$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/svprwrAisCPJsRnV0FCUTYV10uc.roa File: svprwrAisCPJsRnV0FCUTYV10uc.roa (raw, json) Hash identifier: p9ISLkJmhy7rBEovMNqXHvWUMbIJ2BHVeVZ9okN2eTQ= Subject key identifier: B2:FA:6B:C2:B0:22:B0:23:C9:B1:19:D5:D0:50:94:4D:85:75:D2:E7 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F96 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/svprwrAisCPJsRnV0FCUTYV10uc.roa Signing time: Fri 01 Sep 2023 08:29:20 +0000 ROA not before: Fri 01 Sep 2023 08:29:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7532 IP address blocks: 150.116.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3990 (0xf96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B2FA6BC2B022B023C9B119D5D050944D8575D2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:06:1c:3e:79:d2:e3:28:46:cf:2e:b1:91: 59:91:05:9c:e8:27:ac:93:d5:1e:8a:8a:ef:4e:5b: c6:5a:52:af:d6:b3:b1:bd:81:54:37:34:d3:21:e4: 53:52:dc:cc:4c:32:86:eb:2e:20:81:5e:30:41:51: 7a:b3:a2:fa:e0:37:ac:33:f3:97:af:71:fb:03:92: b3:e0:a7:c1:90:db:d6:26:a7:f3:70:92:b7:ed:5f: 9a:d1:34:29:06:ac:16:db:d8:c9:fe:f9:70:90:b9: c6:16:18:47:5d:62:ab:aa:d3:ef:10:85:c6:1e:52: 92:bf:e6:34:d4:8a:d8:6e:03:93:21:b8:c9:de:66: ac:1e:74:aa:08:86:ce:f5:b2:83:a5:0d:9d:88:aa: f0:58:f9:80:6c:89:18:10:8f:49:dd:d5:22:6e:96: bd:b1:41:0d:d5:a6:60:cc:25:fa:87:c7:dc:db:24: 57:a7:14:18:fb:96:07:20:a6:2d:5f:fb:b8:a2:d9: 39:79:4a:f4:6a:75:78:e1:8e:80:10:5c:7b:4f:a1: 39:97:eb:d2:d5:9a:ff:93:3d:85:ec:15:03:0c:76: 34:d3:79:d4:84:5c:5d:df:48:db:db:f2:af:ba:ff: 56:af:0f:20:85:85:69:98:87:f3:1d:20:cb:d8:0b: 95:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FA:6B:C2:B0:22:B0:23:C9:B1:19:D5:D0:50:94:4D:85:75:D2:E7 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/svprwrAisCPJsRnV0FCUTYV10uc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.55.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:4b:cd:d0:e7:1d:54:7d:78:49:f9:67:d8:19:63:63:12:54: 68:f5:6d:43:c2:f4:8b:7c:55:23:c1:87:34:0b:3d:fb:f5:74: d3:8b:58:b4:27:29:72:2b:5c:21:e8:00:45:cc:67:c8:cd:af: 32:1f:23:c0:08:d3:8f:5c:4c:8f:54:0e:cf:16:eb:3f:cf:42: f0:cd:c2:28:a6:0d:a3:23:62:0c:5d:83:71:c1:79:f1:34:03: 53:23:ea:31:86:85:1c:5a:b3:02:a1:0c:8e:af:90:43:ee:24: 85:85:1e:0c:20:8b:99:55:19:ef:30:dd:34:d3:0f:45:30:7b: 4e:f7:83:c1:0a:7a:c5:27:43:19:a8:c0:28:fc:a0:89:ff:e3: 1f:6b:c8:a1:72:7e:06:58:e3:06:87:83:8b:2d:da:61:33:20: f1:2a:d8:39:26:f8:81:b5:a4:3c:c9:ef:d7:3a:b9:9f:4e:47: 2b:e5:e5:77:49:61:23:d8:5b:ad:18:7d:a4:71:9d:83:f2:64: dc:df:b7:25:af:aa:9b:7d:17:9b:1d:9f:88:b2:84:56:c1:bc: 63:75:aa:c1:c4:b8:1f:11:f9:95:9f:dd:2e:99:40:37:0a:d8: 1b:bd:2f:f3:8b:35:dd:33:7b:11:37:21:36:7c:3f:4c:f9:d3: a7:69:30:9b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIyRkE2QkMyQjAyMkIw MjNDOUIxMTlENUQwNTA5NDREODU3NUQyRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1GAYcPnnS4yhGzy6xkVmRBZzoJ6yT1R6Kiu9OW8ZaUq/Ws7G9 gVQ3NNMh5FNS3MxMMobrLiCBXjBBUXqzovrgN6wz85evcfsDkrPgp8GQ29Ymp/Nw krftX5rRNCkGrBbb2Mn++XCQucYWGEddYquq0+8QhcYeUpK/5jTUithuA5MhuMne ZqwedKoIhs71soOlDZ2IqvBY+YBsiRgQj0nd1SJulr2xQQ3VpmDMJfqHx9zbJFen FBj7lgcgpi1f+7ii2Tl5SvRqdXjhjoAQXHtPoTmX69LVmv+TPYXsFQMMdjTTedSE XF3fSNvb8q+6/1avDyCFhWmYh/MdIMvYC5VhAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUsvprwrAisCPJsRnV0FCUTYV10ucwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9zdnByd3JBaXNDUEpz Um5WMEZDVVRZVjEwdWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQ3MA0GCSqGSIb3DQEBCwUAA4IBAQAuS83Q5x1UfXhJ+WfYGWNjElRo9W1D wvSLfFUjwYc0Cz379XTTi1i0JylyK1wh6ABFzGfIza8yHyPACNOPXEyPVA7PFus/ z0LwzcIopg2jI2IMXYNxwXnxNANTI+oxhoUcWrMCoQyOr5BD7iSFhR4MIIuZVRnv MN000w9FMHtO94PBCnrFJ0MZqMAo/KCJ/+Mfa8ihcn4GWOMGh4OLLdphMyDxKtg5 JviBtaQ8ye/XOrmfTkcr5eV3SWEj2FutGH2kcZ2D8mTc37clr6qbfRebHZ+IsoRW wbxjdarBxLgfEfmVn90umUA3CtgbvS/zizXdM3sRNyE2fD9M+dOnaTCb -----END CERTIFICATE-----Generated at Tue Jun 18 12:53:57 2024 by rpki-client on console-ams.rpki-client.org