$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5LmZ9R9NTOogrKZ75Wqy6ayX2s8.roa File: 5LmZ9R9NTOogrKZ75Wqy6ayX2s8.roa (raw, json) Hash identifier: w3TaWOtCKY/9H2QlOAQWAVsqlBRLTtvkcPG45WaRHnE= Subject key identifier: E4:B9:99:F5:1F:4D:4C:EA:20:AC:A6:7B:E5:6A:B2:E9:AC:97:DA:CF Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 116A Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5LmZ9R9NTOogrKZ75Wqy6ayX2s8.roa Signing time: Mon 26 Aug 2024 05:10:45 +0000 ROA not before: Mon 26 Aug 2024 05:10:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4458 (0x116a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E4B999F51F4D4CEA20ACA67BE56AB2E9AC97DACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:c0:0a:1d:46:a8:fe:ea:ed:30:97:2a:93: 96:74:e4:3d:aa:f1:59:0b:a3:9c:ba:53:38:73:e2: 02:93:6a:c1:db:52:c6:e6:6a:ef:df:16:49:81:21: 34:b4:63:46:98:ee:18:56:eb:f6:12:ec:ca:ca:79: 91:b9:cc:d0:45:f3:22:f3:39:22:e4:be:6a:43:30: 52:ab:d7:5c:f2:bd:4b:d7:82:67:65:1a:04:48:5e: a5:d5:49:0f:e7:7c:e5:01:96:d1:e6:ce:4c:4d:0a: a1:58:11:46:a6:19:59:c5:ab:fe:f0:48:b4:0c:72: 8b:d3:a3:26:a7:16:3a:c8:f3:4a:52:12:63:fe:65: 9e:51:83:a3:ba:7d:52:55:44:05:dd:ba:68:7a:0b: c5:83:b2:1e:9c:5d:c5:47:fd:3a:d9:df:5e:47:7e: b7:33:c8:7d:de:4b:38:8f:f8:5b:3e:52:68:26:fa: 5f:29:01:7d:6b:56:7f:d2:9e:3c:88:0b:38:95:7b: c3:30:d0:3f:71:68:04:4a:9f:df:ea:8f:ef:b3:ce: b8:4f:79:d7:50:4e:17:98:01:7a:9c:59:37:a3:3a: 61:05:88:ac:1e:d6:74:32:df:99:d2:8c:8c:27:47: bf:a4:12:61:54:d6:95:cc:83:50:0b:80:46:bb:69: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B9:99:F5:1F:4D:4C:EA:20:AC:A6:7B:E5:6A:B2:E9:AC:97:DA:CF X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5LmZ9R9NTOogrKZ75Wqy6ayX2s8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.240.0/20 Signature Algorithm: sha256WithRSAEncryption 62:c5:33:ea:59:c7:5d:e4:b9:da:6a:43:b0:85:ad:94:e0:9e: b0:a6:66:bf:63:e2:fe:2f:a5:41:f5:f7:e5:f8:d8:e4:b8:46: ca:88:ec:8e:e5:a9:98:96:ae:89:7c:fd:4e:6e:ef:f3:dc:a4: 67:f6:04:dc:ec:11:f1:36:9c:ae:46:b7:56:29:f5:8f:c1:f9: ee:0c:34:7d:7c:78:f4:44:06:c0:d4:18:67:ee:ad:70:cc:bd: da:56:ab:36:c2:83:66:00:7f:51:82:f7:be:bc:da:01:d4:eb: e0:2f:f4:14:37:7b:ba:28:d6:10:83:9e:38:c9:33:58:33:bc: 0a:20:4d:24:9c:1b:d3:bd:ea:aa:6a:7d:00:63:db:b8:fb:50: 95:27:98:ae:7d:af:f4:09:ae:6d:94:36:b0:fe:2b:5e:b3:ea: 72:c3:bd:a3:46:c5:50:78:4e:e2:99:39:f1:5d:c6:51:b4:66: cd:35:69:9c:9a:64:c9:36:3d:03:37:5f:f6:70:e2:6f:93:99: ce:01:f0:9a:3a:90:38:4e:92:7c:01:7a:41:f3:22:ce:f1:72: 02:ad:c8:34:14:5f:69:a6:8a:e3:d4:c1:4b:08:a0:27:e5:7d: 75:3c:1e:d6:59:a5:5c:3e:03:e8:71:bf:6d:5a:ef:24:dd:87: 45:76:ac:8c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU0Qjk5OUY1MUY0RDRD RUEyMEFDQTY3QkU1NkFCMkU5QUM5N0RBQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7CcAKHUao/urtMJcqk5Z05D2q8VkLo5y6Uzhz4gKTasHbUsbm au/fFkmBITS0Y0aY7hhW6/YS7MrKeZG5zNBF8yLzOSLkvmpDMFKr11zyvUvXgmdl GgRIXqXVSQ/nfOUBltHmzkxNCqFYEUamGVnFq/7wSLQMcovToyanFjrI80pSEmP+ ZZ5Rg6O6fVJVRAXdumh6C8WDsh6cXcVH/TrZ315HfrczyH3eSziP+Fs+Umgm+l8p AX1rVn/SnjyICziVe8Mw0D9xaARKn9/qj++zzrhPeddQTheYAXqcWTejOmEFiKwe 1nQy35nSjIwnR7+kEmFU1pXMg1ALgEa7aeuhAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU5LmZ9R9NTOogrKZ75Wqy6ayX2s8wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy81TG1aOVI5TlRPb2dy S1o3NVdxeTZheVgyczgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnTwMA0GCSqGSIb3DQEBCwUAA4IBAQBixTPqWcdd5LnaakOwha2U4J6wpma/ Y+L+L6VB9ffl+NjkuEbKiOyO5amYlq6JfP1Obu/z3KRn9gTc7BHxNpyuRrdWKfWP wfnuDDR9fHj0RAbA1Bhn7q1wzL3aVqs2woNmAH9Rgve+vNoB1OvgL/QUN3u6KNYQ g544yTNYM7wKIE0knBvTveqqan0AY9u4+1CVJ5iufa/0Ca5tlDaw/ites+pyw72j RsVQeE7imTnxXcZRtGbNNWmcmmTJNj0DN1/2cOJvk5nOAfCaOpA4TpJ8AXpB8yLO 8XICrcg0FF9pporj1MFLCKAn5X11PB7WWaVcPgPocb9tWu8k3YdFdqyM -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org