$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8QXThF4j_ibhSVciKVa0Fn4bOks.roa File: 8QXThF4j_ibhSVciKVa0Fn4bOks.roa (raw, json) Hash identifier: 6AG2b8UkHsG/jXAcOnvNPsDvBfK7SfBACaHYt5TIOgI= Subject key identifier: F1:05:D3:84:5E:23:FE:26:E1:49:57:22:29:56:B4:16:7E:1B:3A:4B Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 11C0 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8QXThF4j_ibhSVciKVa0Fn4bOks.roa Signing time: Mon 26 Aug 2024 05:11:06 +0000 ROA not before: Mon 26 Aug 2024 05:11:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 118.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4544 (0x11c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:11:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F105D3845E23FE26E14957222956B4167E1B3A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:d1:10:5a:e1:a7:83:8e:50:cc:eb:79:dd: 17:9b:ed:4c:bd:08:b6:b5:5e:c3:73:d5:c9:ed:9b: 5d:d7:12:e7:c7:9d:cb:07:e0:47:4b:54:c7:e0:3d: 4d:05:02:c8:75:c2:f0:e3:24:ab:4c:f5:3f:8d:d0: a8:18:fd:bc:d7:80:fc:83:0e:1b:3e:d9:90:d6:5d: 10:48:a5:a7:3b:33:d0:d0:29:c4:7a:03:22:c9:27: 70:cd:74:ab:c0:d5:ad:5c:94:56:14:ec:a6:fb:58: d7:e3:43:99:b9:3d:24:4c:52:f9:02:9a:79:54:f2: 6e:8b:ad:ea:fe:d7:1a:d4:f9:76:6f:ec:e0:f0:72: aa:ac:67:59:ec:b1:bc:47:83:4e:36:4b:c4:fb:5f: ee:58:86:d4:27:37:1f:f5:35:b1:cf:1f:b2:b2:9a: 94:40:14:f4:21:5f:f3:a6:2d:9e:04:c3:75:54:93: 55:e0:b1:3d:84:ab:1d:6b:3a:12:da:9f:11:6c:05: 2e:c5:9b:32:3b:4e:66:3a:f3:97:ba:97:87:72:4e: 01:18:58:0c:fd:a6:6d:ac:01:f5:c7:ea:0e:06:56: 2a:57:02:3b:82:25:bc:eb:da:4a:e7:d5:d8:23:56: a4:bc:5e:b8:cb:75:94:c9:58:27:2c:c4:54:91:9c: c6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:05:D3:84:5E:23:FE:26:E1:49:57:22:29:56:B4:16:7E:1B:3A:4B X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8QXThF4j_ibhSVciKVa0Fn4bOks.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:89:c2:c2:b6:5b:c5:a7:8f:ef:74:35:21:eb:d3:68:10:8a: 7e:75:f7:b1:40:6b:bc:12:6a:06:b2:5a:19:1f:1e:45:fd:35: a1:1b:19:a5:39:26:e2:04:25:18:f6:bb:54:09:a7:c1:27:7f: f7:3b:69:bd:d5:95:ff:6c:ab:9c:87:f2:c5:b9:bd:1c:a3:26: 27:33:29:f9:ac:64:cc:33:0d:5a:f5:ef:c4:8c:93:20:b6:f0: 56:e1:d4:ab:97:38:f6:ce:72:23:4b:ea:fe:21:69:38:6a:9c: 7c:cf:e6:d2:6b:a5:7b:86:b9:e9:f5:ed:cc:79:9f:f9:be:ed: fe:ca:f0:53:8c:86:cf:7c:2f:2f:8c:6d:3a:9a:5e:3c:f5:7c: 13:73:82:84:a2:46:38:50:c2:c2:58:7e:4a:cb:22:70:04:d8: b4:f8:ba:ed:0b:34:a3:ef:7a:0c:fa:82:52:41:0e:46:fe:0a: eb:59:7f:a8:b0:d9:f4:60:0d:97:4e:6e:19:c6:01:94:5f:fc: 8d:bc:e7:18:fb:ba:fc:f4:e2:29:9e:d4:f5:39:0e:d7:5a:1d: 4c:96:93:a1:f3:95:2a:18:6a:65:98:9c:a3:81:e8:e2:21:34: a3:6d:98:f9:4b:ab:d2:b0:a9:ad:dc:ba:2f:bd:f9:40:9f:a8: 31:f1:54:ed -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEcAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTExMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxMDVEMzg0NUUyM0ZF MjZFMTQ5NTcyMjI5NTZCNDE2N0UxQjNBNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdLdEQWuGng45QzOt53Reb7Uy9CLa1XsNz1cntm13XEufHncsH 4EdLVMfgPU0FAsh1wvDjJKtM9T+N0KgY/bzXgPyDDhs+2ZDWXRBIpac7M9DQKcR6 AyLJJ3DNdKvA1a1clFYU7Kb7WNfjQ5m5PSRMUvkCmnlU8m6Lrer+1xrU+XZv7ODw cqqsZ1nssbxHg042S8T7X+5YhtQnNx/1NbHPH7KympRAFPQhX/OmLZ4Ew3VUk1Xg sT2Eqx1rOhLanxFsBS7FmzI7TmY685e6l4dyTgEYWAz9pm2sAfXH6g4GVipXAjuC Jbzr2krn1dgjVqS8XrjLdZTJWCcsxFSRnMZBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8QXThF4j/ibhSVciKVa0Fn4bOkswHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy84UVhUaEY0al9pYmhT VmNpS1ZhMEZuNGJPa3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAdpYwDQYJKoZIhvcNAQELBQADggEBAEuJwsK2W8Wnj+90NSHr02gQin5197FA a7wSagayWhkfHkX9NaEbGaU5JuIEJRj2u1QJp8Enf/c7ab3Vlf9sq5yH8sW5vRyj JiczKfmsZMwzDVr178SMkyC28Fbh1KuXOPbOciNL6v4haThqnHzP5tJrpXuGuen1 7cx5n/m+7f7K8FOMhs98Ly+MbTqaXjz1fBNzgoSiRjhQwsJYfkrLInAE2LT4uu0L NKPvegz6glJBDkb+CutZf6iw2fRgDZdObhnGAZRf/I285xj7uvz04ime1PU5Dtda HUyWk6HzlSoYamWYnKOB6OIhNKNtmPlLq9Kwqa3cui+9+UCfqDHxVO0= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:02 2024 by rpki-client on console-ams.rpki-client.org