$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/akA3FbVNgk0TJwzc8qBaO_hQQlo.roa File: akA3FbVNgk0TJwzc8qBaO_hQQlo.roa (raw, json) Hash identifier: BM+RQ3xeMA03RqcIgm784bf3QfQ/eZjeEyLzJML6EDI= Subject key identifier: 6A:40:37:15:B5:4D:82:4D:13:27:0C:DC:F2:A0:5A:3B:F8:50:42:5A Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12A5 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/akA3FbVNgk0TJwzc8qBaO_hQQlo.roa Signing time: Mon 10 Feb 2025 14:15:05 +0000 ROA not before: Mon 10 Feb 2025 14:15:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 118.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4773 (0x12a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6A403715B54D824D13270CDCF2A05A3BF850425A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:ef:fd:62:60:6b:02:32:14:d1:73:27:fe: 53:d5:96:d9:fc:39:63:46:e9:08:bf:09:50:04:48: 6b:c9:b9:a3:f7:c7:d9:25:cd:c8:1b:43:1e:b2:3e: 59:ba:ba:b5:a5:86:40:4e:a4:4e:ee:de:84:14:0e: 14:68:0c:4a:98:e8:bd:6e:36:b4:fe:ed:46:1a:3e: b1:ca:fd:a8:15:9c:74:45:b4:51:d8:4a:6e:1e:c4: 4b:ce:4f:ab:bc:a5:c9:8a:12:0f:16:a8:bb:f3:cd: 81:1c:61:de:3b:9d:a6:be:5f:23:89:02:62:7b:c2: da:ac:cd:a7:85:ec:91:f6:1b:01:35:b3:e5:eb:5b: 34:72:1f:f5:cd:96:43:29:f7:1a:96:79:a6:10:35: b8:66:df:eb:f3:14:71:fa:da:63:7c:3b:97:ae:ba: 62:e6:c6:65:8e:88:57:91:8c:33:4a:22:1c:28:43: fa:68:49:ee:9b:24:a6:1d:98:1b:09:ad:c7:56:3d: eb:8a:94:53:d9:4d:ca:a6:8c:ae:45:b5:37:d7:a0: 24:08:bd:d0:82:57:6e:07:84:a7:90:97:e4:20:55: 7b:67:80:6a:34:f3:12:f2:c1:06:72:9a:0b:1b:9f: 44:96:91:79:ac:83:81:5d:1b:8d:84:5f:74:60:ae: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:40:37:15:B5:4D:82:4D:13:27:0C:DC:F2:A0:5A:3B:F8:50:42:5A X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/akA3FbVNgk0TJwzc8qBaO_hQQlo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption a7:6b:56:e7:b4:e1:fc:d3:6f:41:10:23:35:10:6f:5a:ee:1c: 19:ef:b5:79:7d:93:a4:f6:31:b4:d1:dd:99:44:c4:d9:b0:58: 07:cc:01:d9:9b:d5:20:6b:35:97:72:65:71:f7:76:0a:d3:29: 11:32:62:b4:80:fb:95:53:0b:bc:8e:9e:eb:34:b8:f3:84:85: 8a:27:9d:e6:c6:e6:6b:0c:44:73:78:19:59:d6:33:2e:94:d5: 77:38:9f:ae:9e:bb:c4:d4:26:4d:de:17:67:83:32:45:b5:fb: f8:2f:2e:4a:9a:1f:80:b9:df:6d:bc:b3:f9:1b:92:de:df:d3: b3:40:87:a4:73:50:c0:ce:ab:b4:cc:95:4e:50:b8:ce:ce:34: 32:ea:af:75:47:68:06:28:c5:a4:f2:92:1d:ff:57:ed:2f:ca: 15:87:90:57:55:cf:a1:74:61:7d:12:51:59:ae:0d:69:a7:7e: 8e:c1:ba:ac:85:26:01:78:c6:e8:c7:3d:31:ea:03:5f:ae:40: cb:e2:bd:77:62:6d:0b:f4:95:77:46:65:51:60:59:7c:cf:77: a0:60:92:1f:bc:52:b8:00:e3:ba:de:ad:8d:4b:4e:4a:18:6e: 75:b8:8f:5a:bc:1b:4c:44:0c:1d:92:b1:35:e6:30:d3:d2:3a: 14:2a:fb:9a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZBNDAzNzE1QjU0RDgy NEQxMzI3MENEQ0YyQTA1QTNCRjg1MDQyNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC67u/9YmBrAjIU0XMn/lPVltn8OWNG6Qi/CVAESGvJuaP3x9kl zcgbQx6yPlm6urWlhkBOpE7u3oQUDhRoDEqY6L1uNrT+7UYaPrHK/agVnHRFtFHY Sm4exEvOT6u8pcmKEg8WqLvzzYEcYd47naa+XyOJAmJ7wtqszaeF7JH2GwE1s+Xr WzRyH/XNlkMp9xqWeaYQNbhm3+vzFHH62mN8O5euumLmxmWOiFeRjDNKIhwoQ/po Se6bJKYdmBsJrcdWPeuKlFPZTcqmjK5FtTfXoCQIvdCCV24HhKeQl+QgVXtngGo0 8xLywQZymgsbn0SWkXmsg4FdG42EX3RgrqlXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUakA3FbVNgk0TJwzc8qBaO/hQQlowHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9ha0EzRmJWTmdrMFRK d3pjOHFCYU9faFFRbG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAdpYwDQYJKoZIhvcNAQELBQADggEBAKdrVue04fzTb0EQIzUQb1ruHBnvtXl9 k6T2MbTR3ZlExNmwWAfMAdmb1SBrNZdyZXH3dgrTKREyYrSA+5VTC7yOnus0uPOE hYonnebG5msMRHN4GVnWMy6U1Xc4n66eu8TUJk3eF2eDMkW1+/gvLkqaH4C53228 s/kbkt7f07NAh6RzUMDOq7TMlU5QuM7ONDLqr3VHaAYoxaTykh3/V+0vyhWHkFdV z6F0YX0SUVmuDWmnfo7BuqyFJgF4xujHPTHqA1+uQMvivXdibQv0lXdGZVFgWXzP d6Bgkh+8UrgA47rerY1LTkoYbnW4j1q8G0xEDB2SsTXmMNPSOhQq+5o= -----END CERTIFICATE-----Generated at Sun Apr 6 19:57:05 2025 by rpki-client