$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/u6twFdMJU_-e-AVN_dZeLJgXX-g.roa File: u6twFdMJU_-e-AVN_dZeLJgXX-g.roa (raw, json) Hash identifier: tIa/mf68byJswf1tiKP3J06HIyatZyS2AgCn6d8boek= Subject key identifier: BB:AB:70:15:D3:09:53:FF:9E:F8:05:4D:FD:D6:5E:2C:98:17:5F:E8 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 117F Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/u6twFdMJU_-e-AVN_dZeLJgXX-g.roa Signing time: Mon 26 Aug 2024 05:10:50 +0000 ROA not before: Mon 26 Aug 2024 05:10:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63199 IP address blocks: 150.116.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4479 (0x117f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BBAB7015D30953FF9EF8054DFDD65E2C98175FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:8e:02:27:2e:6b:28:d1:04:32:71:82:d3: 01:45:d2:88:80:c6:c3:31:ea:55:d9:52:4c:75:29: 73:68:ad:c2:96:bc:5d:62:ff:07:05:4f:05:7d:16: 2e:c2:c9:64:ec:22:ae:32:dd:75:69:47:3f:bf:79: 75:13:44:56:b4:87:f6:ad:69:ef:66:46:d5:5e:b1: 58:44:f6:01:c3:35:b6:7e:75:2f:d8:6b:db:6f:2d: 17:23:01:b1:24:af:f0:dc:1f:79:59:65:17:9e:ee: d0:b6:59:d3:9e:7e:c8:2a:23:c5:41:01:07:f1:bd: c5:97:13:55:da:8b:36:e8:c7:dd:18:db:b5:77:1c: 4d:1a:6a:de:f3:c1:a3:8e:9a:aa:1e:ca:5f:cd:00: a9:c3:dc:4d:5e:2b:91:9e:f0:79:ed:7a:88:59:a5: 7f:29:a2:19:5b:e0:4b:bc:ca:52:d8:9b:88:3f:49: 0c:96:4e:6d:5e:d2:57:b1:86:01:7c:b6:e9:0b:e5: f5:0e:69:9f:71:7c:a2:6a:fc:5f:68:fc:c0:51:f5: a6:46:b5:81:09:9c:60:d0:f4:7a:5e:c2:e5:dc:6a: 55:03:89:c7:9a:62:8f:f2:97:be:6c:5c:e9:f2:94: 69:ea:a5:72:88:16:12:f7:7a:28:79:60:c9:24:b5: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AB:70:15:D3:09:53:FF:9E:F8:05:4D:FD:D6:5E:2C:98:17:5F:E8 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/u6twFdMJU_-e-AVN_dZeLJgXX-g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.5.0/24 Signature Algorithm: sha256WithRSAEncryption 47:b3:ee:0f:40:0c:b1:0b:37:36:af:ca:a2:b4:1f:71:fb:7f: ad:1b:e0:89:4d:8f:22:90:70:0b:12:47:b3:71:f6:68:1c:8f: 03:68:22:a5:87:93:c2:66:87:3f:b3:7c:35:05:99:bf:fd:cf: 4c:d9:52:73:19:27:cd:a4:3e:4b:08:30:6e:62:46:dc:03:ba: af:b0:3c:29:ab:3b:a4:5f:ab:15:74:6a:a3:bd:d4:2d:9f:8c: c8:80:6e:b6:ed:5d:0f:d5:5c:bf:58:16:04:a5:38:3e:2f:d7: c8:1b:79:6e:15:6c:15:be:f8:2c:fd:fb:20:84:97:d0:8c:5e: cf:ac:8b:aa:5a:83:5f:6b:6a:d9:0c:85:30:85:ae:54:23:ad: eb:5c:3c:d7:8d:4b:af:d7:de:92:4e:a7:33:42:c2:fb:53:5d: 4f:d4:92:35:11:8f:76:b3:2b:8e:82:d0:04:80:5a:f2:a5:da: 7f:98:ff:71:d9:4c:d7:a8:57:d4:37:c6:1e:54:18:02:75:ae: f1:8c:4c:05:eb:ca:05:13:f4:f4:9b:b2:ac:d7:00:9e:4c:fb: 72:7f:99:a0:28:8c:98:0b:20:14:d0:07:83:4d:1d:60:42:dc: e8:02:43:f8:c3:a0:48:07:68:1e:bf:7f:bd:34:35:1e:ee:be: 25:1f:e2:b6 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJCQUI3MDE1RDMwOTUz RkY5RUY4MDU0REZERDY1RTJDOTgxNzVGRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQco4CJy5rKNEEMnGC0wFF0oiAxsMx6lXZUkx1KXNorcKWvF1i /wcFTwV9Fi7CyWTsIq4y3XVpRz+/eXUTRFa0h/atae9mRtVesVhE9gHDNbZ+dS/Y a9tvLRcjAbEkr/DcH3lZZRee7tC2WdOefsgqI8VBAQfxvcWXE1Xaizbox90Y27V3 HE0aat7zwaOOmqoeyl/NAKnD3E1eK5Ge8HnteohZpX8pohlb4Eu8ylLYm4g/SQyW Tm1e0lexhgF8tukL5fUOaZ9xfKJq/F9o/MBR9aZGtYEJnGDQ9HpewuXcalUDicea Yo/yl75sXOnylGnqpXKIFhL3eih5YMkktd6lAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUu6twFdMJU/+e+AVN/dZeLJgXX+gwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy91NnR3RmRNSlVfLWUt QVZOX2RaZUxKZ1hYLWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQFMA0GCSqGSIb3DQEBCwUAA4IBAQBHs+4PQAyxCzc2r8qitB9x+3+tG+CJ TY8ikHALEkezcfZoHI8DaCKlh5PCZoc/s3w1BZm//c9M2VJzGSfNpD5LCDBuYkbc A7qvsDwpqzukX6sVdGqjvdQtn4zIgG627V0P1Vy/WBYEpTg+L9fIG3luFWwVvvgs /fsghJfQjF7PrIuqWoNfa2rZDIUwha5UI63rXDzXjUuv196STqczQsL7U11P1JI1 EY92syuOgtAEgFrypdp/mP9x2UzXqFfUN8YeVBgCda7xjEwF68oFE/T0m7Ks1wCe TPtyf5mgKIyYCyAU0AeDTR1gQtzoAkP4w6BIB2gev3+9NDUe7r4lH+K2 -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:25 2024 by rpki-client on console-ams.rpki-client.org