$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6mUBpVjjEgUpYDrT1WTMBLH1DgY.roa File: 6mUBpVjjEgUpYDrT1WTMBLH1DgY.roa (raw, json) Hash identifier: T16jBi8OpUq59IOxkYqFCwtWl2OFoj47nwHqRftDD24= Subject key identifier: EA:65:01:A5:58:E3:12:05:29:60:3A:D3:D5:64:CC:04:B1:F5:0E:06 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1193 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6mUBpVjjEgUpYDrT1WTMBLH1DgY.roa Signing time: Mon 26 Aug 2024 05:10:55 +0000 ROA not before: Mon 26 Aug 2024 05:10:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4499 (0x1193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EA6501A558E3120529603AD3D564CC04B1F50E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:34:15:2c:be:de:bd:0a:b5:37:60:c4:17: 55:00:94:47:8d:ae:80:48:84:e7:ec:2c:69:88:33: bc:eb:5b:24:8b:3d:bd:dc:cd:42:68:dc:6d:ee:d3: 04:92:9a:45:6a:29:a1:fb:78:9f:f7:04:61:bc:fb: 8d:f9:a8:b5:a0:e6:45:af:6e:89:aa:e9:f7:8e:66: b7:16:3e:d7:eb:af:01:b4:0f:a8:df:19:36:c3:61: 88:44:e6:1d:e2:1e:30:9c:f3:fc:9f:b6:20:eb:c0: c1:c2:77:26:5d:a8:06:7b:a7:5d:32:45:ff:21:0b: a0:28:f5:90:21:aa:bd:b4:9e:dc:a9:ef:2c:f9:b8: 23:f8:9f:fb:6b:66:b1:95:b9:64:9a:d9:5c:c2:f3: 7c:9d:6c:ff:ad:df:6b:f5:ce:65:21:18:7a:89:bb: 99:81:b6:40:c0:42:89:02:6d:e5:6a:2e:3f:db:44: 51:ea:c6:62:30:07:85:b0:f9:c3:f6:ac:94:48:a4: cb:f2:b5:f9:56:1a:28:08:56:b2:93:27:59:74:35: e4:79:b8:b8:47:05:b0:0b:5f:70:b9:96:39:39:00: 2d:56:a4:d6:f7:70:3f:63:20:d4:fc:78:e6:32:46: 37:43:96:5c:64:0d:dd:b2:78:65:9d:ac:c5:97:f0: 89:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:01:A5:58:E3:12:05:29:60:3A:D3:D5:64:CC:04:B1:F5:0E:06 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6mUBpVjjEgUpYDrT1WTMBLH1DgY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.128.0/17 Signature Algorithm: sha256WithRSAEncryption 8d:5f:f0:99:dc:a1:e4:c0:67:cc:8e:0a:8d:0f:8b:be:81:80: 40:ce:af:be:e5:b5:b5:0f:f2:ac:53:8f:63:00:e4:97:60:a1: d0:0f:a2:51:d1:39:84:29:73:33:08:31:d2:6c:d3:16:da:ae: 00:c1:f2:4f:17:c3:a6:c1:6d:f8:64:0b:c2:cf:e4:e2:eb:c2: 5b:3b:b8:d6:8f:de:9b:84:11:9b:1b:10:1a:f8:9f:19:93:52: 84:fa:48:45:10:72:46:d9:ea:ca:2c:6e:5f:ac:c8:b0:ed:c9: 0a:c7:3e:82:55:07:d6:33:8f:43:f4:14:ba:58:f4:11:69:65: 5e:3f:2f:d4:1b:ba:9c:20:54:63:cf:a9:03:82:be:62:fe:cc: c6:f3:1c:48:f8:f6:43:23:4e:51:16:ec:85:a8:12:39:db:f2: 79:69:e7:ed:a9:2b:e6:f6:58:a1:dd:3f:8e:66:bb:b0:ff:7a: 84:e0:b3:5f:6e:45:45:67:0d:3a:b7:99:ad:52:18:bb:ce:ce: 9c:a1:c8:12:59:71:b2:1a:68:d7:47:88:c8:08:af:e8:c2:51: 59:a1:32:03:5a:82:19:86:21:24:b1:0e:76:a0:b6:dc:7b:66: 0b:93:02:81:d3:28:8f:cc:3f:23:0e:65:4c:d1:d6:82:1f:0f: f2:b9:1f:f1 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVBNjUwMUE1NThFMzEy MDUyOTYwM0FEM0Q1NjRDQzA0QjFGNTBFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq1zQVLL7evQq1N2DEF1UAlEeNroBIhOfsLGmIM7zrWySLPb3c zUJo3G3u0wSSmkVqKaH7eJ/3BGG8+435qLWg5kWvbomq6feOZrcWPtfrrwG0D6jf GTbDYYhE5h3iHjCc8/yftiDrwMHCdyZdqAZ7p10yRf8hC6Ao9ZAhqr20ntyp7yz5 uCP4n/trZrGVuWSa2VzC83ydbP+t32v1zmUhGHqJu5mBtkDAQokCbeVqLj/bRFHq xmIwB4Ww+cP2rJRIpMvytflWGigIVrKTJ1l0NeR5uLhHBbALX3C5ljk5AC1WpNb3 cD9jINT8eOYyRjdDllxkDd2yeGWdrMWX8IlPAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU6mUBpVjjEgUpYDrT1WTMBLH1DgYwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy82bVVCcFZqakVnVXBZ RHJUMVdUTUJMSDFEZ1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQHlnSAMA0GCSqGSIb3DQEBCwUAA4IBAQCNX/CZ3KHkwGfMjgqND4u+gYBAzq++ 5bW1D/KsU49jAOSXYKHQD6JR0TmEKXMzCDHSbNMW2q4AwfJPF8OmwW34ZAvCz+Ti 68JbO7jWj96bhBGbGxAa+J8Zk1KE+khFEHJG2erKLG5frMiw7ckKxz6CVQfWM49D 9BS6WPQRaWVePy/UG7qcIFRjz6kDgr5i/szG8xxI+PZDI05RFuyFqBI52/J5aeft qSvm9lih3T+OZruw/3qE4LNfbkVFZw06t5mtUhi7zs6cocgSWXGyGmjXR4jICK/o wlFZoTIDWoIZhiEksQ52oLbce2YLkwKB0yiPzD8jDmVM0daCHw/yuR/x -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:02 2024 by rpki-client on console-ams.rpki-client.org