$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tj-JzU8Va_OXkov3hBbBOS46m64.roa File: tj-JzU8Va_OXkov3hBbBOS46m64.roa (raw, json) Hash identifier: FdTnBGmPkggqQzwTs9rg8hnTzlSM3ALwqYmIoBtj7Bc= Subject key identifier: B6:3F:89:CD:4F:15:6B:F3:97:92:8B:F7:84:16:C1:39:2E:3A:9B:AE Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F82 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tj-JzU8Va_OXkov3hBbBOS46m64.roa Signing time: Fri 01 Sep 2023 08:29:13 +0000 ROA not before: Fri 01 Sep 2023 08:29:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 150.117.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3970 (0xf82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B63F89CD4F156BF397928BF78416C1392E3A9BAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7f:8d:73:46:7c:05:d2:4c:74:05:ba:ce:36: b3:d7:b8:1e:8f:f6:01:92:cb:46:52:5e:a5:42:bb: 92:5e:2d:84:85:73:ab:8d:25:c0:50:17:e8:b6:b5: b9:43:04:d7:06:6a:a8:39:bd:9b:6f:5e:e1:58:b2: 02:1a:5a:e3:9a:7b:bf:a2:8b:d8:d9:d6:df:44:cb: 53:82:e1:29:ce:f1:be:91:de:bf:7e:bf:c1:09:b7: 10:62:ed:3b:de:d3:48:b2:9d:4c:60:c1:44:a2:ee: 32:94:bd:1f:a5:52:70:67:d0:65:80:2f:fa:56:6a: 3d:f2:8a:04:8c:3d:85:b1:7b:9d:17:14:cb:8b:1f: 52:e8:f9:b3:35:1e:f9:0e:7a:60:7e:43:78:8f:8c: 29:9c:19:c0:c5:1a:a2:3d:c4:e8:5e:b3:f5:11:a7: f8:8a:1a:0e:5b:c1:90:d6:1f:61:f7:43:24:85:d4: 47:71:be:3a:76:ec:f4:09:dd:7a:e2:b3:fa:3e:66: 95:b9:55:6d:0a:f0:54:59:91:60:78:c8:b2:d0:29: 4d:88:39:79:10:03:dd:ad:63:1a:9a:a2:02:cb:d9: 17:1f:8e:90:52:98:11:47:8d:aa:44:43:ad:f1:5c: 65:ed:6c:fa:2a:e9:e3:0b:a2:f9:3a:2d:0b:62:1e: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3F:89:CD:4F:15:6B:F3:97:92:8B:F7:84:16:C1:39:2E:3A:9B:AE X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tj-JzU8Va_OXkov3hBbBOS46m64.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.16.0/20 Signature Algorithm: sha256WithRSAEncryption 00:f5:76:35:9c:c6:f6:77:55:dd:52:08:d5:42:e1:de:84:b1: 66:90:72:dd:a7:3c:80:b2:2a:33:30:97:f0:52:35:62:c7:14: cc:f5:af:77:7c:d2:c5:7a:ac:c7:31:86:4b:4f:b9:dc:82:f5: cf:7d:ad:60:bd:4e:b9:cf:56:57:81:5c:18:fd:0c:fe:c6:22: 0f:55:7e:1f:88:87:9c:0d:60:42:64:44:52:94:e1:c2:87:ac: 04:f9:92:20:62:4c:43:ff:b4:f1:db:d9:06:99:ac:f1:44:f3: 9a:7f:40:0a:c9:0a:ef:f4:bc:4b:85:be:d1:f2:89:ac:53:ca: ff:ae:64:a5:88:9b:37:82:b5:86:a1:72:10:fc:11:a9:73:44: d3:7e:99:06:f4:83:7a:4a:8c:c1:bc:f8:73:20:d7:7d:ea:fa: bf:d7:85:a4:25:b6:c2:60:9f:bb:c6:90:b8:4d:96:3e:b6:f8: 4a:6d:1b:82:1c:71:8a:5f:29:92:8f:4d:13:3d:1b:c0:ab:63: 4b:9e:7a:8d:68:a4:93:1d:9e:04:a7:90:9e:2f:23:8c:57:cb: 97:07:6d:4d:1a:b2:38:b2:dc:bb:d8:e1:0f:a0:9a:60:d6:0d: b1:8e:85:8d:52:55:31:74:d3:4f:fc:eb:4e:b4:8b:09:aa:7e: a0:af:7f:bb -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI2M0Y4OUNENEYxNTZC RjM5NzkyOEJGNzg0MTZDMTM5MkUzQTlCQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLf41zRnwF0kx0BbrONrPXuB6P9gGSy0ZSXqVCu5JeLYSFc6uN JcBQF+i2tblDBNcGaqg5vZtvXuFYsgIaWuOae7+ii9jZ1t9Ey1OC4SnO8b6R3r9+ v8EJtxBi7Tve00iynUxgwUSi7jKUvR+lUnBn0GWAL/pWaj3yigSMPYWxe50XFMuL H1Lo+bM1HvkOemB+Q3iPjCmcGcDFGqI9xOhes/URp/iKGg5bwZDWH2H3QySF1Edx vjp27PQJ3Xris/o+ZpW5VW0K8FRZkWB4yLLQKU2IOXkQA92tYxqaogLL2RcfjpBS mBFHjapEQ63xXGXtbPoq6eMLovk6LQtiHk/fAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUtj+JzU8Va/OXkov3hBbBOS46m64wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy90ai1KelU4VmFfT1hr b3YzaEJiQk9TNDZtNjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnUQMA0GCSqGSIb3DQEBCwUAA4IBAQAA9XY1nMb2d1XdUgjVQuHehLFmkHLd pzyAsiozMJfwUjVixxTM9a93fNLFeqzHMYZLT7ncgvXPfa1gvU65z1ZXgVwY/Qz+ xiIPVX4fiIecDWBCZERSlOHCh6wE+ZIgYkxD/7Tx29kGmazxRPOaf0AKyQrv9LxL hb7R8omsU8r/rmSliJs3grWGoXIQ/BGpc0TTfpkG9IN6SozBvPhzINd96vq/14Wk JbbCYJ+7xpC4TZY+tvhKbRuCHHGKXymSj00TPRvAq2NLnnqNaKSTHZ4Ep5CeLyOM V8uXB21NGrI4sty72OEPoJpg1g2xjoWNUlUxdNNP/OtOtIsJqn6gr3+7 -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:36 2024 by rpki-client on console-fra.rpki-client.org