$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lT-l9JaDSinTe48NpdY_xaL0NKo.roa File: lT-l9JaDSinTe48NpdY_xaL0NKo.roa (raw, json) Hash identifier: jbyUVVVFOH9qfrBKSbK/RLBn1kj0xUw78mQMNeMKqOI= Subject key identifier: 95:3F:A5:F4:96:83:4A:29:D3:7B:8F:0D:A5:D6:3F:C5:A2:F4:34:AA Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 11C2 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lT-l9JaDSinTe48NpdY_xaL0NKo.roa Signing time: Mon 26 Aug 2024 05:11:07 +0000 ROA not before: Mon 26 Aug 2024 05:11:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4546 (0x11c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:11:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=953FA5F496834A29D37B8F0DA5D63FC5A2F434AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:e6:25:94:3f:20:d5:53:cf:ad:f9:d3:1a: 70:ad:e9:2b:5a:e0:d5:6a:be:35:b2:ce:08:fb:ea: 4e:ec:f5:3d:c4:d8:c9:b1:e0:b6:e6:c5:9b:94:2c: a6:5b:47:23:86:64:fb:45:c7:93:4f:f8:94:c1:0a: d3:3a:e9:c6:45:e7:2e:e3:99:00:c9:1c:2f:57:40: 7e:d6:c4:33:31:94:0a:c9:17:09:85:3d:d3:a2:90: da:46:31:f9:6d:5e:c5:0e:05:90:e4:47:20:18:74: 6b:31:70:43:eb:cc:55:58:f8:a0:9b:84:b4:b7:97: 5b:0d:da:f1:c5:46:15:6e:57:28:f5:9d:00:ac:e9: 36:6c:32:d0:3c:65:07:39:2f:6f:ee:57:65:94:a8: 63:b0:21:d4:be:bb:78:43:41:9e:34:da:f6:8b:66: 6d:fa:e0:a1:93:62:d7:76:8c:f9:3c:83:e0:2b:b1: d5:78:9d:92:4e:1c:0f:8b:47:66:d0:9c:2a:12:ba: cd:47:41:54:ee:0b:85:04:02:81:0f:c0:21:b8:76: 09:59:34:71:fa:02:56:31:c0:bc:ae:73:ed:5e:91: 8b:92:ab:2b:60:a4:a5:f5:81:45:e6:1a:98:3a:c8: 28:c5:a2:3b:c3:18:ab:cd:ed:bc:cb:d2:3a:b8:30: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3F:A5:F4:96:83:4A:29:D3:7B:8F:0D:A5:D6:3F:C5:A2:F4:34:AA X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lT-l9JaDSinTe48NpdY_xaL0NKo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.232.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:a7:a5:9c:da:3b:5f:5b:8a:74:36:0c:17:fc:03:f3:1c:85: 88:c8:74:af:86:cb:09:24:28:c8:de:24:78:82:a8:b3:cf:ae: 13:42:73:d4:fc:87:92:66:52:4e:69:ea:36:09:d0:3b:1e:94: a4:ce:a1:6a:42:71:19:0c:f8:9d:04:14:bc:bc:77:94:75:e7: af:71:64:30:8b:bd:df:08:b4:45:44:a6:14:a1:1c:72:9b:ef: 98:6d:2f:42:fb:6e:5b:d9:19:63:87:3b:7c:5b:d7:69:47:92: 43:7f:10:ff:7e:c1:22:8f:87:f1:c0:9f:87:ed:4b:0c:6a:ff: a9:2a:27:7f:c9:f6:d8:26:b7:bb:9c:89:82:b9:50:8a:c8:c4: 2b:8c:5f:8f:32:e9:92:b7:ae:81:4f:ea:59:50:87:7a:4b:08: d7:19:88:99:ec:d7:c0:a6:c2:47:0a:1e:52:c3:ce:57:ed:22: c2:0c:ca:2a:b7:cf:aa:62:c2:c3:2e:9b:d0:e4:71:fb:c6:01: 26:a9:19:69:d6:e8:0f:5d:17:b4:50:93:55:e1:dd:cf:c9:aa: e8:0c:f9:16:8f:fb:e4:50:5a:73:fa:cb:33:53:ba:f9:b1:45: ea:36:06:d5:ab:99:fe:42:bd:cc:35:d9:0b:17:df:77:26:56: e9:1a:1a:c4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTExMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk1M0ZBNUY0OTY4MzRB MjlEMzdCOEYwREE1RDYzRkM1QTJGNDM0QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfeuYllD8g1VPPrfnTGnCt6Sta4NVqvjWyzgj76k7s9T3E2Mmx 4LbmxZuULKZbRyOGZPtFx5NP+JTBCtM66cZF5y7jmQDJHC9XQH7WxDMxlArJFwmF PdOikNpGMfltXsUOBZDkRyAYdGsxcEPrzFVY+KCbhLS3l1sN2vHFRhVuVyj1nQCs 6TZsMtA8ZQc5L2/uV2WUqGOwIdS+u3hDQZ402vaLZm364KGTYtd2jPk8g+ArsdV4 nZJOHA+LR2bQnCoSus1HQVTuC4UEAoEPwCG4dglZNHH6AlYxwLyuc+1ekYuSqytg pKX1gUXmGpg6yCjFojvDGKvN7bzL0jq4MHtXAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUlT+l9JaDSinTe48NpdY/xaL0NKowHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9sVC1sOUphRFNpblRl NDhOcGRZX3hhTDBOS28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClnToMA0GCSqGSIb3DQEBCwUAA4IBAQAvp6Wc2jtfW4p0NgwX/APzHIWIyHSv hssJJCjI3iR4gqizz64TQnPU/IeSZlJOaeo2CdA7HpSkzqFqQnEZDPidBBS8vHeU deevcWQwi73fCLRFRKYUoRxym++YbS9C+25b2Rljhzt8W9dpR5JDfxD/fsEij4fx wJ+H7UsMav+pKid/yfbYJre7nImCuVCKyMQrjF+PMumSt66BT+pZUId6SwjXGYiZ 7NfApsJHCh5Sw85X7SLCDMoqt8+qYsLDLpvQ5HH7xgEmqRlp1ugPXRe0UJNV4d3P yaroDPkWj/vkUFpz+sszU7r5sUXqNgbVq5n+Qr3MNdkLF993JlbpGhrE -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:02 2024 by rpki-client on console-ams.rpki-client.org