$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KeW4LtP49B0wxLlqEcBSaITguG0.roa File: KeW4LtP49B0wxLlqEcBSaITguG0.roa (raw, json) Hash identifier: moRWFg8uwAfuR/yOpJIDqZ+0C21/BtWtPiUseaZCCo4= Subject key identifier: 29:E5:B8:2E:D3:F8:F4:1D:30:C4:B9:6A:11:C0:52:68:84:E0:B8:6D Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 11B2 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KeW4LtP49B0wxLlqEcBSaITguG0.roa Signing time: Mon 26 Aug 2024 05:11:03 +0000 ROA not before: Mon 26 Aug 2024 05:11:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63199 IP address blocks: 150.116.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4530 (0x11b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:11:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=29E5B82ED3F8F41D30C4B96A11C0526884E0B86D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:0c:fd:c6:67:78:0c:49:c4:e4:c5:53:9d: 8d:19:93:43:35:16:68:4d:30:23:58:3f:41:bd:91: c1:4b:72:b2:9d:12:61:c8:6c:25:dc:95:26:11:a3: f6:8d:bd:ac:63:15:2b:f8:25:86:15:a5:8c:3c:8c: bc:b4:5e:32:d5:14:19:40:db:2f:1b:f3:08:ce:2a: b1:1f:d9:fd:63:6d:4e:87:1f:77:7a:61:63:a1:f6: 74:97:f7:6f:f8:d4:e0:f8:64:1b:35:ac:b1:af:dc: dc:db:a8:1f:09:c0:15:d8:f8:39:d8:af:de:6b:fb: b7:ed:61:08:9b:6e:5c:1f:2f:ff:40:b5:d4:cf:85: f6:88:6b:aa:8c:97:85:c1:f1:60:fd:51:d5:ca:4d: d5:81:a8:2c:ec:74:64:f2:a4:06:3e:47:b2:3c:3c: c1:75:f3:42:d2:21:59:13:66:15:d9:ed:30:24:7c: 0b:25:87:16:93:c2:ca:45:1a:b5:49:99:d7:02:e4: a7:36:3c:6a:6d:07:57:9b:b7:ba:29:8a:2f:26:0d: 0f:1b:fe:20:47:1e:dd:58:8d:4e:f5:67:8e:30:04: 75:a4:1e:70:02:ad:fe:d0:ce:86:76:cb:18:8c:79: f1:1e:56:d3:b6:f4:89:a6:96:c3:8c:7f:97:19:31: 78:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:B8:2E:D3:F8:F4:1D:30:C4:B9:6A:11:C0:52:68:84:E0:B8:6D X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KeW4LtP49B0wxLlqEcBSaITguG0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:4e:1b:b9:32:1a:db:9c:fb:59:ff:b8:58:50:b6:03:18:43: 36:c0:f0:a2:c1:84:77:cc:a5:12:0f:49:27:b3:17:fb:62:c9: 48:c8:4a:51:f3:55:5b:25:8a:31:3d:3e:ed:a8:89:4b:8c:80: 6b:14:e1:63:ad:a6:af:1a:9b:81:6f:44:94:69:4d:11:4b:00: c5:6a:95:dd:ae:2f:24:ab:16:29:c7:71:34:13:98:67:cc:b9: 05:78:02:3c:ea:23:9a:d4:c8:b3:39:ba:8e:01:e1:35:be:31: c1:ba:c2:51:e0:75:78:91:05:9b:37:e9:9c:78:f9:95:02:80: f1:32:da:74:09:96:e2:a3:17:2a:88:33:fe:b7:1f:ae:4a:a5: ab:f2:51:78:85:ec:58:cf:4f:13:80:b5:68:89:e0:8b:2b:f5: 9e:e3:c8:3d:ad:7c:c3:4d:c0:c7:2a:c8:9c:18:64:82:b4:04: e1:5b:d8:ca:59:09:e5:45:87:25:e8:30:c6:ec:65:17:3d:33: 05:d4:e8:71:0b:9d:e8:aa:38:be:2d:bf:07:54:32:22:32:6d: 66:15:7c:97:b6:ed:7e:96:96:f5:71:30:67:78:4f:aa:cd:33: 67:28:aa:4c:ee:bc:44:88:70:37:70:8d:f9:13:9c:f9:f0:05: b6:75:4b:67 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTExMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI5RTVCODJFRDNGOEY0 MUQzMEM0Qjk2QTExQzA1MjY4ODRFMEI4NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpPQz9xmd4DEnE5MVTnY0Zk0M1FmhNMCNYP0G9kcFLcrKdEmHI bCXclSYRo/aNvaxjFSv4JYYVpYw8jLy0XjLVFBlA2y8b8wjOKrEf2f1jbU6HH3d6 YWOh9nSX92/41OD4ZBs1rLGv3NzbqB8JwBXY+DnYr95r+7ftYQibblwfL/9AtdTP hfaIa6qMl4XB8WD9UdXKTdWBqCzsdGTypAY+R7I8PMF180LSIVkTZhXZ7TAkfAsl hxaTwspFGrVJmdcC5Kc2PGptB1ebt7opii8mDQ8b/iBHHt1YjU71Z44wBHWkHnAC rf7QzoZ2yxiMefEeVtO29ImmlsOMf5cZMXhrAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUKeW4LtP49B0wxLlqEcBSaITguG0wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9LZVc0THRQNDlCMHd4 TGxxRWNCU2FJVGd1RzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQBMA0GCSqGSIb3DQEBCwUAA4IBAQA9Thu5MhrbnPtZ/7hYULYDGEM2wPCi wYR3zKUSD0knsxf7YslIyEpR81VbJYoxPT7tqIlLjIBrFOFjraavGpuBb0SUaU0R SwDFapXdri8kqxYpx3E0E5hnzLkFeAI86iOa1MizObqOAeE1vjHBusJR4HV4kQWb N+mcePmVAoDxMtp0CZbioxcqiDP+tx+uSqWr8lF4hexYz08TgLVoieCLK/We48g9 rXzDTcDHKsicGGSCtAThW9jKWQnlRYcl6DDG7GUXPTMF1OhxC53oqji+Lb8HVDIi Mm1mFXyXtu1+lpb1cTBneE+qzTNnKKpM7rxEiHA3cI35E5z58AW2dUtn -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:23 2024 by rpki-client on console-fra.rpki-client.org