$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XAqy7niA1rMyTVMe35XevX6d0yM.roa File: XAqy7niA1rMyTVMe35XevX6d0yM.roa (raw, json) Hash identifier: /LmHX7enMEv9j9S+8GK6HBhbd0pSFJR+s5gqEhcptDA= Subject key identifier: 5C:0A:B2:EE:78:80:D6:B3:32:4D:53:1E:DF:95:DE:BD:7E:9D:D3:23 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 119A Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XAqy7niA1rMyTVMe35XevX6d0yM.roa Signing time: Mon 26 Aug 2024 05:10:57 +0000 ROA not before: Mon 26 Aug 2024 05:10:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4506 (0x119a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:57 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5C0AB2EE7880D6B3324D531EDF95DEBD7E9DD323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:64:82:53:31:29:fa:b1:d6:47:e6:90:16: e0:a0:dd:2c:ce:8f:89:c1:05:fc:71:47:c1:ff:51: 23:6a:c3:67:09:44:ec:44:e2:b3:9f:5e:5d:57:bf: 64:0d:24:7a:60:bb:98:36:9c:9d:35:e5:da:e0:50: cc:2e:9f:22:45:c3:72:09:71:e1:c3:f0:a7:9d:3c: 0d:af:9e:2e:0c:f7:05:7a:d6:36:41:db:5d:e4:86: 50:5b:25:83:c2:19:0a:46:43:93:17:97:cf:a2:e2: 6f:96:36:b6:27:15:fe:20:89:27:a6:e8:5d:6c:ac: 1f:a2:4a:64:e6:41:07:60:ec:94:3e:48:d9:db:db: fc:11:1a:44:61:dd:82:1e:c6:b7:00:89:5a:c2:55: ab:ea:14:05:aa:c0:eb:b1:25:13:4e:b9:9a:d0:e2: fa:52:3c:db:50:33:d0:5a:26:12:6d:3a:3a:e0:a6: f5:59:04:b4:a9:80:b3:88:b9:3d:dc:7a:89:45:05: fd:0f:7d:23:9e:6e:c0:ca:e6:7a:8c:49:5e:c2:3b: 11:6f:b3:28:73:5b:db:aa:83:3f:a7:57:6a:f9:bb: 72:79:84:63:2b:9d:15:b9:59:d0:1f:af:2c:3e:84: 47:ed:f9:bf:1b:01:04:14:b5:28:e6:ee:8f:3a:e6: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0A:B2:EE:78:80:D6:B3:32:4D:53:1E:DF:95:DE:BD:7E:9D:D3:23 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XAqy7niA1rMyTVMe35XevX6d0yM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.224.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:3e:2b:05:4b:3e:ce:15:ed:af:c4:a9:fb:b9:aa:02:8e:db: 25:9c:93:d1:a0:a8:62:2b:1a:5c:19:75:ad:e1:c2:6e:92:fc: 27:18:cf:da:ba:e1:f5:63:16:14:58:f1:05:08:ed:1d:3b:cf: 8b:f0:f9:f9:a6:e7:bd:da:da:49:96:ae:5c:d5:38:00:b8:3d: d7:84:d3:c0:30:a7:c3:eb:6e:52:12:c8:30:71:22:26:6b:59: a4:bb:05:9c:13:2f:dd:68:43:56:ba:f9:05:42:0e:a0:2f:ea: 27:c9:21:a3:47:a2:3b:d8:f4:60:79:2a:6c:ff:f9:24:c6:dc: 8f:da:27:c9:48:64:ac:c5:2d:ab:04:34:b9:d8:22:a0:ae:45: 93:b1:33:7a:c7:8b:58:b9:75:55:b0:d4:95:95:c3:1e:35:8e: 8e:b5:d2:c9:68:20:ff:ff:1e:9b:96:0f:7d:10:67:15:96:23: de:1b:ec:d1:46:42:bd:a5:7e:43:67:88:63:4d:4f:a9:da:d5: a6:2b:dd:9f:38:ba:da:58:fe:1d:2f:5c:cf:ea:12:1d:94:3e: 75:c3:83:62:4e:92:af:9b:e3:b6:b4:2c:d2:ad:77:d4:12:43: 41:02:bc:0a:04:1e:96:d3:f6:ee:85:fe:e3:ac:0c:68:21:48: 4f:c3:56:51 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDMEFCMkVFNzg4MEQ2 QjMzMjRENTMxRURGOTVERUJEN0U5REQzMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdQmSCUzEp+rHWR+aQFuCg3SzOj4nBBfxxR8H/USNqw2cJROxE 4rOfXl1Xv2QNJHpgu5g2nJ015drgUMwunyJFw3IJceHD8KedPA2vni4M9wV61jZB 213khlBbJYPCGQpGQ5MXl8+i4m+WNrYnFf4giSem6F1srB+iSmTmQQdg7JQ+SNnb 2/wRGkRh3YIexrcAiVrCVavqFAWqwOuxJRNOuZrQ4vpSPNtQM9BaJhJtOjrgpvVZ BLSpgLOIuT3ceolFBf0PfSOebsDK5nqMSV7COxFvsyhzW9uqgz+nV2r5u3J5hGMr nRW5WdAfryw+hEft+b8bAQQUtSjm7o865oUBAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUXAqy7niA1rMyTVMe35XevX6d0yMwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9YQXF5N25pQTFyTXlU Vk1lMzVYZXZYNmQweU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnTgMA0GCSqGSIb3DQEBCwUAA4IBAQCdPisFSz7OFe2vxKn7uaoCjtslnJPR oKhiKxpcGXWt4cJukvwnGM/auuH1YxYUWPEFCO0dO8+L8Pn5pue92tpJlq5c1TgA uD3XhNPAMKfD625SEsgwcSIma1mkuwWcEy/daENWuvkFQg6gL+onySGjR6I72PRg eSps//kkxtyP2ifJSGSsxS2rBDS52CKgrkWTsTN6x4tYuXVVsNSVlcMeNY6OtdLJ aCD//x6blg99EGcVliPeG+zRRkK9pX5DZ4hjTU+p2tWmK92fOLraWP4dL1zP6hId lD51w4NiTpKvm+O2tCzSrXfUEkNBArwKBB6W0/buhf7jrAxoIUhPw1ZR -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org