$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/135RM48px4DMCBSs9LZn73wiqsQ.roa File: 135RM48px4DMCBSs9LZn73wiqsQ.roa (raw, json) Hash identifier: 0J6oBSxp7gPdQ53AMx+0fiq64+8wZhzJ0jSebtrIvxo= Subject key identifier: D7:7E:51:33:8F:29:C7:80:CC:08:14:AC:F4:B6:67:EF:7C:22:AA:C4 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 129E Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/135RM48px4DMCBSs9LZn73wiqsQ.roa Signing time: Mon 10 Feb 2025 14:15:03 +0000 ROA not before: Mon 10 Feb 2025 14:15:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131636 IP address blocks: 150.116.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4766 (0x129e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D77E51338F29C780CC0814ACF4B667EF7C22AAC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:37:ed:18:da:35:46:2a:91:fa:63:58:76: 27:f8:3c:2e:e2:23:9e:11:2e:4c:e6:84:c1:b1:98: d8:63:fc:c5:dc:5c:bf:90:69:d0:aa:15:a3:a6:52: 7f:13:3c:90:f7:5b:ac:c8:54:dc:20:f6:e4:c5:28: 11:e5:1f:d6:2b:30:70:2e:a0:86:09:43:47:61:ed: 39:b8:0e:47:6e:eb:47:9e:a1:38:44:8b:fe:56:06: b7:41:f8:1c:64:08:ce:03:f9:51:41:bb:19:e1:15: 86:ae:54:b3:8b:6f:5e:86:c7:db:65:76:ad:78:6e: 25:fb:2a:31:d6:1d:ae:81:aa:5a:4a:20:54:af:4c: 52:dd:e4:02:29:fb:a9:0b:5f:88:51:81:52:8d:b4: fa:73:67:75:ed:f4:aa:58:d1:42:67:02:72:41:22: f9:4a:d5:0d:6f:cf:a4:7c:dc:dd:2c:91:0f:55:27: 5f:7e:e5:0b:fd:76:3c:05:22:59:5f:c7:67:bb:ee: ae:fe:4b:61:41:28:a5:fe:22:14:94:b6:ca:b9:84: a0:85:09:0c:99:31:3e:b2:f5:ce:bb:73:83:ba:fa: 8b:8b:9c:6b:03:97:ab:2c:a3:dd:a0:67:01:f8:db: 9d:ef:33:b6:2d:89:aa:78:10:d6:3b:20:4b:64:1e: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7E:51:33:8F:29:C7:80:CC:08:14:AC:F4:B6:67:EF:7C:22:AA:C4 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/135RM48px4DMCBSs9LZn73wiqsQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.6.0/23 Signature Algorithm: sha256WithRSAEncryption a9:6a:8e:5a:31:95:8d:37:62:ba:bd:b9:bd:01:7b:52:f5:1e: 06:37:03:04:7f:5b:e6:f1:5d:0d:f2:52:34:c7:b9:68:e2:0f: ba:c1:d3:61:cf:7d:bb:36:53:37:87:67:2e:d4:0d:58:a6:a6: 93:21:ec:42:b5:05:e7:e2:ae:3b:51:c0:17:ea:3d:2a:fc:ab: 1e:e0:e0:cb:05:27:5f:81:d0:83:5a:03:c3:95:1d:4e:f1:c1: 98:42:f4:37:48:cf:93:76:78:b9:f9:11:2a:60:14:e8:00:52: ac:39:08:b5:8e:5c:28:4e:48:aa:a4:bb:3e:87:13:fc:07:56: f3:cf:c1:4f:12:2f:be:79:9b:af:7f:63:14:dd:06:72:a4:dd: 68:93:a6:7d:05:97:25:6b:6a:65:df:15:cc:85:b6:ac:ec:fa: 51:92:1f:a5:46:48:b8:d6:f6:86:65:16:1d:ae:e7:93:7e:9c: 8a:a6:f0:58:8e:bb:2e:40:47:93:f7:50:40:4f:5b:f0:14:e1: 02:5d:82:82:5f:92:b2:26:b7:9c:e2:71:3e:11:12:45:a4:e6: 52:fc:76:c9:b1:14:7c:fe:92:f4:a2:b3:77:5e:32:ca:6e:59: 92:42:c4:7e:9c:86:5c:1b:f2:cd:08:83:e9:3b:00:65:ef:95: 05:db:0a:b2 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ3N0U1MTMzOEYyOUM3 ODBDQzA4MTRBQ0Y0QjY2N0VGN0MyMkFBQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFIzftGNo1RiqR+mNYdif4PC7iI54RLkzmhMGxmNhj/MXcXL+Q adCqFaOmUn8TPJD3W6zIVNwg9uTFKBHlH9YrMHAuoIYJQ0dh7Tm4Dkdu60eeoThE i/5WBrdB+BxkCM4D+VFBuxnhFYauVLOLb16Gx9tldq14biX7KjHWHa6BqlpKIFSv TFLd5AIp+6kLX4hRgVKNtPpzZ3Xt9KpY0UJnAnJBIvlK1Q1vz6R83N0skQ9VJ19+ 5Qv9djwFIllfx2e77q7+S2FBKKX+IhSUtsq5hKCFCQyZMT6y9c67c4O6+ouLnGsD l6sso92gZwH4253vM7Ytiap4ENY7IEtkHruzAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU135RM48px4DMCBSs9LZn73wiqsQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8xMzVSTTQ4cHg0RE1D QlNzOUxabjczd2lxc1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBlnQGMA0GCSqGSIb3DQEBCwUAA4IBAQCpao5aMZWNN2K6vbm9AXtS9R4GNwME f1vm8V0N8lI0x7lo4g+6wdNhz327NlM3h2cu1A1YpqaTIexCtQXn4q47UcAX6j0q /Kse4ODLBSdfgdCDWgPDlR1O8cGYQvQ3SM+Tdni5+REqYBToAFKsOQi1jlwoTkiq pLs+hxP8B1bzz8FPEi++eZuvf2MU3QZypN1ok6Z9BZcla2pl3xXMhbas7PpRkh+l Rki41vaGZRYdrueTfpyKpvBYjrsuQEeT91BAT1vwFOECXYKCX5KyJrec4nE+ERJF pOZS/HbJsRR8/pL0orN3XjLKblmSQsR+nIZcG/LNCIPpOwBl75UF2wqy -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net