$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DaUPQIwHhcR90VHhk2TEXUjaZmU.roa File: DaUPQIwHhcR90VHhk2TEXUjaZmU.roa (raw, json) Hash identifier: oRJQcxkBEF+xVnA3/4OshL5dKFDvKevEhiZW2kCs0UE= Subject key identifier: 0D:A5:0F:40:8C:07:85:C4:7D:D1:51:E1:93:64:C4:5D:48:DA:66:65 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1192 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DaUPQIwHhcR90VHhk2TEXUjaZmU.roa Signing time: Mon 26 Aug 2024 05:10:55 +0000 ROA not before: Mon 26 Aug 2024 05:10:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 137263 IP address blocks: 113.21.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4498 (0x1192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0DA50F408C0785C47DD151E19364C45D48DA6665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:b6:35:8e:25:e2:c6:b6:19:5d:1b:94:3d: 1e:25:30:27:5e:0c:f0:c8:81:29:2a:bd:88:75:e1: c1:5c:cc:fd:fa:3a:64:88:96:4d:b7:df:6d:77:ad: a1:da:68:3a:4e:5e:55:fd:62:77:37:fe:f7:69:4d: 0b:97:28:db:a2:42:31:13:2b:44:99:c2:8f:5a:96: b0:7b:66:09:67:49:b3:2f:c7:0c:5e:3a:a0:ad:e2: 71:f1:97:96:ff:55:6c:6e:5b:b0:c8:59:4a:14:9d: 67:aa:3b:01:74:b6:e2:d1:d8:e9:a7:0e:4f:29:08: d5:ac:1b:1a:51:ab:fb:43:b1:cb:8f:d9:3e:c9:91: 4d:32:38:ba:49:78:07:cf:4e:c4:af:fe:13:8a:c6: 49:8b:4e:1c:a1:47:ea:8a:ed:7f:b0:d3:66:e7:77: a6:b1:a5:58:64:da:44:49:e8:35:28:16:c6:56:db: df:2e:fb:75:7a:64:5c:f3:7c:0b:f3:0e:18:92:60: 75:0f:c9:20:b2:0b:c7:a3:de:5f:fb:cd:c9:7c:e7: 77:71:fd:12:5f:b0:c3:ce:dd:e6:1c:0e:42:4c:5d: 5d:c5:5d:6a:c6:1a:a2:37:f1:49:8a:c0:7b:ee:40: 29:bd:45:20:41:12:d0:32:e2:79:a8:a3:8a:a5:c0: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A5:0F:40:8C:07:85:C4:7D:D1:51:E1:93:64:C4:5D:48:DA:66:65 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DaUPQIwHhcR90VHhk2TEXUjaZmU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.92.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:4e:d5:01:09:c8:8d:4b:41:f7:01:e7:71:30:f6:19:0c:13: 48:c0:47:81:9b:37:39:f7:29:50:26:09:42:d3:de:ef:7c:eb: ab:6b:b7:68:54:ee:05:b3:fc:0f:c0:eb:28:21:8b:9d:c7:65: fe:45:ac:c0:03:de:8a:b7:79:13:c1:4c:da:02:3f:bc:ed:d7: d6:c8:b1:27:09:39:d7:de:20:0b:83:93:7d:68:e7:5e:7c:fe: 16:6d:c8:18:83:d2:8e:f6:79:c8:57:eb:74:43:e6:db:d9:4d: 44:14:8d:b6:a2:cb:e3:22:1b:83:40:8b:66:b6:21:a8:4a:c6: ab:5b:2b:b8:f3:83:ee:8f:14:21:e5:a8:97:77:5f:09:e6:05: 73:bd:5e:32:4a:1d:bf:d9:ab:a7:0b:80:9a:ca:63:67:a8:7e: f0:cd:ef:b8:57:7e:39:f0:3b:02:99:53:f2:3d:73:7e:7a:d9: d5:fc:8c:0f:f7:ce:f9:e8:18:71:46:6a:1f:41:39:c4:cb:a7: 25:1c:c9:05:05:ad:6e:25:9d:5a:17:bc:97:b2:98:c0:6c:74: 0a:6a:f5:f0:15:cd:56:48:25:2e:53:f9:53:58:2a:d2:1a:df: 24:88:fe:f6:fb:29:1b:51:b9:e5:78:78:33:ed:56:52:34:e1: 3c:9a:3b:d5 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBEQTUwRjQwOEMwNzg1 QzQ3REQxNTFFMTkzNjRDNDVENDhEQTY2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu5bY1jiXixrYZXRuUPR4lMCdeDPDIgSkqvYh14cFczP36OmSI lk233213raHaaDpOXlX9Ync3/vdpTQuXKNuiQjETK0SZwo9alrB7ZglnSbMvxwxe OqCt4nHxl5b/VWxuW7DIWUoUnWeqOwF0tuLR2OmnDk8pCNWsGxpRq/tDscuP2T7J kU0yOLpJeAfPTsSv/hOKxkmLThyhR+qK7X+w02bnd6axpVhk2kRJ6DUoFsZW298u +3V6ZFzzfAvzDhiSYHUPySCyC8ej3l/7zcl853dx/RJfsMPO3eYcDkJMXV3FXWrG GqI38UmKwHvuQCm9RSBBEtAy4nmoo4qlwHbPAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUDaUPQIwHhcR90VHhk2TEXUjaZmUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9EYVVQUUl3SGhjUjkw VkhoazJURVhVamFabVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAcRVcMA0GCSqGSIb3DQEBCwUAA4IBAQANTtUBCciNS0H3AedxMPYZDBNIwEeB mzc59ylQJglC097vfOura7doVO4Fs/wPwOsoIYudx2X+RazAA96Kt3kTwUzaAj+8 7dfWyLEnCTnX3iALg5N9aOdefP4WbcgYg9KO9nnIV+t0Q+bb2U1EFI22osvjIhuD QItmtiGoSsarWyu484PujxQh5aiXd18J5gVzvV4ySh2/2aunC4CaymNnqH7wze+4 V3458DsCmVPyPXN+etnV/IwP98756BhxRmofQTnEy6clHMkFBa1uJZ1aF7yXspjA bHQKavXwFc1WSCUuU/lTWCrSGt8kiP72+ykbUbnleHgz7VZSNOE8mjvV -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:21 2024 by rpki-client on console-fra.rpki-client.org