$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/YU0zH0RHDMopnnifn0sG4s9PieU.roa File: YU0zH0RHDMopnnifn0sG4s9PieU.roa (raw, json) Hash identifier: pgbY+sbRsut/SS8m8b6xk9YCaS9++CHIq2TM5/HrSCI= Subject key identifier: 61:4D:33:1F:44:47:0C:CA:29:9E:78:9F:9F:4B:06:E2:CF:4F:89:E5 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 11B8 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/YU0zH0RHDMopnnifn0sG4s9PieU.roa Signing time: Mon 26 Aug 2024 05:11:04 +0000 ROA not before: Mon 26 Aug 2024 05:11:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131607 IP address blocks: 150.117.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4536 (0x11b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:11:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=614D331F44470CCA299E789F9F4B06E2CF4F89E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:f6:33:cd:a0:06:a4:da:88:fa:8c:74:79: 74:01:d6:92:5c:60:f8:be:88:6b:59:dd:b0:84:27: 08:dd:cc:50:28:ae:03:2a:ea:0e:aa:1c:05:88:9a: dd:b6:25:32:b2:e2:87:20:71:69:95:80:2c:30:8f: a4:93:56:59:90:d0:19:f6:e8:2a:b4:8f:82:e4:6c: 7b:1c:94:fe:94:7c:5d:33:3e:a1:c2:59:b8:08:d3: 95:7d:8f:ef:77:bd:b0:70:f4:0d:8e:76:05:1b:49: 6b:c8:27:ce:84:f1:2c:8f:1c:63:df:ab:0b:d1:1e: 26:16:15:3e:1f:af:e7:38:c5:13:64:bd:fa:fa:12: b8:71:b2:30:4c:96:ee:e6:95:71:e8:b9:32:5e:b4: 98:cd:e1:7e:a6:7c:1d:43:fa:04:4e:dc:6b:92:c0: 6f:79:e7:35:d8:89:66:1c:3a:46:14:63:d6:86:bc: 00:60:61:4c:1e:01:8b:87:8f:0b:55:be:88:b3:bf: 20:91:d1:6b:c7:d5:f7:c7:ad:32:82:bf:93:1a:26: e1:02:da:07:f8:8f:c6:69:5a:75:44:25:29:db:cc: 38:78:a8:83:a0:0e:9b:13:37:7a:ea:35:35:2d:3a: 7f:80:af:82:56:f7:d0:40:e5:01:90:5b:5a:85:a5: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4D:33:1F:44:47:0C:CA:29:9E:78:9F:9F:4B:06:E2:CF:4F:89:E5 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/YU0zH0RHDMopnnifn0sG4s9PieU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.224.0/21 Signature Algorithm: sha256WithRSAEncryption 38:db:60:33:57:6d:b9:f5:61:47:a1:11:38:83:1c:72:90:24: 91:c4:19:b4:b6:ff:79:55:b9:6d:93:df:64:98:96:94:95:29: f0:27:78:be:e1:56:69:04:0c:3d:12:6c:7d:0d:a2:fe:64:bb: 31:46:44:f1:46:f9:12:2f:0d:9f:1c:ae:b1:f4:6f:02:07:3a: 7c:8d:55:92:69:ac:3c:bd:57:ec:9f:60:ba:0a:79:dd:1a:e5: 96:9d:7d:ba:95:aa:12:b5:2c:ca:90:ce:9d:b9:60:fe:28:f5: 90:00:f1:67:d9:c1:03:21:64:5b:b3:ef:d8:e5:e0:ae:3b:d3: 98:f4:e6:3f:ba:26:25:0e:40:92:7a:9a:9e:71:95:7b:4e:8d: 7e:da:9a:72:f8:29:2e:d2:6f:cf:0c:fc:ab:41:a8:bd:d2:62: 35:70:60:09:77:cc:f7:00:89:05:90:8b:f2:35:44:67:19:c1: 9e:3e:6e:d6:f2:ea:83:ea:c0:25:c1:0c:20:8b:e9:e4:22:51: a9:00:a2:eb:62:25:38:e5:8b:8e:e1:e7:d4:b3:9e:f5:b1:e7: 51:78:ee:1f:07:eb:2e:0c:0e:c8:60:6e:cd:8c:56:33:19:36: 7d:ed:ed:90:31:1e:68:9e:43:d4:65:9e:31:23:8b:4c:c5:fa: 7b:7a:a2:58 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTExMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxNEQzMzFGNDQ0NzBD Q0EyOTlFNzg5RjlGNEIwNkUyQ0Y0Rjg5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBpPYzzaAGpNqI+ox0eXQB1pJcYPi+iGtZ3bCEJwjdzFAorgMq 6g6qHAWImt22JTKy4ocgcWmVgCwwj6STVlmQ0Bn26Cq0j4LkbHsclP6UfF0zPqHC WbgI05V9j+93vbBw9A2OdgUbSWvIJ86E8SyPHGPfqwvRHiYWFT4fr+c4xRNkvfr6 ErhxsjBMlu7mlXHouTJetJjN4X6mfB1D+gRO3GuSwG955zXYiWYcOkYUY9aGvABg YUweAYuHjwtVvoizvyCR0WvH1ffHrTKCv5MaJuEC2gf4j8ZpWnVEJSnbzDh4qIOg DpsTN3rqNTUtOn+Ar4JW99BA5QGQW1qFpWF7AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUYU0zH0RHDMopnnifn0sG4s9PieUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9ZVTB6SDBSSERNb3Bu bmlmbjBzRzRzOVBpZVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnXgMA0GCSqGSIb3DQEBCwUAA4IBAQA422AzV2259WFHoRE4gxxykCSRxBm0 tv95Vbltk99kmJaUlSnwJ3i+4VZpBAw9Emx9DaL+ZLsxRkTxRvkSLw2fHK6x9G8C Bzp8jVWSaaw8vVfsn2C6CnndGuWWnX26laoStSzKkM6duWD+KPWQAPFn2cEDIWRb s+/Y5eCuO9OY9OY/uiYlDkCSepqecZV7To1+2ppy+Cku0m/PDPyrQai90mI1cGAJ d8z3AIkFkIvyNURnGcGePm7W8uqD6sAlwQwgi+nkIlGpAKLrYiU45YuO4efUs571 sedReO4fB+suDA7IYG7NjFYzGTZ97e2QMR5onkPUZZ4xI4tMxfp7eqJY -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:35 2024 by rpki-client on console-fra.rpki-client.org