26 2025 by rpki-client