$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PxgeYLMkbBJivKkxbi9tpzW6kog.roa File: PxgeYLMkbBJivKkxbi9tpzW6kog.roa (raw, json) Hash identifier: lRn23CWx2E55tbjpeS/ZjDV6HBUO/Nn2d+5zHlecH+Q= Subject key identifier: 3F:18:1E:60:B3:24:6C:12:62:BC:A9:31:6E:2F:6D:A7:35:BA:92:88 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0F63 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PxgeYLMkbBJivKkxbi9tpzW6kog.roa Signing time: Fri 01 Sep 2023 08:29:04 +0000 ROA not before: Fri 01 Sep 2023 08:29:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 118.150.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 19:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3939 (0xf63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3F181E60B3246C1262BCA9316E2F6DA735BA9288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:92:3a:1e:3e:c5:c0:58:51:fd:03:ff:ef: 7a:22:87:fc:50:78:db:d8:f4:a8:d6:0e:e7:87:5f: 3b:7f:4e:24:40:ba:ec:85:19:2a:3a:a9:3a:32:77: 6e:16:62:2a:c6:a6:15:97:06:92:ff:be:7a:7a:bc: bf:29:da:92:0a:2a:ce:f9:f7:43:72:1c:f4:31:76: 29:d1:79:61:00:7b:c8:8a:bf:c3:2f:3b:95:d9:cf: 6d:31:51:d6:d1:63:79:76:c7:cb:26:08:6b:f6:24: 1f:e5:ac:c7:9e:43:1e:cd:91:d5:c6:6a:d7:c2:6c: 59:b1:cf:a3:e3:1b:a8:65:82:6f:57:99:fc:b5:26: 36:0e:f2:af:8e:04:ae:32:21:9a:42:e2:b6:fa:a3: c9:b9:9d:5f:bf:54:4c:a0:50:69:e5:19:6a:3c:71: 09:d2:75:de:9e:03:b9:ba:1e:e6:49:0d:68:87:61: 6f:fa:2f:a6:6d:06:04:23:72:9e:91:a4:ba:76:bc: 74:1b:a6:27:e2:fd:9d:ee:18:92:99:19:b5:06:88: 9a:5f:85:c2:be:fc:4f:ab:eb:f6:76:1a:d8:3e:c3: 82:a9:ae:fa:5b:70:9f:79:20:e3:ad:0d:db:6f:24: 9d:3f:a9:2a:09:6c:c7:14:51:e1:24:67:8b:15:6b: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:18:1E:60:B3:24:6C:12:62:BC:A9:31:6E:2F:6D:A7:35:BA:92:88 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PxgeYLMkbBJivKkxbi9tpzW6kog.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.150.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9c:a3:e2:0e:8a:46:b2:6a:4b:d5:11:a3:5b:d5:c3:2c:5b:78: de:f4:b4:c1:cc:8e:f9:26:87:65:e6:63:53:e6:12:bd:3c:4c: 1f:18:5a:c0:c2:77:88:2e:18:14:fb:dc:75:8a:0a:3a:b7:b3: fd:ad:be:b9:4e:b7:6f:da:a2:5d:50:d6:df:b0:3d:23:5b:01: 64:6c:51:f9:bf:1d:16:a8:b0:84:a6:03:ed:04:b9:e4:40:9d: ad:05:80:2c:4d:c5:98:3d:01:cc:d6:dd:79:5d:7c:38:e9:89: 97:54:8e:70:5f:ee:25:ed:a9:7d:97:6e:dd:0d:28:95:0e:76: 2a:2e:49:44:28:a7:29:1d:91:22:2a:14:f6:c5:a3:86:5f:2a: cd:1f:25:59:36:a1:b3:f7:bb:c5:8f:af:72:b0:77:81:04:6a: e6:5f:88:48:21:a7:a1:08:ed:03:5f:72:45:a2:29:24:7e:ac: 30:1c:7b:63:85:24:0b:c6:19:99:af:52:09:b5:99:0d:b4:a2: 87:52:b7:63:32:ce:bb:70:f8:ad:db:7e:c7:a5:e1:ed:8c:72: b2:29:97:b2:aa:89:80:54:5c:b2:6d:de:58:90:b6:4d:71:c2: 7d:7f:0f:df:75:95:5a:53:00:f9:5d:ce:a5:8a:0d:dc:5c:d3: f4:e9:53:d3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNGMTgxRTYwQjMyNDZD MTI2MkJDQTkzMTZFMkY2REE3MzVCQTkyODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWLpI6Hj7FwFhR/QP/73oih/xQeNvY9KjWDueHXzt/TiRAuuyF GSo6qToyd24WYirGphWXBpL/vnp6vL8p2pIKKs7590NyHPQxdinReWEAe8iKv8Mv O5XZz20xUdbRY3l2x8smCGv2JB/lrMeeQx7NkdXGatfCbFmxz6PjG6hlgm9Xmfy1 JjYO8q+OBK4yIZpC4rb6o8m5nV+/VEygUGnlGWo8cQnSdd6eA7m6HuZJDWiHYW/6 L6ZtBgQjcp6RpLp2vHQbpifi/Z3uGJKZGbUGiJpfhcK+/E+r6/Z2Gtg+w4Kprvpb cJ95IOOtDdtvJJ0/qSoJbMcUUeEkZ4sVa8yVAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUPxgeYLMkbBJivKkxbi9tpzW6kogwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9QeGdlWUxNa2JCSml2 S2t4Ymk5dHB6VzZrb2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQGdpaAMA0GCSqGSIb3DQEBCwUAA4IBAQCco+IOikayakvVEaNb1cMsW3je9LTB zI75Jodl5mNT5hK9PEwfGFrAwneILhgU+9x1igo6t7P9rb65Trdv2qJdUNbfsD0j WwFkbFH5vx0WqLCEpgPtBLnkQJ2tBYAsTcWYPQHM1t15XXw46YmXVI5wX+4l7al9 l27dDSiVDnYqLklEKKcpHZEiKhT2xaOGXyrNHyVZNqGz97vFj69ysHeBBGrmX4hI IaehCO0DX3JFoikkfqwwHHtjhSQLxhmZr1IJtZkNtKKHUrdjMs67cPit237HpeHt jHKyKZeyqomAVFyybd5YkLZNccJ9fw/fdZVaUwD5Xc6lig3cXNP06VPT -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:14 2024 by rpki-client on console-fra.rpki-client.org