$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ye5MGEOOPOeN1rIuHman_v3TIr0.roa File: ye5MGEOOPOeN1rIuHman_v3TIr0.roa (raw, json) Hash identifier: UxuMzqFRJCMVxXC4IZ55LGnQnBkTTHE61qDDYnbWF/o= Subject key identifier: C9:EE:4C:18:43:8E:3C:E7:8D:D6:B2:2E:1E:66:A7:FE:FD:D3:22:BD Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 11A6 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ye5MGEOOPOeN1rIuHman_v3TIr0.roa Signing time: Mon 26 Aug 2024 05:11:00 +0000 ROA not before: Mon 26 Aug 2024 05:11:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10085 IP address blocks: 150.117.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4518 (0x11a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:11:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C9EE4C18438E3CE78DD6B22E1E66A7FEFDD322BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:aa:8f:10:aa:e4:33:47:41:1d:a0:ec:75:86: 11:70:b1:6b:b7:35:71:91:32:9e:79:aa:10:02:26: ec:df:d2:c9:ae:4c:65:cd:4f:35:90:fa:c1:72:a4: c9:47:44:e9:95:12:a0:06:fe:a6:e6:a4:66:a7:21: d2:cc:ce:f0:9e:0d:68:1b:ba:19:5e:a6:9d:b0:a5: d8:8f:7f:de:c2:67:8f:71:d0:3a:23:4f:2d:b6:94: 6f:dd:7b:2c:8d:fe:17:28:20:9a:5c:db:47:34:41: 68:8a:37:2f:3f:a1:6a:53:7a:fb:a5:f6:e0:22:63: dd:70:c9:d5:a8:11:18:4b:c4:9e:1b:2e:5a:60:90: 9a:0f:5f:07:15:97:24:31:c1:ab:5a:8f:6b:aa:21: 36:98:f6:63:7d:90:a1:76:ad:e7:6a:ea:69:20:68: 66:02:83:19:c4:42:16:28:55:6b:30:a7:ae:18:6a: 4f:78:5a:13:32:d8:2f:c3:8f:84:cd:9f:83:03:21: 0e:d1:9e:f3:bd:fd:b9:de:14:b3:05:65:7b:5c:7b: 5d:62:3d:cd:89:fb:75:b5:31:90:ee:47:7b:6c:43: e0:1a:75:5a:e3:be:a2:f1:f2:9c:89:97:64:35:9a: 88:d4:82:16:9a:27:cc:59:ff:ec:d1:e7:75:da:7c: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EE:4C:18:43:8E:3C:E7:8D:D6:B2:2E:1E:66:A7:FE:FD:D3:22:BD X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ye5MGEOOPOeN1rIuHman_v3TIr0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.112.0/21 Signature Algorithm: sha256WithRSAEncryption 39:cb:c8:df:2e:ec:e4:cf:f0:dc:85:a8:d4:ba:55:27:05:53: 67:66:d1:b9:8e:36:36:36:b7:5e:13:66:b7:00:b5:d3:2d:f9: d6:e8:b6:91:15:82:59:2f:ca:7c:c6:18:41:e7:31:ff:42:93: 43:56:30:65:e1:34:b5:92:78:f7:3b:ba:43:fd:d2:e4:d0:86: 8f:03:05:a7:01:6b:06:0a:2f:20:58:86:3e:f9:f2:e4:6a:b1: 17:b7:dd:51:05:a5:fe:94:eb:62:16:13:e5:4b:f2:11:81:fa: 9d:a2:01:02:ac:ee:8b:9f:c9:57:ee:6a:0c:4b:91:8e:60:ea: 2f:da:c1:a1:63:ed:06:c8:12:98:34:8c:91:f5:a3:57:ae:9b: b3:78:60:b3:34:b9:57:16:91:5d:aa:53:bf:f9:7e:a6:72:30: 60:89:89:de:db:e8:ef:01:b7:03:70:22:e3:d5:9c:a0:94:03: 9c:3c:a6:34:9b:53:bc:20:40:64:ea:42:8c:8e:cf:19:c5:39: 72:3a:a0:95:a5:9e:02:2e:01:85:f8:a5:00:62:dd:b3:a3:f1: c2:f7:d5:d2:42:8f:28:d7:ac:ab:7f:95:a5:07:24:55:4b:8f: b8:b4:2a:5d:0f:65:24:17:e8:1c:77:56:66:ed:cc:13:22:ee: f8:f3:a7:00 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTExMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM5RUU0QzE4NDM4RTND RTc4REQ2QjIyRTFFNjZBN0ZFRkREMzIyQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1qo8QquQzR0EdoOx1hhFwsWu3NXGRMp55qhACJuzf0smuTGXN TzWQ+sFypMlHROmVEqAG/qbmpGanIdLMzvCeDWgbuhlepp2wpdiPf97CZ49x0Doj Ty22lG/deyyN/hcoIJpc20c0QWiKNy8/oWpTevul9uAiY91wydWoERhLxJ4bLlpg kJoPXwcVlyQxwataj2uqITaY9mN9kKF2redq6mkgaGYCgxnEQhYoVWswp64Yak94 WhMy2C/Dj4TNn4MDIQ7RnvO9/bneFLMFZXtce11iPc2J+3W1MZDuR3tsQ+AadVrj vqLx8pyJl2Q1mojUghaaJ8xZ/+zR53XafGnxAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUye5MGEOOPOeN1rIuHman/v3TIr0wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy95ZTVNR0VPT1BPZU4x ckl1SG1hbl92M1RJcjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnVwMA0GCSqGSIb3DQEBCwUAA4IBAQA5y8jfLuzkz/DchajUulUnBVNnZtG5 jjY2NrdeE2a3ALXTLfnW6LaRFYJZL8p8xhhB5zH/QpNDVjBl4TS1knj3O7pD/dLk 0IaPAwWnAWsGCi8gWIY++fLkarEXt91RBaX+lOtiFhPlS/IRgfqdogECrO6Ln8lX 7moMS5GOYOov2sGhY+0GyBKYNIyR9aNXrpuzeGCzNLlXFpFdqlO/+X6mcjBgiYne 2+jvAbcDcCLj1ZyglAOcPKY0m1O8IEBk6kKMjs8ZxTlyOqCVpZ4CLgGF+KUAYt2z o/HC99XSQo8o16yrf5WlByRVS4+4tCpdD2UkF+gcd1Zm7cwTIu7486cA -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:42 2024 by rpki-client on console-fra.rpki-client.org