$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9A8-rneuEuGnOPI8IDf9eh4_6RQ.roa File: 9A8-rneuEuGnOPI8IDf9eh4_6RQ.roa (raw, json) Hash identifier: PfEoWcVp8EEqi0pUdhOFhfuEMwpRqofMVt01VpvKczg= Subject key identifier: F4:0F:3E:AE:77:AE:12:E1:A7:38:F2:3C:20:37:FD:7A:1E:3F:E9:14 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0FAA Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9A8-rneuEuGnOPI8IDf9eh4_6RQ.roa Signing time: Fri 01 Sep 2023 08:29:24 +0000 ROA not before: Fri 01 Sep 2023 08:29:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 21859 IP address blocks: 223.26.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4010 (0xfaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F40F3EAE77AE12E1A738F23C2037FD7A1E3FE914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:94:01:c8:55:87:e4:05:f2:42:0f:8e:58: 91:2f:1b:bc:98:34:e5:0a:eb:e9:a6:91:a8:74:c8: 30:3b:15:07:4a:dd:6b:3b:e9:d5:92:4e:57:af:b9: e7:a2:30:be:ed:c8:81:01:04:2d:75:65:00:4b:f1: 1b:d2:e3:23:d9:98:19:31:18:cc:a3:cf:d5:06:3b: 05:1e:86:19:27:61:26:4c:cd:92:02:85:d3:b2:45: 3e:c6:04:a3:cf:dd:4e:c1:16:76:c9:42:1f:8f:fb: a8:5f:cb:8c:44:f5:2e:5f:ea:e9:7c:0a:90:ad:f6: a0:36:0e:82:0d:a8:f9:d6:32:dd:54:3e:21:44:0a: 95:d9:8f:cc:91:03:e6:32:a2:73:36:a8:44:ce:97: 5c:52:28:d6:67:f3:c2:93:95:be:7b:a8:ef:77:07: d4:69:00:b5:4b:8f:2e:f1:8a:71:ee:3f:b8:84:8b: 71:a2:ce:57:46:6a:d6:46:cf:0c:dd:d4:8d:16:1b: a1:1e:8b:6f:65:2e:2d:01:90:ab:e0:43:8d:da:87: c1:63:3c:ce:de:5c:25:6d:c0:f7:d5:51:f4:80:51: 93:ef:66:57:aa:58:5d:0b:e3:17:50:dc:12:66:d3: f4:35:71:c1:0b:12:c7:76:c2:53:15:a5:dc:46:73: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0F:3E:AE:77:AE:12:E1:A7:38:F2:3C:20:37:FD:7A:1E:3F:E9:14 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9A8-rneuEuGnOPI8IDf9eh4_6RQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.72.0/22 Signature Algorithm: sha256WithRSAEncryption a5:c4:52:4f:4c:e1:35:ec:88:1a:e0:24:12:3d:d5:49:7f:e0: cc:1f:44:e2:cb:37:62:fb:8c:f0:95:47:0a:28:d2:59:b3:6a: 39:b2:65:8e:32:ae:45:87:60:7d:e7:20:0f:e4:12:cd:58:74: 2f:3c:25:b5:a9:99:e0:3a:84:71:3b:a1:c6:6a:5e:13:49:4e: c9:b5:e5:5a:95:a5:a1:bf:45:80:f7:be:3b:ef:c3:87:26:d4: 78:7c:60:bc:5d:29:31:5f:96:0a:17:8a:99:b7:41:55:c8:dd: 4b:b4:41:8d:75:c8:72:11:4f:43:d0:47:1f:33:4a:15:35:0a: 7c:b6:e7:8b:af:f7:b3:75:9b:b7:62:47:e5:1c:c7:0f:c0:7e: 41:aa:2a:50:68:e9:30:fc:cc:2e:23:72:2a:df:28:d7:1a:fa: 6e:23:ce:1c:6a:6e:7b:58:8f:78:e5:06:1e:b0:56:2c:70:c6: 21:1c:c6:88:1c:a0:a9:56:3c:c4:6a:b1:ce:80:57:9c:d9:b0: e5:67:9f:51:c8:b0:5c:ba:3d:5e:5a:98:33:03:91:ff:35:a2: 51:3f:dc:45:1c:96:06:42:c0:f4:53:e4:5f:bc:a1:ce:38:b0: 62:b7:f5:96:d9:e0:9a:bf:08:97:eb:69:b0:f3:43:08:01:8b: 3c:2b:03:ab -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY0MEYzRUFFNzdBRTEy RTFBNzM4RjIzQzIwMzdGRDdBMUUzRkU5MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTr5QByFWH5AXyQg+OWJEvG7yYNOUK6+mmkah0yDA7FQdK3Ws7 6dWSTlevueeiML7tyIEBBC11ZQBL8RvS4yPZmBkxGMyjz9UGOwUehhknYSZMzZIC hdOyRT7GBKPP3U7BFnbJQh+P+6hfy4xE9S5f6ul8CpCt9qA2DoINqPnWMt1UPiFE CpXZj8yRA+YyonM2qETOl1xSKNZn88KTlb57qO93B9RpALVLjy7xinHuP7iEi3Gi zldGatZGzwzd1I0WG6Eei29lLi0BkKvgQ43ah8FjPM7eXCVtwPfVUfSAUZPvZleq WF0L4xdQ3BJm0/Q1ccELEsd2wlMVpdxGczLHAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU9A8+rneuEuGnOPI8IDf9eh4/6RQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy85QTgtcm5ldUV1R25P UEk4SURmOWVoNF82UlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQC3xpIMA0GCSqGSIb3DQEBCwUAA4IBAQClxFJPTOE17Iga4CQSPdVJf+DMH0Ti yzdi+4zwlUcKKNJZs2o5smWOMq5Fh2B95yAP5BLNWHQvPCW1qZngOoRxO6HGal4T SU7JteValaWhv0WA974778OHJtR4fGC8XSkxX5YKF4qZt0FVyN1LtEGNdchyEU9D 0EcfM0oVNQp8tueLr/ezdZu3YkflHMcPwH5BqipQaOkw/MwuI3Iq3yjXGvpuI84c am57WI945QYesFYscMYhHMaIHKCpVjzEarHOgFec2bDlZ59RyLBcuj1eWpgzA5H/ NaJRP9xFHJYGQsD0U+RfvKHOOLBit/WW2eCavwiX62mw80MIAYs8KwOr -----END CERTIFICATE-----Generated at Thu May 2 03:38:32 2024 by rpki-client on console-ams.rpki-client.org