$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9u--09ipu35tjCB0QgLyuz0Ox_M.roa File: 9u--09ipu35tjCB0QgLyuz0Ox_M.roa (raw, json) Hash identifier: HwMu4pjhe9rwsW3rZgUDd9IB3Vz6jJTYVyGAxIGJdd8= Subject key identifier: F6:EF:BE:D3:D8:A9:BB:7E:6D:8C:20:74:42:02:F2:BB:3D:0E:C7:F3 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12AE Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9u--09ipu35tjCB0QgLyuz0Ox_M.roa Signing time: Mon 10 Feb 2025 14:15:08 +0000 ROA not before: Mon 10 Feb 2025 14:15:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 150150 IP address blocks: 150.116.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4782 (0x12ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F6EFBED3D8A9BB7E6D8C20744202F2BB3D0EC7F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8d:ff:30:a5:f9:6e:9f:0e:ef:ca:61:22:a9: 75:88:7a:93:6d:db:b8:a2:f6:3d:1a:f7:e2:ff:4d: 70:08:f6:d0:12:0f:73:e3:13:55:c4:73:3b:16:0c: 45:fb:a3:dd:d2:da:c8:c7:b2:2d:14:67:f2:8b:51: 71:2f:2d:c3:18:20:5b:8f:d1:95:8b:5a:ce:ec:9b: 72:6f:41:cc:c9:db:af:d2:0c:3f:47:c5:b2:e7:ba: 42:e8:e0:d2:8d:f2:c6:d2:81:3a:0d:24:09:ab:53: 26:a0:a9:19:8c:bc:90:48:47:ab:c2:93:75:07:3c: ea:22:20:cb:52:58:a6:36:bf:8f:90:79:89:76:48: 86:5b:93:26:d3:5b:f4:9b:10:f4:dd:6f:7c:eb:6a: f0:47:ff:90:40:07:18:7c:db:2e:46:ad:03:02:39: c1:a2:e2:e6:67:b8:f8:ac:aa:50:9f:ac:c8:ea:02: 4c:ee:01:d9:18:0c:3b:73:e3:6d:9c:a0:3a:57:9a: 38:ae:93:46:07:0e:db:ed:a1:e9:b7:4b:ce:bf:d1: 9c:f9:aa:de:e6:50:9d:6c:88:67:c4:a5:3e:5c:32: 7a:0e:ee:52:4b:51:e9:b0:5f:ac:06:b5:e2:17:bf: 8f:4c:c0:11:8b:1f:16:e7:3b:32:67:10:02:b0:72: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EF:BE:D3:D8:A9:BB:7E:6D:8C:20:74:42:02:F2:BB:3D:0E:C7:F3 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9u--09ipu35tjCB0QgLyuz0Ox_M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.11.0/24 Signature Algorithm: sha256WithRSAEncryption 45:87:ee:f7:73:bb:e1:91:3f:c4:98:3d:c0:72:28:fb:7d:f9: 4e:71:27:04:92:cd:e3:bf:e7:c7:64:fa:0e:3a:b4:9c:29:bd: 83:40:0c:62:d4:d4:ec:b6:c5:11:3a:e5:b2:0d:e8:be:a1:68: 4d:99:b7:71:2b:48:ab:9c:ca:2b:8f:c6:df:c5:14:d6:45:3b: ab:d3:db:7c:33:8a:9f:fd:b1:79:f6:80:0b:d7:d5:7a:42:e2: 70:04:a0:5d:42:43:3f:c3:b4:36:00:e3:38:e1:4a:21:97:e1: 25:c0:c0:e8:6a:9e:d5:f8:49:9e:4f:c4:99:fd:51:94:dd:a1: 76:5c:ad:66:4d:c9:f3:cd:c1:c6:c1:09:48:2a:7a:6b:69:95: 37:35:ed:3c:6d:56:76:79:5c:64:c8:86:12:77:c6:f4:bc:51: 37:c8:8b:30:d0:6d:d8:02:d4:2c:43:1c:c5:8e:26:a0:8e:64: 75:49:76:85:ab:91:26:ff:bc:4a:fc:85:2a:a5:f7:50:9c:17: 1c:7a:b8:aa:2a:0d:13:6f:13:a5:23:14:ad:64:c9:44:1d:b6: 06:a9:3b:7a:28:27:7f:7d:b9:7f:15:ba:39:81:19:45:32:06: 69:ed:22:c3:12:88:7f:b5:1b:8e:cf:1d:48:84:b4:de:14:07: 0e:f9:4e:55 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEq4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY2RUZCRUQzRDhBOUJC N0U2RDhDMjA3NDQyMDJGMkJCM0QwRUM3RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgjf8wpflunw7vymEiqXWIepNt27ii9j0a9+L/TXAI9tASD3Pj E1XEczsWDEX7o93S2sjHsi0UZ/KLUXEvLcMYIFuP0ZWLWs7sm3JvQczJ26/SDD9H xbLnukLo4NKN8sbSgToNJAmrUyagqRmMvJBIR6vCk3UHPOoiIMtSWKY2v4+QeYl2 SIZbkybTW/SbEPTdb3zravBH/5BABxh82y5GrQMCOcGi4uZnuPisqlCfrMjqAkzu AdkYDDtz422coDpXmjiuk0YHDtvtoem3S86/0Zz5qt7mUJ1siGfEpT5cMnoO7lJL UemwX6wGteIXv49MwBGLHxbnOzJnEAKwcmivAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU9u++09ipu35tjCB0QgLyuz0Ox/MwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy85dS0tMDlpcHUzNXRq Q0IwUWdMeXV6ME94X00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQLMA0GCSqGSIb3DQEBCwUAA4IBAQBFh+73c7vhkT/EmD3Acij7fflOcScE ks3jv+fHZPoOOrScKb2DQAxi1NTstsUROuWyDei+oWhNmbdxK0irnMorj8bfxRTW RTur09t8M4qf/bF59oAL19V6QuJwBKBdQkM/w7Q2AOM44Uohl+ElwMDoap7V+Eme T8SZ/VGU3aF2XK1mTcnzzcHGwQlIKnpraZU3Ne08bVZ2eVxkyIYSd8b0vFE3yIsw 0G3YAtQsQxzFjiagjmR1SXaFq5Em/7xK/IUqpfdQnBcceriqKg0TbxOlIxStZMlE HbYGqTt6KCd/fbl/Fbo5gRlFMgZp7SLDEoh/tRuOzx1IhLTeFAcO+U5V -----END CERTIFICATE-----Generated at Tue Apr 22 15:21:02 2025 by rpki-client