$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/mfY-gYIf9b2eri3yEDg-QI8kYb8.roa File: mfY-gYIf9b2eri3yEDg-QI8kYb8.roa (raw, json) Hash identifier: 9UVtrHSnOIK+9RGrlV9q4VhJVGwGnbK0XQGEgHYztH0= Subject key identifier: 99:F6:3E:81:82:1F:F5:BD:9E:AE:2D:F2:10:38:3E:40:8F:24:61:BF Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 118D Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/mfY-gYIf9b2eri3yEDg-QI8kYb8.roa Signing time: Mon 26 Aug 2024 05:10:54 +0000 ROA not before: Mon 26 Aug 2024 05:10:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 150.116.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4493 (0x118d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99F63E81821FF5BD9EAE2DF210383E408F2461BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:30:b4:3c:f8:7b:9b:1c:4c:c0:59:bc:e3:cd: 12:1d:9c:76:70:41:a4:a5:4e:0f:c4:ae:67:3d:a9: ec:0b:93:9a:91:06:e4:99:d8:6e:3f:45:61:2e:e9: b4:ce:f1:96:ce:71:96:78:7b:82:5e:84:e9:77:64: 6e:80:67:d8:73:c1:5c:09:ff:31:f1:21:2d:93:41: 32:2b:67:97:d1:c6:ff:f6:60:eb:66:3d:58:a5:0a: eb:ae:e4:83:f6:f9:70:f4:39:f0:e3:54:f8:a9:b0: c1:9f:a5:b8:7d:6f:f8:55:b2:b9:67:d6:72:f8:ba: 0d:8c:e5:3c:8f:3a:f7:32:79:82:51:4b:d3:a9:4c: 1d:f3:f8:40:bf:e1:1a:1e:83:19:1c:ec:5d:e4:15: fa:52:ec:33:8e:4d:f4:95:d1:f9:10:be:18:f5:7a: c6:bc:11:4a:a7:5e:6d:91:44:b1:88:d1:48:5b:0e: 8f:ec:67:b2:39:91:bc:bf:6a:dd:7b:1e:09:f7:8c: c1:e0:a2:fa:de:47:b4:10:8d:ee:e2:60:e3:cb:02: 8a:4e:cb:70:90:49:db:61:eb:91:20:e9:ea:f4:bc: 84:34:30:6f:54:67:45:fa:05:8b:84:63:7a:8d:38: 68:30:1c:95:1e:09:af:3d:0a:24:4a:a7:3f:36:24: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F6:3E:81:82:1F:F5:BD:9E:AE:2D:F2:10:38:3E:40:8F:24:61:BF X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/mfY-gYIf9b2eri3yEDg-QI8kYb8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.16.0/20 Signature Algorithm: sha256WithRSAEncryption 9e:8b:50:d4:54:b4:ed:27:95:7e:ff:f2:94:2d:02:aa:53:63: 9f:11:38:a1:4b:32:ed:f5:6b:ca:4e:45:66:f5:8e:78:ab:3d: c1:65:c2:3e:0b:d4:ab:cd:be:7c:8d:29:f9:39:c6:24:45:3e: fa:04:bc:45:cd:7f:42:3f:32:2f:56:9c:e3:51:5c:f0:69:c0: 17:0d:b0:e1:db:be:84:d0:38:1a:81:6b:1d:37:c9:ab:ab:3f: 20:56:3d:30:fa:44:9b:8c:8a:f4:b8:f4:14:5e:ce:a4:68:e5: 56:22:24:70:95:fd:00:da:aa:22:9c:59:67:bd:81:e3:43:26: a6:72:f6:6b:bd:df:10:9e:eb:07:b8:fd:5c:e1:6e:42:ab:d6: 53:b4:f3:48:fb:e5:7b:14:f3:32:bc:af:83:82:a1:01:b3:7c: 2b:10:90:52:1b:6a:16:97:68:e2:e1:d1:5d:c5:7b:2c:f4:9c: 7e:d0:a8:16:cb:cc:b0:d1:6b:28:91:7d:08:c3:73:30:d4:04: 65:33:f1:d5:6c:c9:a5:78:6d:49:bf:94:5e:6d:7b:58:f7:1b: 3b:45:87:e4:42:cb:49:1c:df:04:74:19:c9:be:db:ce:f2:3c: 50:fc:6c:a2:4e:db:a5:51:44:46:5f:a6:d9:c1:72:f2:51:60: 72:68:5b:75 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5RjYzRTgxODIxRkY1 QkQ5RUFFMkRGMjEwMzgzRTQwOEYyNDYxQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmMLQ8+HubHEzAWbzjzRIdnHZwQaSlTg/Ermc9qewLk5qRBuSZ 2G4/RWEu6bTO8ZbOcZZ4e4JehOl3ZG6AZ9hzwVwJ/zHxIS2TQTIrZ5fRxv/2YOtm PVilCuuu5IP2+XD0OfDjVPipsMGfpbh9b/hVsrln1nL4ug2M5TyPOvcyeYJRS9Op TB3z+EC/4Roegxkc7F3kFfpS7DOOTfSV0fkQvhj1esa8EUqnXm2RRLGI0UhbDo/s Z7I5kby/at17Hgn3jMHgovreR7QQje7iYOPLAopOy3CQSdth65Eg6er0vIQ0MG9U Z0X6BYuEY3qNOGgwHJUeCa89CiRKpz82JAvrAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUmfY+gYIf9b2eri3yEDg+QI8kYb8wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9tZlktZ1lJZjliMmVy aTN5RURnLVFJOGtZYjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnQQMA0GCSqGSIb3DQEBCwUAA4IBAQCei1DUVLTtJ5V+//KULQKqU2OfETih SzLt9WvKTkVm9Y54qz3BZcI+C9Srzb58jSn5OcYkRT76BLxFzX9CPzIvVpzjUVzw acAXDbDh276E0DgagWsdN8mrqz8gVj0w+kSbjIr0uPQUXs6kaOVWIiRwlf0A2qoi nFlnvYHjQyamcvZrvd8QnusHuP1c4W5Cq9ZTtPNI++V7FPMyvK+DgqEBs3wrEJBS G2oWl2ji4dFdxXss9Jx+0KgWy8yw0WsokX0Iw3Mw1ARlM/HVbMmleG1Jv5RebXtY 9xs7RYfkQstJHN8EdBnJvtvO8jxQ/GyiTtulUURGX6bZwXLyUWByaFt1 -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:25 2024 by rpki-client on console-ams.rpki-client.org