$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lrgMge2CriWeY8PQae0Kvgjzkm0.roa File: lrgMge2CriWeY8PQae0Kvgjzkm0.roa (raw, json) Hash identifier: sx5s2X5m6Ptuh3f0/BKp/ttbvxRJz45DBGkdOXZuOhg= Subject key identifier: 96:B8:0C:81:ED:82:AE:25:9E:63:C3:D0:69:ED:0A:BE:08:F3:92:6D Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1195 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lrgMge2CriWeY8PQae0Kvgjzkm0.roa Signing time: Mon 26 Aug 2024 05:10:56 +0000 ROA not before: Mon 26 Aug 2024 05:10:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131607 IP address blocks: 150.117.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4501 (0x1195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=96B80C81ED82AE259E63C3D069ED0ABE08F3926D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:85:79:ac:00:af:8a:3e:44:87:ab:b0:00: 30:69:50:b7:33:59:d9:17:4f:b0:00:ad:45:e2:8c: 4f:d8:3f:a7:a2:82:80:9a:53:db:18:d6:87:a9:89: 95:ff:c6:18:94:cf:59:e5:f3:1d:3f:0e:be:35:4c: ce:19:50:be:e6:d3:66:96:f9:87:55:a7:31:6d:aa: 62:aa:1f:1f:10:42:53:6d:c2:c0:26:cc:d4:e8:50: ce:c6:4f:5e:a6:8c:07:7b:92:9f:08:c1:5f:cd:38: bd:78:e2:cb:cb:f6:52:15:7d:cd:aa:35:0c:9c:1c: 64:23:05:94:bb:5b:ef:de:7b:1a:53:eb:63:37:b7: 71:5a:bd:a1:fe:b1:76:15:99:1c:85:f7:c0:e4:96: 24:f1:13:e3:47:af:35:bd:7e:cf:03:1d:ef:4d:7f: 3e:2d:5d:ed:8c:1c:49:dc:dc:d9:af:11:35:c8:aa: 51:c7:c0:de:c0:ab:79:de:5a:29:82:0f:cb:f3:44: d5:a9:ed:16:70:80:8f:0a:f9:79:70:a9:c9:34:51: 6c:b1:bd:3c:c0:f7:d5:00:4f:c1:44:fb:3d:db:09: 1e:a2:2a:8a:21:c5:f0:74:e5:f8:e7:7d:8c:0a:09: 09:23:d5:92:08:77:0f:08:b5:af:0a:eb:3d:42:3e: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B8:0C:81:ED:82:AE:25:9E:63:C3:D0:69:ED:0A:BE:08:F3:92:6D X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lrgMge2CriWeY8PQae0Kvgjzkm0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.176.0/20 Signature Algorithm: sha256WithRSAEncryption 30:86:3a:96:ff:00:67:22:a9:20:89:d9:ba:68:18:cb:e1:5f: a7:97:11:e2:76:d4:e2:2c:0a:fa:d4:14:c8:0c:07:63:ed:7d: 2e:2d:44:2b:1d:52:bf:95:2a:06:fa:86:a6:b6:0e:28:13:55: 2b:67:32:0b:ea:f4:eb:1a:d0:c8:f1:b7:70:0c:86:9c:66:94: f2:44:46:fe:e2:b3:fe:24:08:d7:02:39:fa:74:86:09:56:0c: ef:ab:9c:ce:04:b8:02:f3:2c:db:31:05:00:d5:f4:86:53:0f: 46:81:22:f0:c0:ca:2d:ab:d4:0e:e8:e6:94:2d:8e:f5:48:9a: 24:37:88:81:0e:4c:f0:40:0e:4c:6a:d9:d5:fd:e0:b1:8e:d3: 36:92:53:d0:70:32:1a:66:74:f8:b6:6d:94:a7:48:66:e9:17: 76:e6:fc:a6:90:74:c6:1d:55:16:f7:0c:0f:27:bb:55:0b:63: 66:b0:33:e7:d7:ed:d5:0e:cc:b9:34:5d:8e:a0:c6:9d:a3:62: 83:8a:a3:25:94:7a:89:61:d2:f5:a6:fe:6c:c9:92:59:8e:95: 84:3e:a5:5e:06:a9:98:45:f7:df:88:f5:77:b1:cf:6d:40:7e: 5c:3e:85:69:97:dd:ca:95:78:35:86:e0:d4:d4:21:0b:01:c0: ef:b3:d4:4d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk2QjgwQzgxRUQ4MkFF MjU5RTYzQzNEMDY5RUQwQUJFMDhGMzkyNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9HYV5rACvij5Eh6uwADBpULczWdkXT7AArUXijE/YP6eigoCa U9sY1oepiZX/xhiUz1nl8x0/Dr41TM4ZUL7m02aW+YdVpzFtqmKqHx8QQlNtwsAm zNToUM7GT16mjAd7kp8IwV/NOL144svL9lIVfc2qNQycHGQjBZS7W+/eexpT62M3 t3FavaH+sXYVmRyF98DkliTxE+NHrzW9fs8DHe9Nfz4tXe2MHEnc3NmvETXIqlHH wN7Aq3neWimCD8vzRNWp7RZwgI8K+Xlwqck0UWyxvTzA99UAT8FE+z3bCR6iKooh xfB05fjnfYwKCQkj1ZIIdw8Ita8K6z1CPhklAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUlrgMge2CriWeY8PQae0Kvgjzkm0wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9scmdNZ2UyQ3JpV2VZ OFBRYWUwS3ZnanprbTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnWwMA0GCSqGSIb3DQEBCwUAA4IBAQAwhjqW/wBnIqkgidm6aBjL4V+nlxHi dtTiLAr61BTIDAdj7X0uLUQrHVK/lSoG+oamtg4oE1UrZzIL6vTrGtDI8bdwDIac ZpTyREb+4rP+JAjXAjn6dIYJVgzvq5zOBLgC8yzbMQUA1fSGUw9GgSLwwMotq9QO 6OaULY71SJokN4iBDkzwQA5MatnV/eCxjtM2klPQcDIaZnT4tm2Up0hm6Rd25vym kHTGHVUW9wwPJ7tVC2NmsDPn1+3VDsy5NF2OoMado2KDiqMllHqJYdL1pv5syZJZ jpWEPqVeBqmYRfffiPV3sc9tQH5cPoVpl93KlXg1huDU1CELAcDvs9RN -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:02 2024 by rpki-client on console-ams.rpki-client.org