$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/E6_MHcqcqGLtt9bJzZVJavMW0iI.roa File: E6_MHcqcqGLtt9bJzZVJavMW0iI.roa (raw, json) Hash identifier: a8et17eUU1k4SdQkDRG3ZP3+RUJxazM60/Ku8IanSYU= Subject key identifier: 13:AF:CC:1D:CA:9C:A8:62:ED:B7:D6:C9:CD:95:49:6A:F3:16:D2:22 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 11A0 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/E6_MHcqcqGLtt9bJzZVJavMW0iI.roa Signing time: Mon 26 Aug 2024 05:10:58 +0000 ROA not before: Mon 26 Aug 2024 05:10:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63199 IP address blocks: 203.163.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4512 (0x11a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=13AFCC1DCA9CA862EDB7D6C9CD95496AF316D222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:9b:43:61:41:c4:0b:0f:c5:ce:f2:4e:e0: 4e:ee:8e:3d:c5:68:53:ef:ed:c2:c9:49:1a:58:0e: ad:63:bb:f6:6c:ed:b0:ed:a6:f6:b6:a5:42:70:43: 50:37:97:63:8d:43:a9:31:1e:c9:bd:60:02:02:64: 91:cf:e3:aa:56:53:1b:11:34:a5:ab:16:01:89:da: e1:f3:cc:b8:b1:01:a2:46:5c:4c:00:98:8e:00:4f: 1a:86:11:10:d2:5c:97:8b:0a:23:b9:9f:c4:97:98: ea:26:76:04:2b:50:1c:9b:1d:a3:47:18:43:74:27: 69:5f:1a:a6:0a:77:c0:98:92:f9:d8:80:bd:f9:b0: 65:b8:c1:84:6a:6d:82:55:9f:57:59:54:de:d1:8d: b8:28:d7:c9:48:4d:ce:38:b8:7c:b0:c4:48:ce:71: e5:75:e7:b0:55:63:fe:fb:5f:f4:71:02:cc:a2:fa: 2b:b0:ce:bb:cd:1e:55:03:19:48:43:3b:04:7e:f4: 81:da:8d:b5:30:27:65:51:3f:b6:27:02:9b:a1:ec: 18:e2:b6:29:41:2c:3e:cd:fa:50:37:ea:8a:d8:16: 71:da:f1:69:01:e3:d0:18:6f:5d:88:3d:f6:1c:d1: b1:31:b4:6c:16:f5:1e:b8:d5:4e:11:f5:47:e4:75: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AF:CC:1D:CA:9C:A8:62:ED:B7:D6:C9:CD:95:49:6A:F3:16:D2:22 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/E6_MHcqcqGLtt9bJzZVJavMW0iI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.163.216.0/24 Signature Algorithm: sha256WithRSAEncryption 09:e0:2d:10:a2:d1:bf:76:a4:01:53:74:6a:e2:64:b4:bd:80: 9f:9c:60:ae:3b:86:1e:09:c4:2c:c0:45:59:f4:da:25:38:16: 46:65:8a:82:5b:e9:30:92:21:46:38:8c:83:c0:c8:33:ce:99: 4f:94:eb:9a:67:6f:d2:71:39:c7:db:b8:b8:18:68:f4:a0:91: 15:b1:1b:09:7f:ba:69:77:41:fe:99:7e:ea:0e:04:c2:2d:90: a1:f1:79:31:8a:15:03:af:ca:ed:a1:3c:84:20:48:5d:cf:2f: c2:74:59:e4:39:b5:c9:5c:57:87:fe:e0:fb:61:8a:dd:ce:c1: 46:0f:f1:c9:48:26:21:c2:8b:4a:b3:ee:80:77:30:4f:fa:a5: 17:7b:09:8e:af:ad:70:49:b2:d3:3d:5b:47:49:d0:44:9d:da: 61:73:a8:b3:84:bb:73:13:5b:18:60:dc:99:77:a6:26:a7:8a: a3:09:cc:3f:5e:8a:b0:76:32:88:9c:99:f4:99:2f:1e:85:4c: df:81:57:71:f8:ed:b9:1a:d8:85:d7:ed:f7:9d:f9:68:89:eb: cf:bb:62:e5:86:89:96:4a:bd:c3:f1:fe:be:06:0e:89:cf:4e: 33:8d:57:00:de:fa:e2:d4:0b:15:79:86:49:3b:43:bf:6b:67: 0b:b7:e0:66 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzQUZDQzFEQ0E5Q0E4 NjJFREI3RDZDOUNEOTU0OTZBRjMxNkQyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdqptDYUHECw/FzvJO4E7ujj3FaFPv7cLJSRpYDq1ju/Zs7bDt pva2pUJwQ1A3l2ONQ6kxHsm9YAICZJHP46pWUxsRNKWrFgGJ2uHzzLixAaJGXEwA mI4ATxqGERDSXJeLCiO5n8SXmOomdgQrUBybHaNHGEN0J2lfGqYKd8CYkvnYgL35 sGW4wYRqbYJVn1dZVN7Rjbgo18lITc44uHywxEjOceV157BVY/77X/RxAsyi+iuw zrvNHlUDGUhDOwR+9IHajbUwJ2VRP7YnApuh7BjitilBLD7N+lA36orYFnHa8WkB 49AYb12IPfYc0bExtGwW9R641U4R9UfkdTZ7AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUE6/MHcqcqGLtt9bJzZVJavMW0iIwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9FNl9NSGNxY3FHTHR0 OWJKelpWSmF2TVcwaUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAy6PYMA0GCSqGSIb3DQEBCwUAA4IBAQAJ4C0QotG/dqQBU3Rq4mS0vYCfnGCu O4YeCcQswEVZ9NolOBZGZYqCW+kwkiFGOIyDwMgzzplPlOuaZ2/ScTnH27i4GGj0 oJEVsRsJf7ppd0H+mX7qDgTCLZCh8XkxihUDr8rtoTyEIEhdzy/CdFnkObXJXFeH /uD7YYrdzsFGD/HJSCYhwotKs+6AdzBP+qUXewmOr61wSbLTPVtHSdBEndphc6iz hLtzE1sYYNyZd6Ymp4qjCcw/XoqwdjKInJn0mS8ehUzfgVdx+O25GtiF1+33nflo ievPu2LlhomWSr3D8f6+Bg6Jz04zjVcA3vri1AsVeYZJO0O/a2cLt+Bm -----END CERTIFICATE-----Generated at Mon Nov 25 09:40:55 2024 by rpki-client on console-ams.rpki-client.org