$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Brkmiyv34sYP0dPXUXgi6E1-3Sk.roa File: Brkmiyv34sYP0dPXUXgi6E1-3Sk.roa (raw, json) Hash identifier: w5pMWOiAand83wpAdV6Y2n/1GV9VEn+5X8ZcVS8E9vc= Subject key identifier: 06:B9:26:8B:2B:F7:E2:C6:0F:D1:D3:D7:51:78:22:E8:4D:7E:DD:29 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1164 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Brkmiyv34sYP0dPXUXgi6E1-3Sk.roa Signing time: Mon 26 Aug 2024 05:10:44 +0000 ROA not before: Mon 26 Aug 2024 05:10:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63199 IP address blocks: 150.116.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4452 (0x1164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=06B9268B2BF7E2C60FD1D3D7517822E84D7EDD29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:69:2f:ed:64:f3:20:ba:f5:81:c9:4f:84: 2e:fc:19:bc:0e:9e:15:a2:5e:8d:84:2a:34:b2:4c: 03:fd:a1:23:e4:83:dd:b9:b1:65:17:ad:31:ab:68: 2c:ad:26:f9:cd:90:d6:69:bb:66:a8:10:ac:7c:f0: 0a:b1:da:3d:a7:5c:f8:45:78:93:ef:15:e0:2f:84: b5:fc:ba:df:26:3e:9e:62:2e:6a:81:96:e8:d9:98: 66:73:8d:49:64:44:45:43:fd:0f:21:5d:e9:8e:a0: 13:d0:78:14:48:9e:0b:3c:8c:b1:e8:c4:a9:dd:00: 79:de:22:f7:8b:bb:6f:8c:5c:d7:f6:54:4d:0f:00: ab:da:83:6d:f2:f7:5b:55:db:34:66:49:74:17:8d: 4d:97:53:16:24:13:5b:95:51:87:95:eb:6d:d2:6a: c9:a6:62:19:8b:df:f5:4d:05:fe:4b:35:96:a5:7d: 97:25:52:06:b5:c1:61:aa:8c:d1:f8:18:32:8d:0b: b2:1a:e1:62:48:6d:16:e0:61:db:19:ee:b4:3a:06: a0:fa:51:a8:45:0d:91:a8:fa:98:9a:e6:ca:48:2a: 4d:04:d2:82:d9:28:32:12:1b:4d:a8:f0:dc:86:73: c4:f7:91:0e:f3:de:fa:96:7d:e3:63:1c:a8:fe:1d: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B9:26:8B:2B:F7:E2:C6:0F:D1:D3:D7:51:78:22:E8:4D:7E:DD:29 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Brkmiyv34sYP0dPXUXgi6E1-3Sk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.3.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:82:0b:36:14:ad:90:b5:36:a2:de:42:b2:de:d9:98:09:62: 50:8c:c9:f5:21:be:85:b4:e6:6d:e4:74:3c:c0:30:09:5d:97: e5:90:af:d6:fa:2a:15:e3:84:e6:cb:f4:a0:9d:1d:96:66:03: 53:57:24:60:5f:3b:07:f4:ea:70:fa:0c:10:64:2f:d6:d2:d4: ec:0d:be:ba:88:d8:aa:0e:40:8c:93:07:d9:29:21:6c:4d:9e: 22:e2:ed:5f:8f:14:c5:11:63:38:0e:97:5a:54:1f:3b:ca:f8: b2:ce:74:1e:94:64:05:be:4d:6e:76:64:eb:df:21:74:fb:3a: 12:00:f9:b2:57:5a:b0:d0:ac:d1:43:ba:d4:be:b0:82:6d:fa: 6c:09:1e:94:e3:36:41:f4:82:ea:f0:e1:39:43:80:4f:1e:73: c7:72:d9:23:33:2d:fa:8b:d3:b0:ce:30:50:79:aa:74:6f:2e: 56:1f:8d:6f:f6:ac:dc:a9:cd:17:e4:b2:5d:ea:04:94:ea:47: ab:92:97:a4:60:f6:28:57:13:d4:61:30:00:1e:ce:70:76:3c: ef:2e:e2:f9:c8:2a:be:1f:2b:0f:89:9b:21:63:96:9a:a2:27: c1:6a:ea:ac:9d:83:e7:fd:9e:99:db:28:3a:61:65:24:fd:87: a8:33:3a:e3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA2QjkyNjhCMkJGN0Uy QzYwRkQxRDNENzUxNzgyMkU4NEQ3RUREMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0Q2kv7WTzILr1gclPhC78GbwOnhWiXo2EKjSyTAP9oSPkg925 sWUXrTGraCytJvnNkNZpu2aoEKx88Aqx2j2nXPhFeJPvFeAvhLX8ut8mPp5iLmqB lujZmGZzjUlkREVD/Q8hXemOoBPQeBRIngs8jLHoxKndAHneIveLu2+MXNf2VE0P AKvag23y91tV2zRmSXQXjU2XUxYkE1uVUYeV623SasmmYhmL3/VNBf5LNZalfZcl Uga1wWGqjNH4GDKNC7Ia4WJIbRbgYdsZ7rQ6BqD6UahFDZGo+pia5spIKk0E0oLZ KDISG02o8NyGc8T3kQ7z3vqWfeNjHKj+HT/VAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUBrkmiyv34sYP0dPXUXgi6E1+3SkwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9CcmttaXl2MzRzWVAw ZFBYVVhnaTZFMS0zU2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQDMA0GCSqGSIb3DQEBCwUAA4IBAQA6ggs2FK2QtTai3kKy3tmYCWJQjMn1 Ib6FtOZt5HQ8wDAJXZflkK/W+ioV44Tmy/SgnR2WZgNTVyRgXzsH9Opw+gwQZC/W 0tTsDb66iNiqDkCMkwfZKSFsTZ4i4u1fjxTFEWM4DpdaVB87yviyznQelGQFvk1u dmTr3yF0+zoSAPmyV1qw0KzRQ7rUvrCCbfpsCR6U4zZB9ILq8OE5Q4BPHnPHctkj My36i9OwzjBQeap0by5WH41v9qzcqc0X5LJd6gSU6kerkpekYPYoVxPUYTAAHs5w djzvLuL5yCq+HysPiZshY5aaoifBauqsnYPn/Z6Z2yg6YWUk/YeoMzrj -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:23 2024 by rpki-client on console-fra.rpki-client.org