$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/px6GGJhcDQ3puj46bnJtrJFuIp0.roa File: px6GGJhcDQ3puj46bnJtrJFuIp0.roa (raw, json) Hash identifier: zRe5UWQljTV+4/uzARZNeJlppj5JGMBO7fmE9OMnttQ= Subject key identifier: A7:1E:86:18:98:5C:0D:0D:E9:BA:3E:3A:6E:72:6D:AC:91:6E:22:9D Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 125B Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/px6GGJhcDQ3puj46bnJtrJFuIp0.roa Signing time: Mon 10 Feb 2025 14:14:45 +0000 ROA not before: Mon 10 Feb 2025 14:14:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63199 IP address blocks: 150.116.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4699 (0x125b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A71E8618985C0D0DE9BA3E3A6E726DAC916E229D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:3f:80:23:db:79:35:32:71:04:e1:54:5a: 1b:f8:5c:21:f0:b9:1e:cd:e9:8c:54:d0:df:1b:cb: 2a:b1:ba:ae:86:98:37:15:e7:b0:18:66:a3:3d:69: 81:e7:2e:08:c4:d0:b8:5a:a7:ae:8f:6d:61:b2:98: 14:f6:99:ba:36:3f:a5:68:27:6c:a6:5c:f4:d8:ec: 75:78:06:7c:3b:5d:eb:89:75:a7:22:f3:d7:a0:8b: 2b:d9:d7:49:f5:ac:98:3c:09:16:11:a4:5a:01:1d: e8:67:6a:2c:43:1f:71:25:5f:08:ae:b3:57:ac:5b: c0:2e:1e:1e:ba:22:f7:42:62:d0:ee:7c:49:fa:87: c7:c6:12:54:52:47:fa:01:2b:86:e9:f8:82:9b:e5: 91:c8:dc:f4:54:a7:33:03:52:8e:6c:76:71:34:2a: 97:fc:49:cd:b3:b0:e4:95:9b:3e:58:4c:e6:4b:dd: 4e:52:db:d9:0e:90:7e:86:b3:ff:57:22:5f:a0:e6: f6:7d:5a:de:1f:27:cf:33:06:75:b2:dd:32:7e:9d: 5b:c4:a6:4e:46:24:9e:56:5d:d1:ce:f6:3f:64:aa: 4a:d9:91:3e:70:92:34:2e:9b:dc:1c:70:7e:00:91: ab:13:c9:80:4c:ae:3e:33:e6:86:42:f9:e0:4a:0e: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1E:86:18:98:5C:0D:0D:E9:BA:3E:3A:6E:72:6D:AC:91:6E:22:9D X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/px6GGJhcDQ3puj46bnJtrJFuIp0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.3.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:e7:b1:3c:1d:77:5a:d9:d9:11:bd:97:0d:19:de:8f:9b:31: 7f:3c:e6:98:e4:9b:4c:cf:d1:16:95:03:11:5c:ca:d1:18:39: b0:08:7d:79:b9:f5:24:ce:cd:d0:da:a3:30:fc:20:08:eb:6f: 1e:2d:7a:69:e6:67:04:a6:03:ec:d1:bb:dd:76:e6:a7:18:a5: f6:d3:fa:4b:04:dc:2d:3c:55:44:8d:db:cb:b5:c3:aa:1b:bb: e5:83:95:57:e5:18:fa:62:eb:2b:53:f8:17:ea:b1:94:a8:31: 95:af:df:6d:fb:82:d3:fe:ff:bf:4c:18:6e:a2:9e:3e:4a:48: 37:ab:78:3e:ea:6d:f0:9f:6c:47:f4:db:6e:71:d6:81:14:e1: 24:c6:a3:8c:96:d5:e2:55:37:ef:5f:eb:e4:b5:68:89:dd:2d: f2:2e:a9:d4:18:a4:1a:8d:fd:3b:ac:06:00:3b:c9:42:8d:44: fa:59:b1:b7:91:03:a6:dd:a1:5c:6a:17:f1:eb:fa:b8:92:77: 3f:ce:80:e0:aa:bb:6d:c2:2a:97:0b:bf:8c:91:2c:d4:1c:11: aa:86:b8:51:83:d4:e7:66:c3:75:65:55:c4:1b:de:cb:94:87: 29:ba:18:cb:79:d7:81:d5:f4:98:96:79:c0:f7:fe:2c:84:24: d0:69:25:c2 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICElswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE3MUU4NjE4OTg1QzBE MERFOUJBM0UzQTZFNzI2REFDOTE2RTIyOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9wj+AI9t5NTJxBOFUWhv4XCHwuR7N6YxU0N8byyqxuq6GmDcV 57AYZqM9aYHnLgjE0Lhap66PbWGymBT2mbo2P6VoJ2ymXPTY7HV4Bnw7XeuJdaci 89egiyvZ10n1rJg8CRYRpFoBHehnaixDH3ElXwius1esW8AuHh66IvdCYtDufEn6 h8fGElRSR/oBK4bp+IKb5ZHI3PRUpzMDUo5sdnE0Kpf8Sc2zsOSVmz5YTOZL3U5S 29kOkH6Gs/9XIl+g5vZ9Wt4fJ88zBnWy3TJ+nVvEpk5GJJ5WXdHO9j9kqkrZkT5w kjQum9wccH4AkasTyYBMrj4z5oZC+eBKDqZVAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUpx6GGJhcDQ3puj46bnJtrJFuIp0wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9weDZHR0poY0RRM3B1 ajQ2Ym5KdHJKRnVJcDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQDMA0GCSqGSIb3DQEBCwUAA4IBAQA757E8HXda2dkRvZcNGd6PmzF/POaY 5JtMz9EWlQMRXMrRGDmwCH15ufUkzs3Q2qMw/CAI628eLXpp5mcEpgPs0bvdduan GKX20/pLBNwtPFVEjdvLtcOqG7vlg5VX5Rj6YusrU/gX6rGUqDGVr99t+4LT/v+/ TBhuop4+Skg3q3g+6m3wn2xH9NtucdaBFOEkxqOMltXiVTfvX+vktWiJ3S3yLqnU GKQajf07rAYAO8lCjUT6WbG3kQOm3aFcahfx6/q4knc/zoDgqrttwiqXC7+MkSzU HBGqhrhRg9TnZsN1ZVXEG97LlIcpuhjLedeB1fSYlnnA9/4shCTQaSXC -----END CERTIFICATE-----Generated at Sun Apr 6 19:52:21 2025 by rpki-client