$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/teVeaU9QoiFei2e1-1n_VXQjSXM.roa File: teVeaU9QoiFei2e1-1n_VXQjSXM.roa (raw, json) Hash identifier: P8Y1DKFJ1Td1vzgwTLK10QpSrvmG6uRCHfWtlyy7AzE= Subject key identifier: B5:E5:5E:69:4F:50:A2:21:5E:8B:67:B5:FB:59:FF:55:74:23:49:73 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F62 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/teVeaU9QoiFei2e1-1n_VXQjSXM.roa Signing time: Fri 01 Sep 2023 08:29:04 +0000 ROA not before: Fri 01 Sep 2023 08:29:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 223.26.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3938 (0xf62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B5E55E694F50A2215E8B67B5FB59FF5574234973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:d4:00:6b:59:c1:d0:61:0e:2d:a3:61:81: 69:7c:3e:91:5d:94:2a:e7:9c:ef:b9:71:b5:26:5e: 3f:b0:23:b1:ea:b7:08:77:0e:47:b1:f7:d2:f4:90: 66:f5:90:90:96:8d:15:a9:e0:2b:a3:e9:bb:ab:fa: 41:d4:5c:6f:28:02:be:6e:88:a4:99:8b:73:7b:e3: 0c:60:5c:0f:0b:b0:4c:70:3a:a5:c5:6b:6c:e6:ec: 19:15:31:86:42:69:11:03:73:5d:6c:1e:7c:dd:8d: cd:b8:01:75:63:f1:28:f0:8b:d9:0b:d1:28:c4:6f: 5a:e8:75:e3:60:70:4e:6f:5f:35:69:45:1a:5e:a9: c1:16:4c:e2:52:8a:6c:ed:72:80:ea:38:9b:b8:f4: f1:d4:8b:00:80:fe:01:ff:2e:2e:ba:ce:37:6e:64: 4d:1b:74:50:1b:ad:3a:10:a9:57:94:1c:bc:d8:04: 26:9e:3c:32:ae:59:ae:b9:b6:96:19:fa:8a:0e:89: 33:7f:d7:5c:50:ee:b7:07:be:8d:d4:42:00:df:41: e3:c0:36:5e:fa:8c:c6:a4:e5:d6:fa:8a:42:a8:60: ff:a5:f6:5d:8f:97:65:1f:45:4c:d2:2f:b4:ec:c2: 55:3f:88:8c:50:7e:ad:2d:8a:3c:b2:a1:1f:e6:d9: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E5:5E:69:4F:50:A2:21:5E:8B:67:B5:FB:59:FF:55:74:23:49:73 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/teVeaU9QoiFei2e1-1n_VXQjSXM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.112.0/20 Signature Algorithm: sha256WithRSAEncryption a6:49:8d:8e:34:91:79:b4:81:17:66:f9:30:8c:e2:a7:8e:e1: 36:fa:8d:37:db:aa:82:c2:64:de:84:be:40:97:ab:84:9c:27: 7a:2d:fa:db:33:32:19:da:e3:99:21:1b:f2:f2:ff:a0:4e:49: cd:f3:65:f5:ac:af:77:2b:28:af:4b:51:60:87:b4:e3:49:72: e0:6a:0c:f6:0d:43:55:dd:31:c3:8c:f0:d6:ca:cd:dd:df:c8: 78:c1:dd:4b:83:5f:1e:10:80:6a:0f:5e:12:38:c9:41:a8:52: 9c:4a:26:0c:92:69:bb:71:79:1b:a6:45:5b:70:7c:34:18:cf: 73:97:56:42:e8:e8:96:07:3f:98:eb:12:a3:2d:6a:6f:de:1e: 61:38:79:da:14:0f:29:99:6a:5a:2c:bd:c1:94:97:02:47:a4: 43:3d:be:77:f8:1d:20:d8:11:90:79:a5:2b:25:6b:29:6d:fc: 4b:c5:76:25:42:c9:f4:60:4b:bf:de:6f:4d:47:cd:bd:6c:bb: 0a:fc:28:e6:55:8d:61:b7:7c:ae:3e:07:43:78:7d:ba:bb:07: cf:83:d0:ed:39:3a:53:8c:91:ae:41:38:17:8c:54:f4:ae:fc: 2f:f6:36:9e:cb:48:ce:f1:af:30:93:a4:a7:35:d9:ef:3c:12: 68:2b:63:71 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI1RTU1RTY5NEY1MEEy MjE1RThCNjdCNUZCNTlGRjU1NzQyMzQ5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqPNQAa1nB0GEOLaNhgWl8PpFdlCrnnO+5cbUmXj+wI7Hqtwh3 Dkex99L0kGb1kJCWjRWp4Cuj6bur+kHUXG8oAr5uiKSZi3N74wxgXA8LsExwOqXF a2zm7BkVMYZCaREDc11sHnzdjc24AXVj8Sjwi9kL0SjEb1rodeNgcE5vXzVpRRpe qcEWTOJSimztcoDqOJu49PHUiwCA/gH/Li66zjduZE0bdFAbrToQqVeUHLzYBCae PDKuWa65tpYZ+ooOiTN/11xQ7rcHvo3UQgDfQePANl76jMak5db6ikKoYP+l9l2P l2UfRUzSL7TswlU/iIxQfq0tijyyoR/m2cOxAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUteVeaU9QoiFei2e1+1n/VXQjSXMwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy90ZVZlYVU5UW9pRmVp MmUxLTFuX1ZYUWpTWE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQE3xpwMA0GCSqGSIb3DQEBCwUAA4IBAQCmSY2ONJF5tIEXZvkwjOKnjuE2+o03 26qCwmTehL5Al6uEnCd6LfrbMzIZ2uOZIRvy8v+gTknN82X1rK93KyivS1Fgh7Tj SXLgagz2DUNV3THDjPDWys3d38h4wd1Lg18eEIBqD14SOMlBqFKcSiYMkmm7cXkb pkVbcHw0GM9zl1ZC6OiWBz+Y6xKjLWpv3h5hOHnaFA8pmWpaLL3BlJcCR6RDPb53 +B0g2BGQeaUrJWspbfxLxXYlQsn0YEu/3m9NR829bLsK/CjmVY1ht3yuPgdDeH26 uwfPg9DtOTpTjJGuQTgXjFT0rvwv9jaey0jO8a8wk6SnNdnvPBJoK2Nx -----END CERTIFICATE-----Generated at Tue Jun 18 12:53:57 2024 by rpki-client on console-ams.rpki-client.org