$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/m4kuINqrXIAFvoHELpZAuwK46Sc.roa File: m4kuINqrXIAFvoHELpZAuwK46Sc.roa (raw, json) Hash identifier: pD6VMXFUtns4hzR6YqLaWOU/s3ipAfzCS/eVDEXTGWo= Subject key identifier: 9B:89:2E:20:DA:AB:5C:80:05:BE:81:C4:2E:96:40:BB:02:B8:E9:27 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 11BA Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/m4kuINqrXIAFvoHELpZAuwK46Sc.roa Signing time: Mon 26 Aug 2024 05:11:05 +0000 ROA not before: Mon 26 Aug 2024 05:11:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 150.117.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4538 (0x11ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:11:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9B892E20DAAB5C8005BE81C42E9640BB02B8E927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:c8:38:40:de:f9:16:5d:09:3f:ed:73:62: 6f:89:d9:b0:7a:55:3a:a8:77:16:a3:e2:d9:d7:80: 58:18:44:34:fc:b8:a7:a2:4d:cc:dd:ef:50:0d:6d: af:74:7d:41:ea:7f:48:39:1c:53:c6:8b:16:ba:c3: c8:c2:6c:2c:37:db:7f:d9:56:f6:4c:a6:e0:14:79: aa:f2:54:00:6d:33:03:e3:e8:91:97:18:00:14:3b: ba:e1:a2:eb:e4:97:e1:5f:c7:d5:1e:f3:39:62:2a: 8e:a9:59:04:34:b1:ab:ad:e1:98:ef:6e:57:56:ba: 3b:bc:61:24:df:6a:97:c2:a2:86:99:f3:85:3e:44: f9:8f:e2:02:69:7d:13:0b:f6:50:c7:c1:7a:b6:64: fe:b3:61:de:59:f6:81:a3:12:a4:5d:e7:a7:cb:c4: bd:f7:12:0f:3b:a3:90:c2:d4:75:8b:22:12:14:02: b7:1c:ad:cc:f4:eb:2c:fa:17:d6:4b:5a:68:1f:3c: 10:f7:b5:2d:f0:41:c3:7a:bc:cd:14:0c:70:7e:0e: 94:25:c7:bb:14:e9:cc:c0:ad:5b:63:f2:74:31:a0: 2b:28:9f:3a:71:16:fc:fc:12:68:01:b5:99:41:0c: d4:2a:7d:62:8e:f8:d0:86:8b:8a:33:b0:2d:75:72: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:89:2E:20:DA:AB:5C:80:05:BE:81:C4:2E:96:40:BB:02:B8:E9:27 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/m4kuINqrXIAFvoHELpZAuwK46Sc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.32.0/20 Signature Algorithm: sha256WithRSAEncryption 79:fb:63:d8:d7:35:37:0d:ae:3c:66:5a:e3:57:c0:71:0e:4c: 0b:89:95:14:ef:93:13:db:6f:49:ec:64:5f:97:1d:71:b5:8d: be:0a:3d:5f:41:b7:01:b1:cd:b5:1c:cc:a7:8a:69:b5:17:a1: 4a:be:e2:8f:1c:01:32:8a:82:11:2d:42:1f:37:df:96:c3:09: 98:22:05:dc:c4:e7:c8:49:77:36:2c:54:ec:07:2c:59:ce:53: b4:21:77:d3:f0:09:40:1e:64:65:0d:15:cc:9f:21:c7:42:d6: 29:75:3d:da:df:10:34:4d:81:95:7d:e2:f8:88:ba:a9:20:c1: 08:26:11:78:3e:96:83:d7:f5:08:a8:5a:4f:58:ed:5d:fc:1e: 31:c9:15:86:19:0f:3f:11:b4:a4:23:9b:00:cf:c0:15:30:b1: 62:dc:55:e9:2b:0b:07:f9:5c:c8:9f:96:d8:0f:bf:df:2c:18: c9:8a:c6:dc:6f:ec:df:27:4a:86:e0:8b:c5:44:fe:aa:53:2d: 77:f4:ec:91:dd:d9:36:b1:bd:53:c1:06:d4:09:97:75:68:56: 46:0d:c6:55:8e:f8:22:53:94:ae:69:0f:85:c9:42:ae:f3:26: a9:29:e0:94:7a:61:1b:cf:4c:ed:ce:b8:9d:36:ae:e2:4e:b1: 87:08:bb:4e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTExMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCODkyRTIwREFBQjVD ODAwNUJFODFDNDJFOTY0MEJCMDJCOEU5MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFqsg4QN75Fl0JP+1zYm+J2bB6VTqodxaj4tnXgFgYRDT8uKei Tczd71ANba90fUHqf0g5HFPGixa6w8jCbCw323/ZVvZMpuAUearyVABtMwPj6JGX GAAUO7rhouvkl+Ffx9Ue8zliKo6pWQQ0saut4ZjvbldWuju8YSTfapfCooaZ84U+ RPmP4gJpfRML9lDHwXq2ZP6zYd5Z9oGjEqRd56fLxL33Eg87o5DC1HWLIhIUArcc rcz06yz6F9ZLWmgfPBD3tS3wQcN6vM0UDHB+DpQlx7sU6czArVtj8nQxoCsonzpx Fvz8EmgBtZlBDNQqfWKO+NCGi4ozsC11cvqBAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUm4kuINqrXIAFvoHELpZAuwK46ScwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9tNGt1SU5xclhJQUZ2 b0hFTHBaQXV3SzQ2U2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnUgMA0GCSqGSIb3DQEBCwUAA4IBAQB5+2PY1zU3Da48ZlrjV8BxDkwLiZUU 75MT229J7GRflx1xtY2+Cj1fQbcBsc21HMynimm1F6FKvuKPHAEyioIRLUIfN9+W wwmYIgXcxOfISXc2LFTsByxZzlO0IXfT8AlAHmRlDRXMnyHHQtYpdT3a3xA0TYGV feL4iLqpIMEIJhF4PpaD1/UIqFpPWO1d/B4xyRWGGQ8/EbSkI5sAz8AVMLFi3FXp KwsH+VzIn5bYD7/fLBjJisbcb+zfJ0qG4IvFRP6qUy139OyR3dk2sb1TwQbUCZd1 aFZGDcZVjvgiU5SuaQ+FyUKu8yapKeCUemEbz0ztzridNq7iTrGHCLtO -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:35 2024 by rpki-client on console-fra.rpki-client.org