$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6BysY-hMUMnYW0VvSadd9JVzv1E.roa File: 6BysY-hMUMnYW0VvSadd9JVzv1E.roa (raw, json) Hash identifier: 7ESteB9RQuO/rKOyf8d+p/+WahI31XdAqAPBae+rEik= Subject key identifier: E8:1C:AC:63:E8:4C:50:C9:D8:5B:45:6F:49:A7:5D:F4:95:73:BF:51 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 124B Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6BysY-hMUMnYW0VvSadd9JVzv1E.roa Signing time: Mon 10 Feb 2025 14:14:41 +0000 ROA not before: Mon 10 Feb 2025 14:14:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4683 (0x124b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E81CAC63E84C50C9D85B456F49A75DF49573BF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:1e:f4:61:17:84:4a:6f:b6:2a:6c:a8:8d: bd:c6:d1:92:0c:b5:ce:2c:df:f3:af:72:af:a2:84: 2e:1f:b9:56:25:03:b9:2a:c4:0e:7f:b8:3e:8e:c6: 47:44:a9:55:13:30:c8:31:2b:10:c9:c8:9b:de:fd: da:ce:d4:9d:76:a5:63:60:b7:59:07:b7:b4:b3:50: 66:9a:c5:03:7f:9d:59:4d:c4:f5:ba:f5:73:a4:b6: 4e:32:19:22:88:82:07:ca:bc:3d:52:6b:f4:db:3b: 81:f4:6a:63:47:da:58:0d:ca:45:bd:84:4c:fc:3d: 08:5e:82:9f:a3:89:bc:e6:9b:34:5e:86:0b:4c:2d: 44:4a:cb:fa:df:ba:48:42:0f:76:2a:1e:9d:5a:1b: 48:26:e9:02:3b:bd:ae:f5:a2:e6:22:f9:01:24:79: 8e:d5:79:e4:24:4e:8c:0f:31:4c:58:a4:89:57:68: d6:16:db:fb:5f:d8:67:6e:88:59:1a:95:e2:af:b2: b1:44:91:bb:36:8b:be:03:26:a0:8d:ed:c0:cd:00: e5:ad:fe:34:19:69:93:18:b8:a5:af:cb:6c:55:52: 7d:09:0f:ae:1d:f5:4f:fc:59:78:ea:e4:c5:6c:65: b3:f6:19:fc:37:20:6e:dc:5b:b0:50:96:bc:d9:9c: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1C:AC:63:E8:4C:50:C9:D8:5B:45:6F:49:A7:5D:F4:95:73:BF:51 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6BysY-hMUMnYW0VvSadd9JVzv1E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.144.0/20 Signature Algorithm: sha256WithRSAEncryption 95:64:58:d1:ca:3f:a8:9b:9e:66:af:70:21:2f:eb:2e:bd:d4: 9e:aa:e6:f8:b6:28:c2:50:08:9c:e0:d6:5b:50:76:4f:0f:7c: 73:62:cb:9b:b0:8f:f6:19:08:57:f9:b1:8c:b9:80:5c:4e:1d: 0b:e8:4d:85:61:0e:a0:8f:1e:1e:e0:1d:b0:fd:78:62:71:1f: b2:ea:11:0a:dc:e2:9c:74:0b:31:74:3f:31:36:c4:23:4e:91: a0:bb:cc:cb:2f:c0:b8:67:99:f2:28:d9:4c:30:26:ae:6f:7f: ea:52:66:09:a6:ea:a8:f0:67:8e:42:49:d5:0f:13:41:3f:c3: c1:4a:31:0e:bc:cf:f2:4c:a9:fc:4b:73:11:66:2d:c7:57:1b: ec:45:af:10:58:a8:8f:0b:45:e8:d0:f3:86:e1:52:cb:92:11: 93:68:84:57:bc:78:8e:c2:c1:a5:20:2c:4e:7f:ab:b5:82:27: ec:41:43:66:94:7f:5b:d1:4c:89:5d:c1:0b:4c:6a:29:47:0d: 31:c2:93:9a:97:25:66:43:16:5f:d5:68:00:c6:f3:0f:0b:99: f5:00:17:9d:2a:b3:56:24:67:7f:61:e7:d4:a6:20:d3:09:e9: 52:95:70:d1:90:ce:1a:d8:6b:62:a0:2c:86:08:3b:14:0d:93: 87:5a:5f:31 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4MUNBQzYzRTg0QzUw QzlEODVCNDU2RjQ5QTc1REY0OTU3M0JGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdrh70YReESm+2Kmyojb3G0ZIMtc4s3/Ovcq+ihC4fuVYlA7kq xA5/uD6OxkdEqVUTMMgxKxDJyJve/drO1J12pWNgt1kHt7SzUGaaxQN/nVlNxPW6 9XOktk4yGSKIggfKvD1Sa/TbO4H0amNH2lgNykW9hEz8PQhegp+jibzmmzRehgtM LURKy/rfukhCD3YqHp1aG0gm6QI7va71ouYi+QEkeY7VeeQkTowPMUxYpIlXaNYW 2/tf2GduiFkaleKvsrFEkbs2i74DJqCN7cDNAOWt/jQZaZMYuKWvy2xVUn0JD64d 9U/8WXjq5MVsZbP2Gfw3IG7cW7BQlrzZnHXRAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU6BysY+hMUMnYW0VvSadd9JVzv1EwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy82QnlzWS1oTVVNbllX MFZ2U2FkZDlKVnp2MUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnSQMA0GCSqGSIb3DQEBCwUAA4IBAQCVZFjRyj+om55mr3AhL+suvdSequb4 tijCUAic4NZbUHZPD3xzYsubsI/2GQhX+bGMuYBcTh0L6E2FYQ6gjx4e4B2w/Xhi cR+y6hEK3OKcdAsxdD8xNsQjTpGgu8zLL8C4Z5nyKNlMMCaub3/qUmYJpuqo8GeO QknVDxNBP8PBSjEOvM/yTKn8S3MRZi3HVxvsRa8QWKiPC0Xo0POG4VLLkhGTaIRX vHiOwsGlICxOf6u1gifsQUNmlH9b0UyJXcELTGopRw0xwpOalyVmQxZf1WgAxvMP C5n1ABedKrNWJGd/YefUpiDTCelSlXDRkM4a2GtioCyGCDsUDZOHWl8x -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net