$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rpFHYYiFVSIMozEuwZxr53-jOfM.roa File: rpFHYYiFVSIMozEuwZxr53-jOfM.roa (raw, json) Hash identifier: spAnYTlwxmt0S9JlV6horC3FkWeABWPdYlA64XbU5M0= Subject key identifier: AE:91:47:61:88:85:55:22:0C:A3:31:2E:C1:9C:6B:E7:7F:A3:39:F3 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 115F Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rpFHYYiFVSIMozEuwZxr53-jOfM.roa Signing time: Mon 26 Aug 2024 05:10:43 +0000 ROA not before: Mon 26 Aug 2024 05:10:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17408 IP address blocks: 203.163.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4447 (0x115f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AE914761888555220CA3312EC19C6BE77FA339F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:83:1b:37:79:47:8a:c3:61:2c:44:0c:28: 63:25:2f:63:a5:0e:f7:6f:c1:0d:ee:a1:9e:50:c2: 13:46:29:8c:d9:7f:d4:cb:47:3f:cd:88:94:c9:55: 49:24:95:a3:1c:c5:ae:03:a9:d9:a3:38:81:ac:4d: fd:6b:0e:6f:cb:f6:bd:9e:8f:16:67:83:bf:c9:ca: ce:9f:ab:85:d2:d5:4b:a7:6c:b8:8a:16:86:3b:e4: b3:d3:91:fc:61:e7:0e:88:3b:2c:05:25:05:83:1c: d0:8d:ac:97:06:fc:1c:6d:c5:cd:10:94:de:d7:5a: 26:32:d7:53:67:92:91:18:da:21:51:df:e6:93:1b: 2b:59:a3:a1:70:8d:a3:3d:5f:d4:69:cc:a0:4c:3c: cf:21:40:5d:89:28:6e:7b:b7:46:38:9f:21:98:b7: ec:60:ed:ed:35:7a:9a:13:9e:dd:ef:44:e5:c0:20: 1f:bc:73:ca:c5:c7:e5:3a:7d:ce:63:65:b6:53:aa: 7f:83:3c:31:38:53:74:6b:4b:89:27:76:a5:67:74: 0a:f4:85:3a:69:14:8d:aa:b1:42:ff:ae:aa:c2:93: 3c:1a:df:ac:3b:8c:33:4b:f3:3d:aa:50:7b:35:5f: 28:1e:43:8a:21:1f:fa:2b:0a:93:cd:54:91:fe:79: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:91:47:61:88:85:55:22:0C:A3:31:2E:C1:9C:6B:E7:7F:A3:39:F3 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/rpFHYYiFVSIMozEuwZxr53-jOfM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.163.220.0/23 Signature Algorithm: sha256WithRSAEncryption 60:1e:c3:be:5c:f4:f8:c0:13:ea:1c:d8:5d:c6:3c:af:8b:66: 99:6b:7a:35:ce:4f:02:0b:55:1c:81:aa:cf:21:4b:16:6a:23: 20:95:c7:f7:ef:34:97:e5:a2:f4:38:36:42:7c:79:3b:e9:b4: 0e:8c:75:97:38:87:50:c0:9f:3e:5f:ab:74:47:dd:04:27:7b: 61:1f:9f:f1:5f:e7:9d:f3:39:cc:d4:80:fa:12:a7:6f:e4:d7: 32:3a:4a:cc:76:3b:cd:45:22:42:3e:60:db:94:3a:18:ff:09: 5d:c2:f8:e3:dd:1f:6e:aa:f5:19:d7:d9:4c:a5:3c:52:4d:bb: 9c:93:e6:cf:ca:97:b0:dd:cb:cd:83:63:d5:59:1e:6d:10:f8: af:b6:8a:49:a3:17:1a:3b:53:b9:9d:84:47:f2:84:7d:66:74: c6:d6:d7:82:b0:89:b8:c4:f8:13:c6:4d:4c:50:8d:e4:05:ae: 6f:73:32:0d:c2:c4:c2:f2:80:20:51:fc:11:c7:6d:32:ca:6c: 79:06:8e:96:a6:a9:4a:2d:bc:f6:2c:39:bd:47:7b:66:ac:8c: 22:8c:b1:ec:04:08:ec:22:b0:16:a4:91:3f:d4:62:20:63:3d: 5f:e4:ba:90:3d:db:fd:47:1a:91:81:8d:b1:89:cf:2f:1f:52: 8b:14:ad:b6 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFOTE0NzYxODg4NTU1 MjIwQ0EzMzEyRUMxOUM2QkU3N0ZBMzM5RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+sIMbN3lHisNhLEQMKGMlL2OlDvdvwQ3uoZ5QwhNGKYzZf9TL Rz/NiJTJVUkklaMcxa4DqdmjOIGsTf1rDm/L9r2ejxZng7/Jys6fq4XS1UunbLiK FoY75LPTkfxh5w6IOywFJQWDHNCNrJcG/Bxtxc0QlN7XWiYy11NnkpEY2iFR3+aT GytZo6FwjaM9X9RpzKBMPM8hQF2JKG57t0Y4nyGYt+xg7e01epoTnt3vROXAIB+8 c8rFx+U6fc5jZbZTqn+DPDE4U3RrS4kndqVndAr0hTppFI2qsUL/rqrCkzwa36w7 jDNL8z2qUHs1XygeQ4ohH/orCpPNVJH+efu1AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUrpFHYYiFVSIMozEuwZxr53+jOfMwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9ycEZIWVlpRlZTSU1v ekV1d1p4cjUzLWpPZk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBy6PcMA0GCSqGSIb3DQEBCwUAA4IBAQBgHsO+XPT4wBPqHNhdxjyvi2aZa3o1 zk8CC1UcgarPIUsWaiMglcf37zSX5aL0ODZCfHk76bQOjHWXOIdQwJ8+X6t0R90E J3thH5/xX+ed8znM1ID6Eqdv5NcyOkrMdjvNRSJCPmDblDoY/wldwvjj3R9uqvUZ 19lMpTxSTbuck+bPypew3cvNg2PVWR5tEPivtopJoxcaO1O5nYRH8oR9ZnTG1teC sIm4xPgTxk1MUI3kBa5vczINwsTC8oAgUfwRx20yymx5Bo6WpqlKLbz2LDm9R3tm rIwijLHsBAjsIrAWpJE/1GIgYz1f5LqQPdv9RxqRgY2xic8vH1KLFK22 -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:30 2024 by rpki-client on console-ams.rpki-client.org