$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iDAkjjLlwae4ey0IYvfIggUBhfY.roa File: iDAkjjLlwae4ey0IYvfIggUBhfY.roa (raw, json) Hash identifier: g/sdlDkSD4dft3oCWRQ8hL4xNQtCqwuYbTM+opsxM8k= Subject key identifier: 88:30:24:8E:32:E5:C1:A7:B8:7B:2D:08:62:F7:C8:82:05:01:85:F6 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12B5 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iDAkjjLlwae4ey0IYvfIggUBhfY.roa Signing time: Mon 10 Feb 2025 14:15:09 +0000 ROA not before: Mon 10 Feb 2025 14:15:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10085 IP address blocks: 150.117.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4789 (0x12b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8830248E32E5C1A7B87B2D0862F7C882050185F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:03:ee:49:69:77:ce:f1:2c:f5:63:07:ce: b5:23:ec:ea:40:bb:90:8f:7a:c7:c5:25:06:a4:cb: 90:95:1a:97:42:73:c8:c2:9e:26:ab:c1:2c:bd:b4: c8:a2:4a:4f:89:84:cc:7b:4d:29:0c:a3:67:fc:4f: c9:74:ff:c9:71:7c:8a:7c:35:c3:3c:8c:b0:40:c1: f6:9f:50:f3:4e:dc:2e:4b:52:0f:44:e6:61:62:d6: ba:ac:be:1e:57:a6:72:73:ca:e1:1b:c9:b9:62:a9: e0:1d:92:8b:f6:49:bf:fe:5c:44:ba:d9:f9:7c:0d: 5a:41:33:a7:c3:6e:4c:63:f0:80:a4:9c:7d:65:3b: 65:49:f3:89:c1:2b:b5:aa:88:66:9d:69:7a:06:a7: 7c:69:bb:15:3f:ce:98:45:c7:1b:c3:7b:1f:5c:8a: 8b:ce:c7:32:15:20:0f:c0:fb:59:2f:a2:26:17:03: a0:ab:e3:24:fb:3a:ed:ba:7a:7d:10:fd:80:dd:42: f5:4a:18:5f:62:a0:1c:f5:b9:e3:ad:8f:ef:3f:f7: cb:e1:8c:9d:b6:c2:d6:70:54:9d:77:14:43:42:6e: 03:c9:73:08:51:2a:cb:77:b3:0a:f4:08:92:7f:78: 27:0b:9e:15:0e:86:2a:f0:4b:00:65:4a:64:58:5a: 9f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:30:24:8E:32:E5:C1:A7:B8:7B:2D:08:62:F7:C8:82:05:01:85:F6 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iDAkjjLlwae4ey0IYvfIggUBhfY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.96.0/21 Signature Algorithm: sha256WithRSAEncryption a4:10:ff:76:f2:4e:ed:c3:bc:5b:6a:bb:24:4d:33:03:35:b9: d2:ff:99:73:7e:a5:73:47:bd:e3:f6:18:0d:9b:9a:f2:52:6e: 0d:d6:97:aa:90:de:59:9c:54:a3:18:b3:de:0b:19:ea:0c:62: 79:a6:6b:73:f5:cd:6a:33:fb:6c:72:73:f0:29:b2:9c:86:49: ed:6e:72:fd:49:52:f2:f1:5d:01:23:82:2a:bb:ee:2d:f2:07: e7:07:84:8e:b5:43:5e:da:84:27:18:aa:16:1e:94:48:22:73: 91:05:09:97:19:e4:30:a9:4a:35:e3:18:e1:f2:4c:b9:51:14: fa:bc:96:d4:bb:ca:d9:f0:84:52:bd:58:21:da:67:5a:e2:0b: ae:c8:65:db:05:77:6f:cb:f0:48:02:77:51:26:31:ff:a9:43: b4:0a:c1:07:38:f2:14:2d:c6:62:2c:22:ef:aa:59:46:c8:af: 70:22:fd:3b:d6:ac:60:75:2f:2a:1f:b1:77:ab:f7:0a:e0:6f: 25:57:16:60:7b:cd:93:4d:35:0e:f9:7b:48:93:24:23:cc:76: 4c:0b:2e:51:13:eb:9d:83:09:44:a5:e0:c0:1d:9f:b0:6a:84: f0:fd:7e:51:1a:13:05:dc:e4:aa:52:a2:16:4c:c7:42:7c:c8: bf:e1:22:70 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICErUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4MzAyNDhFMzJFNUMx QTdCODdCMkQwODYyRjdDODgyMDUwMTg1RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA0wPuSWl3zvEs9WMHzrUj7OpAu5CPesfFJQaky5CVGpdCc8jC niarwSy9tMiiSk+JhMx7TSkMo2f8T8l0/8lxfIp8NcM8jLBAwfafUPNO3C5LUg9E 5mFi1rqsvh5XpnJzyuEbybliqeAdkov2Sb/+XES62fl8DVpBM6fDbkxj8ICknH1l O2VJ84nBK7WqiGadaXoGp3xpuxU/zphFxxvDex9ciovOxzIVIA/A+1kvoiYXA6Cr 4yT7Ou26en0Q/YDdQvVKGF9ioBz1ueOtj+8/98vhjJ22wtZwVJ13FENCbgPJcwhR Kst3swr0CJJ/eCcLnhUOhirwSwBlSmRYWp9JAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUiDAkjjLlwae4ey0IYvfIggUBhfYwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9pREFrampMbHdhZTRl eTBJWXZmSWdnVUJoZlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnVgMA0GCSqGSIb3DQEBCwUAA4IBAQCkEP928k7tw7xbarskTTMDNbnS/5lz fqVzR73j9hgNm5ryUm4N1peqkN5ZnFSjGLPeCxnqDGJ5pmtz9c1qM/tscnPwKbKc hkntbnL9SVLy8V0BI4Iqu+4t8gfnB4SOtUNe2oQnGKoWHpRIInORBQmXGeQwqUo1 4xjh8ky5URT6vJbUu8rZ8IRSvVgh2mda4guuyGXbBXdvy/BIAndRJjH/qUO0CsEH OPIULcZiLCLvqllGyK9wIv071qxgdS8qH7F3q/cK4G8lVxZge82TTTUO+XtIkyQj zHZMCy5RE+udgwlEpeDAHZ+waoTw/X5RGhMF3OSqUqIWTMdCfMi/4SJw -----END CERTIFICATE-----Generated at Sun Apr 6 19:52:27 2025 by rpki-client