$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/z6G-0oXkRRBJDU-rH9nvJF0wb3Q.roa File: z6G-0oXkRRBJDU-rH9nvJF0wb3Q.roa (raw, json) Hash identifier: TjOo7sojqfNRVmC6EjVk22my1Vf9LiA/5+gU2e2YzsA= Subject key identifier: CF:A1:BE:D2:85:E4:45:10:49:0D:4F:AB:1F:D9:EF:24:5D:30:6F:74 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1297 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/z6G-0oXkRRBJDU-rH9nvJF0wb3Q.roa Signing time: Mon 10 Feb 2025 14:15:02 +0000 ROA not before: Mon 10 Feb 2025 14:15:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131607 IP address blocks: 150.117.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4759 (0x1297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CFA1BED285E44510490D4FAB1FD9EF245D306F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:e8:c6:63:65:dc:74:27:92:ba:29:e2:48: 93:eb:7c:ac:5b:f7:fb:79:ec:1d:da:15:7f:8d:57: c9:dd:7a:4e:ba:2f:56:e8:88:3a:a4:d4:7e:7a:87: ab:7e:af:f3:28:0b:25:bf:77:8b:75:ca:32:3e:d0: 86:f6:2e:92:b5:45:2d:5e:ca:ad:44:34:f5:c8:97: 89:ca:1b:b4:5f:62:50:c4:c9:dc:04:8f:dd:ba:ef: 4c:c5:c9:16:78:94:d2:bc:8c:9d:90:83:b6:cc:b7: c3:4f:da:f0:09:df:8f:c7:88:fe:a7:6a:79:2f:f4: 3e:30:73:8d:35:7d:cf:b5:a1:15:1a:61:59:b3:3e: 23:96:37:28:93:8e:d3:6e:68:ff:67:48:00:90:09: ea:b8:e3:68:95:f7:c0:51:2f:38:cf:d4:9e:f7:f2: 13:16:52:56:c7:85:01:f7:81:25:f3:10:aa:b5:da: 4d:6c:dc:92:1e:4f:7a:58:a4:55:2f:fb:a7:3c:76: c6:9d:85:ff:1a:dc:46:1e:b4:df:d5:1d:04:40:45: 21:ec:ee:70:33:48:40:2a:98:0c:e7:89:2d:66:42: c9:76:44:36:86:3d:02:6f:35:e3:8d:b9:ba:fc:df: 60:74:1e:11:9e:e1:fc:01:bc:63:c3:7f:84:69:66: 16:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A1:BE:D2:85:E4:45:10:49:0D:4F:AB:1F:D9:EF:24:5D:30:6F:74 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/z6G-0oXkRRBJDU-rH9nvJF0wb3Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.192.0/20 Signature Algorithm: sha256WithRSAEncryption 21:6f:84:51:e2:2e:71:24:9f:56:aa:b8:1e:bd:f2:31:57:a2: 36:ab:06:f4:e9:05:77:84:8f:c5:6a:17:81:79:e0:75:84:f8: 2d:7d:87:ec:10:b8:9c:7c:50:73:52:57:6e:a8:78:c3:5c:03: 7e:df:0c:23:64:db:19:a8:91:6d:3f:60:ae:2f:81:b9:53:5a: a7:ed:b0:00:b4:f6:08:d0:77:1f:fe:25:53:e3:3b:16:e9:69: 22:3c:58:fc:c0:f0:0f:c9:6c:2a:01:5c:c1:4c:45:5d:97:51: 75:ca:c9:9b:b8:c0:92:08:50:b7:41:ec:01:1e:db:33:28:75: ea:66:3e:f2:32:a6:95:44:30:52:0b:82:91:07:d7:a2:1d:75: 2e:f0:99:e4:19:ef:b2:de:33:13:20:5d:29:72:5f:e7:a6:2e: 30:f4:33:e2:a5:fe:41:a4:be:a9:5a:48:79:c6:16:86:f7:56: f4:37:11:c2:74:58:b2:ab:b3:22:b6:e9:0c:cb:1d:82:68:7f: 94:a6:68:12:8e:68:44:38:fd:78:98:62:3a:3a:bc:19:a7:eb: 7e:f4:b1:c6:e8:6f:ae:cb:c1:06:52:a3:e3:6d:4f:98:4b:ca: 09:eb:e4:46:a2:ed:ff:c4:05:6c:2c:21:b8:d1:d4:f2:55:4d: f4:49:26:4a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGQTFCRUQyODVFNDQ1 MTA0OTBENEZBQjFGRDlFRjI0NUQzMDZGNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCVejGY2XcdCeSuiniSJPrfKxb9/t57B3aFX+NV8ndek66L1bo iDqk1H56h6t+r/MoCyW/d4t1yjI+0Ib2LpK1RS1eyq1ENPXIl4nKG7RfYlDEydwE j92670zFyRZ4lNK8jJ2Qg7bMt8NP2vAJ34/HiP6nankv9D4wc401fc+1oRUaYVmz PiOWNyiTjtNuaP9nSACQCeq442iV98BRLzjP1J738hMWUlbHhQH3gSXzEKq12k1s 3JIeT3pYpFUv+6c8dsadhf8a3EYetN/VHQRARSHs7nAzSEAqmAzniS1mQsl2RDaG PQJvNeONubr832B0HhGe4fwBvGPDf4RpZhZvAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUz6G+0oXkRRBJDU+rH9nvJF0wb3QwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy96NkctMG9Ya1JSQkpE VS1ySDludkpGMHdiM1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnXAMA0GCSqGSIb3DQEBCwUAA4IBAQAhb4RR4i5xJJ9WqrgevfIxV6I2qwb0 6QV3hI/FaheBeeB1hPgtfYfsELicfFBzUlduqHjDXAN+3wwjZNsZqJFtP2CuL4G5 U1qn7bAAtPYI0Hcf/iVT4zsW6WkiPFj8wPAPyWwqAVzBTEVdl1F1ysmbuMCSCFC3 QewBHtszKHXqZj7yMqaVRDBSC4KRB9eiHXUu8JnkGe+y3jMTIF0pcl/npi4w9DPi pf5BpL6pWkh5xhaG91b0NxHCdFiyq7MitukMyx2CaH+UpmgSjmhEOP14mGI6OrwZ p+t+9LHG6G+uy8EGUqPjbU+YS8oJ6+RGou3/xAVsLCG40dTyVU30SSZK -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:31 2025 by rpki-client