$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/SrabNYJZ8SpTLaOcTX0XMQj774k.roa File: SrabNYJZ8SpTLaOcTX0XMQj774k.roa (raw, json) Hash identifier: 1gmTgmbrhLG97sh3207UoySpJJZZ9V1hQr2qHZwDCec= Subject key identifier: 4A:B6:9B:35:82:59:F1:2A:53:2D:A3:9C:4D:7D:17:31:08:FB:EF:89 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 116D Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/SrabNYJZ8SpTLaOcTX0XMQj774k.roa Signing time: Mon 26 Aug 2024 05:10:46 +0000 ROA not before: Mon 26 Aug 2024 05:10:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63199 IP address blocks: 150.116.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4461 (0x116d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4AB69B358259F12A532DA39C4D7D173108FBEF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:ee:31:94:3a:0f:6e:34:a6:fc:e9:4f:5f: 06:93:33:ba:6e:bb:fd:b0:c1:4e:02:f8:19:6a:6e: f2:c9:85:19:54:ce:89:13:f1:12:c2:6d:9c:c5:9e: 3b:25:91:23:86:90:d3:36:ff:cb:8d:82:c0:56:43: 7f:00:1b:2a:09:ce:60:f9:e3:b4:d5:d7:48:09:d4: 12:03:1f:b8:81:9c:d4:5d:f2:8f:f8:22:e3:36:b2: 6f:e9:67:65:4c:f9:99:0a:9e:2f:bd:30:62:5d:8c: 40:ab:d9:08:ca:2a:6d:8b:41:ea:83:b4:84:6e:af: ff:5c:58:13:00:12:a2:8b:29:1f:11:5a:38:22:13: 97:18:70:a7:84:0c:98:1b:fe:e2:2a:e4:c1:6d:16: a6:57:41:be:3b:b2:3c:42:3f:e9:fe:dd:92:ea:91: 60:47:d8:7e:b5:bc:5f:5c:e8:c7:68:c7:80:eb:4d: b9:15:85:3d:55:88:f9:32:60:4c:1e:4d:67:74:e2: da:68:82:d2:83:ab:d9:28:69:f7:cd:3c:fd:6d:f3: fd:15:5f:21:55:ea:20:cd:1a:78:d5:88:aa:28:9f: 12:cc:f2:b8:0d:41:59:3c:9d:a6:fa:7b:77:b2:bf: 29:ce:06:82:41:af:ed:a1:75:35:45:5b:2d:9d:e7: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B6:9B:35:82:59:F1:2A:53:2D:A3:9C:4D:7D:17:31:08:FB:EF:89 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/SrabNYJZ8SpTLaOcTX0XMQj774k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.92.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:4b:cf:24:f4:48:86:f2:2b:22:62:dc:2f:13:a9:46:03:7c: 33:e0:0b:9e:db:22:83:2c:3e:94:ed:d1:0b:45:fe:1c:2d:a5: 4a:bc:de:68:7f:11:0d:a7:8d:a5:1f:21:de:68:97:a2:da:f8: 25:98:84:6e:22:ed:38:5a:5f:83:09:84:c6:a5:f5:fc:42:b9: 01:65:9d:db:71:13:9f:b8:2b:1f:57:76:28:7c:d4:ad:4e:e7: 5c:1b:9b:c6:e3:e3:01:7f:1f:96:ae:8d:4b:cd:90:a5:44:ee: 9e:32:3b:e7:df:94:6d:05:d3:e2:89:29:6e:be:af:bd:60:d1: 7d:02:af:28:63:b9:50:ee:2a:f4:5a:00:5b:f7:2b:4f:a6:ed: 36:d6:4f:c7:65:37:d8:d1:e3:7c:36:9f:f4:74:ee:1a:cd:e8: fe:72:9f:de:b0:ad:b9:e4:b0:4d:85:f5:ab:b3:31:ff:25:3a: 17:de:51:04:9c:73:e5:d7:09:b6:98:57:a6:c7:8b:09:3f:a2: 39:91:da:60:ab:2b:71:2e:a8:37:5e:3d:ed:2c:91:15:bc:07: aa:56:3a:ec:09:23:29:17:45:a2:aa:e4:cc:64:ce:df:34:9c: d4:0d:59:cf:48:54:88:19:40:27:da:2b:12:0d:8f:d7:e1:4a: ec:e9:d7:59 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBQjY5QjM1ODI1OUYx MkE1MzJEQTM5QzREN0QxNzMxMDhGQkVGODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAXu4xlDoPbjSm/OlPXwaTM7puu/2wwU4C+BlqbvLJhRlUzokT 8RLCbZzFnjslkSOGkNM2/8uNgsBWQ38AGyoJzmD547TV10gJ1BIDH7iBnNRd8o/4 IuM2sm/pZ2VM+ZkKni+9MGJdjECr2QjKKm2LQeqDtIRur/9cWBMAEqKLKR8RWjgi E5cYcKeEDJgb/uIq5MFtFqZXQb47sjxCP+n+3ZLqkWBH2H61vF9c6Mdox4DrTbkV hT1ViPkyYEweTWd04tpogtKDq9koaffNPP1t8/0VXyFV6iDNGnjViKoonxLM8rgN QVk8nab6e3eyvynOBoJBr+2hdTVFWy2d55o9AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUSrabNYJZ8SpTLaOcTX0XMQj774kwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9TcmFiTllKWjhTcFRM YU9jVFgwWE1Rajc3NGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClnRcMA0GCSqGSIb3DQEBCwUAA4IBAQAqS88k9EiG8isiYtwvE6lGA3wz4Aue 2yKDLD6U7dELRf4cLaVKvN5ofxENp42lHyHeaJei2vglmIRuIu04Wl+DCYTGpfX8 QrkBZZ3bcROfuCsfV3YofNStTudcG5vG4+MBfx+Wro1LzZClRO6eMjvn35RtBdPi iSluvq+9YNF9Aq8oY7lQ7ir0WgBb9ytPpu021k/HZTfY0eN8Np/0dO4azej+cp/e sK255LBNhfWrszH/JToX3lEEnHPl1wm2mFemx4sJP6I5kdpgqytxLqg3Xj3tLJEV vAeqVjrsCSMpF0WiquTMZM7fNJzUDVnPSFSIGUAn2isSDY/X4Urs6ddZ -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:25 2024 by rpki-client on console-ams.rpki-client.org