$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Ksl4qc3YGSrVoz4TLyiU7gU3jFQ.roa File: Ksl4qc3YGSrVoz4TLyiU7gU3jFQ.roa (raw, json) Hash identifier: Cs0Y8/9Tn+AwcOy5hl0F7V7E3f8bQ8Dy1zICb2YyzF8= Subject key identifier: 2A:C9:78:A9:CD:D8:19:2A:D5:A3:3E:13:2F:28:94:EE:05:37:8C:54 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12A2 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Ksl4qc3YGSrVoz4TLyiU7gU3jFQ.roa Signing time: Mon 10 Feb 2025 14:15:04 +0000 ROA not before: Mon 10 Feb 2025 14:15:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63199 IP address blocks: 150.116.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4770 (0x12a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2AC978A9CDD8192AD5A33E132F2894EE05378C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:8f:d2:43:c5:4b:6a:dc:fd:e0:b6:b5:36: 6c:ab:85:53:9c:26:10:5c:b0:28:b4:72:7e:ad:07: d4:b2:c6:bc:3e:0e:ca:29:25:e3:e2:f7:3b:35:fd: 56:f6:33:fa:b3:1f:ff:75:9c:53:31:7c:dc:86:9f: 33:a5:b4:f8:69:48:e5:f6:c6:b1:43:7a:b5:74:e0: 97:cd:94:b5:e1:69:1a:89:09:ee:7e:1f:31:3a:eb: d8:be:c9:76:ba:96:6b:89:2f:c2:e1:33:3e:10:0d: 1a:c9:dd:a1:ca:eb:ff:8d:f9:72:41:76:0e:ac:54: 2d:1b:52:64:18:a2:b1:d1:7d:9b:75:c2:9f:c4:04: 66:1f:04:b7:84:f0:dc:1f:1a:d1:48:9c:0e:01:f8: 21:7f:72:bb:eb:d8:8b:26:95:ac:2a:62:ec:59:88: 89:e0:77:4a:6f:a3:a3:1a:a7:41:52:a5:be:30:4d: 0c:4f:1f:55:d4:99:7a:5c:7b:57:70:6d:be:43:50: d9:1b:6e:fa:71:f0:f0:09:fe:c1:e1:5f:c5:fe:8d: 08:35:64:29:18:3f:95:e3:5a:20:09:a3:92:91:bc: 9e:9a:94:49:36:ee:d3:ed:74:70:d1:e8:a1:97:8f: 80:82:50:35:c5:36:cc:68:d6:99:35:3d:6b:64:49: 4f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C9:78:A9:CD:D8:19:2A:D5:A3:3E:13:2F:28:94:EE:05:37:8C:54 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Ksl4qc3YGSrVoz4TLyiU7gU3jFQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.12.0/24 Signature Algorithm: sha256WithRSAEncryption 45:35:27:5e:77:f9:20:0d:5f:f7:64:e7:0b:a8:94:7e:d3:58: 8c:4f:7b:88:41:79:f3:1e:38:cf:05:1f:ff:cd:31:15:6a:d1: da:3d:c5:01:d1:3e:6b:f7:43:23:00:0a:b9:79:32:5d:ce:7c: 2c:77:7f:96:33:84:71:65:aa:e5:99:fd:9d:e4:d3:4f:37:67: 10:3f:84:72:12:e9:61:57:6c:c5:4a:d7:5b:3e:0b:14:cb:be: c0:cf:4e:3a:95:40:47:b2:8f:41:2d:70:db:21:28:cc:7e:8e: fe:e2:92:4f:9b:9d:39:d3:a9:4a:ee:01:07:10:83:03:0f:54: cc:28:c7:2e:2e:3e:4c:3e:94:dd:be:eb:90:11:0e:d5:29:35: 71:ea:99:30:38:81:3b:0a:ad:87:aa:09:fc:14:61:05:4b:1d: fc:62:2a:b5:e4:bd:4c:4d:00:88:e3:f8:47:63:35:2e:a4:a4: 6c:19:21:7d:17:f2:94:39:3c:3e:d7:a3:b2:77:d1:b0:90:c1: d4:72:5b:36:ce:d0:24:cf:2e:09:5a:a4:bf:c5:51:3f:16:ef: 57:fc:92:8e:03:97:97:88:ef:d4:e8:b6:ee:ae:c5:c2:b3:3c: 00:00:e1:d7:fc:e1:a9:13:ed:6a:3b:25:db:a5:34:d2:1e:75: 30:e3:1e:67 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBQzk3OEE5Q0REODE5 MkFENUEzM0UxMzJGMjg5NEVFMDUzNzhDNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxXo/SQ8VLatz94La1NmyrhVOcJhBcsCi0cn6tB9Syxrw+Dsop JePi9zs1/Vb2M/qzH/91nFMxfNyGnzOltPhpSOX2xrFDerV04JfNlLXhaRqJCe5+ HzE669i+yXa6lmuJL8LhMz4QDRrJ3aHK6/+N+XJBdg6sVC0bUmQYorHRfZt1wp/E BGYfBLeE8NwfGtFInA4B+CF/crvr2IsmlawqYuxZiIngd0pvo6Map0FSpb4wTQxP H1XUmXpce1dwbb5DUNkbbvpx8PAJ/sHhX8X+jQg1ZCkYP5XjWiAJo5KRvJ6alEk2 7tPtdHDR6KGXj4CCUDXFNsxo1pk1PWtkSU+/AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUKsl4qc3YGSrVoz4TLyiU7gU3jFQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9Lc2w0cWMzWUdTclZv ejRUTHlpVTdnVTNqRlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQMMA0GCSqGSIb3DQEBCwUAA4IBAQBFNSded/kgDV/3ZOcLqJR+01iMT3uI QXnzHjjPBR//zTEVatHaPcUB0T5r90MjAAq5eTJdznwsd3+WM4RxZarlmf2d5NNP N2cQP4RyEulhV2zFStdbPgsUy77Az046lUBHso9BLXDbISjMfo7+4pJPm50506lK 7gEHEIMDD1TMKMcuLj5MPpTdvuuQEQ7VKTVx6pkwOIE7Cq2Hqgn8FGEFSx38Yiq1 5L1MTQCI4/hHYzUupKRsGSF9F/KUOTw+16Oyd9GwkMHUcls2ztAkzy4JWqS/xVE/ Fu9X/JKOA5eXiO/U6LbursXCszwAAOHX/OGpE+1qOyXbpTTSHnUw4x5n -----END CERTIFICATE-----Generated at Sun Apr 6 19:59:19 2025 by rpki-client