$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yJ7G0ijsFT8IahOB1N8PsKPC8Kw.roa File: yJ7G0ijsFT8IahOB1N8PsKPC8Kw.roa (raw, json) Hash identifier: IGJJ7sVQ4DbrMlfiU3dsfXqph6uTqc5PYmrl8BFgFXY= Subject key identifier: C8:9E:C6:D2:28:EC:15:3F:08:6A:13:81:D4:DF:0F:B0:A3:C2:F0:AC Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F5D Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yJ7G0ijsFT8IahOB1N8PsKPC8Kw.roa Signing time: Fri 01 Sep 2023 08:29:02 +0000 ROA not before: Fri 01 Sep 2023 08:29:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38851 IP address blocks: 223.26.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3933 (0xf5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:02 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C89EC6D228EC153F086A1381D4DF0FB0A3C2F0AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:c3:a2:20:fa:ef:7d:c4:7e:fd:11:ab:04: c8:0a:5f:b8:7e:0c:2a:cc:79:3c:17:63:51:35:5e: b5:55:25:ba:af:c5:44:21:e0:93:9b:d5:d9:2f:31: 7e:54:f5:84:4d:04:11:e1:c6:82:be:a5:c5:87:fb: 19:4f:34:ac:c4:6f:57:cc:04:71:37:f9:fc:43:bb: 12:8a:bb:cf:8e:73:bc:c3:63:b3:73:a7:da:08:fc: 67:9e:08:da:28:bc:4d:22:8d:e7:31:55:e2:8b:98: 0c:77:17:a6:e5:b0:f1:98:60:19:10:03:d1:c4:e4: aa:1b:ba:63:ec:90:d8:2d:8b:b8:f9:25:e2:a6:1f: d8:20:60:5a:3c:ec:c9:1f:35:5b:e1:33:55:52:f7: 56:8b:95:17:e0:2a:8a:0d:e0:1f:e8:44:91:da:b1: 51:e9:fc:c6:84:78:d8:a7:97:cd:1b:ae:79:69:92: 0f:e5:97:df:8b:00:3a:13:53:6b:a9:08:bc:00:f8: 58:06:57:9c:bb:a6:34:49:b3:82:40:73:8b:45:5d: 7b:4e:e6:aa:2c:5c:4e:e1:07:bc:de:ce:9e:6e:6b: b0:8c:7d:b5:33:a7:9e:45:a7:10:92:ff:c1:ce:93: cf:4e:c7:3a:2c:cb:df:01:ef:81:9a:35:9a:b4:9f: dc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9E:C6:D2:28:EC:15:3F:08:6A:13:81:D4:DF:0F:B0:A3:C2:F0:AC X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/yJ7G0ijsFT8IahOB1N8PsKPC8Kw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.108.0/22 Signature Algorithm: sha256WithRSAEncryption b2:b3:22:c8:95:59:d2:17:24:5c:d8:8b:7a:e0:33:15:e2:8e: e2:15:2d:24:e1:2a:b8:88:08:94:54:7e:90:d6:60:32:55:b4: 40:3c:71:30:3a:0b:2b:ea:22:c8:05:ed:9e:8d:02:00:cf:c0: 13:82:e7:d2:73:57:27:e4:22:31:59:7c:c4:b9:2f:65:3f:38: b2:3b:56:82:25:f1:35:c0:87:87:3b:4b:52:1e:fa:2b:21:81: 99:54:dd:a4:7e:aa:23:cf:bc:bd:15:b3:94:88:c3:9a:24:ee: 9f:a1:fb:23:2d:56:2b:a0:ac:0e:ba:9e:ba:a4:05:01:15:03: b3:d9:3a:3d:e1:5e:d5:e4:6b:4e:a1:86:84:41:30:42:13:0f: 21:a1:d4:34:0f:c3:d1:ac:c5:15:a0:5f:1b:1a:41:b0:07:f5: a8:53:59:b2:22:46:6f:87:1f:e0:d8:75:28:d7:9b:38:fb:80: 97:44:ac:c8:42:9f:c3:11:4f:b8:9f:b2:ba:5a:aa:07:1c:75: 00:c1:df:e0:ad:ce:32:f3:34:0e:b4:52:92:a6:91:48:d0:64: 62:ad:20:40:4a:dd:70:90:fc:77:c4:3a:07:e4:bc:b8:60:e0: a6:5b:9f:93:27:bf:5f:12:97:51:c7:ad:a6:42:f4:1a:89:67: 71:0a:40:6c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD10wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM4OUVDNkQyMjhFQzE1 M0YwODZBMTM4MUQ0REYwRkIwQTNDMkYwQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCojsOiIPrvfcR+/RGrBMgKX7h+DCrMeTwXY1E1XrVVJbqvxUQh 4JOb1dkvMX5U9YRNBBHhxoK+pcWH+xlPNKzEb1fMBHE3+fxDuxKKu8+Oc7zDY7Nz p9oI/GeeCNoovE0ijecxVeKLmAx3F6blsPGYYBkQA9HE5KobumPskNgti7j5JeKm H9ggYFo87MkfNVvhM1VS91aLlRfgKooN4B/oRJHasVHp/MaEeNinl80brnlpkg/l l9+LADoTU2upCLwA+FgGV5y7pjRJs4JAc4tFXXtO5qosXE7hB7zezp5ua7CMfbUz p55FpxCS/8HOk89Oxzosy98B74GaNZq0n9zPAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUyJ7G0ijsFT8IahOB1N8PsKPC8KwwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy95SjdHMGlqc0ZUOElh aE9CMU44UHNLUEM4S3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQC3xpsMA0GCSqGSIb3DQEBCwUAA4IBAQCysyLIlVnSFyRc2It64DMV4o7iFS0k 4Sq4iAiUVH6Q1mAyVbRAPHEwOgsr6iLIBe2ejQIAz8ATgufSc1cn5CIxWXzEuS9l PziyO1aCJfE1wIeHO0tSHvorIYGZVN2kfqojz7y9FbOUiMOaJO6fofsjLVYroKwO up66pAUBFQOz2To94V7V5GtOoYaEQTBCEw8hodQ0D8PRrMUVoF8bGkGwB/WoU1my IkZvhx/g2HUo15s4+4CXRKzIQp/DEU+4n7K6WqoHHHUAwd/grc4y8zQOtFKSppFI 0GRirSBASt1wkPx3xDoH5Ly4YOCmW5+TJ79fEpdRx62mQvQaiWdxCkBs -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:36 2024 by rpki-client on console-fra.rpki-client.org