$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FvEkl-JkILzv-de1ahsSP3CxEh4.roa File: FvEkl-JkILzv-de1ahsSP3CxEh4.roa (raw, json) Hash identifier: 9gWs+K3Sq4lWPmFheDEfq5O3GM0zob5ufbydeBoVU1E= Subject key identifier: 16:F1:24:97:E2:64:20:BC:EF:F9:D7:B5:6A:1B:12:3F:70:B1:12:1E Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1255 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FvEkl-JkILzv-de1ahsSP3CxEh4.roa Signing time: Mon 10 Feb 2025 14:14:44 +0000 ROA not before: Mon 10 Feb 2025 14:14:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17651 IP address blocks: 150.116.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4693 (0x1255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=16F12497E26420BCEFF9D7B56A1B123F70B1121E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:50:6e:f3:ce:29:f0:02:4a:c5:01:cd:ee: 56:70:48:7f:95:d0:47:5d:5b:b7:6d:54:09:d4:cf: 5b:a1:fd:88:a8:6f:c1:b3:59:f4:b6:6f:28:5c:ce: ae:85:33:aa:fb:a8:72:9c:d7:57:17:d1:cf:f3:54: db:2d:0b:7b:a0:9f:60:e1:72:58:b3:1f:f0:cf:2a: 07:77:b3:b7:1e:e7:68:f2:7c:b1:76:00:69:a3:c7: 21:8c:1c:12:a4:00:b4:45:18:63:87:e9:4b:b7:de: e4:7d:f2:59:28:73:8b:10:e1:a6:12:51:e7:ad:4b: c9:bd:aa:5c:37:db:6c:d9:a3:c9:47:a4:24:53:0e: f8:77:50:f2:21:40:4d:6d:9a:64:6b:0c:35:82:fa: 06:7c:e6:be:89:94:75:b6:75:3d:aa:fb:ca:c1:d3: c4:cd:a3:83:18:14:2e:18:9f:d7:cc:4e:e6:01:9c: 6e:aa:84:68:be:dd:db:7b:cb:09:38:7c:c3:9b:da: 04:40:50:2d:d6:c0:81:f6:1e:05:55:db:f3:b5:e9: d0:9a:1d:ee:27:dc:ca:d1:d0:f7:c4:fc:e7:09:42: 54:86:3a:03:4b:3e:8d:db:27:3c:95:27:ab:d4:ca: b7:ea:76:52:a6:fd:1b:1b:f0:94:5a:ef:94:6d:54: 00:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F1:24:97:E2:64:20:BC:EF:F9:D7:B5:6A:1B:12:3F:70:B1:12:1E X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FvEkl-JkILzv-de1ahsSP3CxEh4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.116.0/24 Signature Algorithm: sha256WithRSAEncryption 33:10:fd:1d:c5:33:08:b5:dc:4c:ad:8b:62:71:0b:2a:f4:ea: 31:6b:31:b1:d5:58:34:4a:84:3b:a1:a2:58:83:67:54:9a:67: 71:96:01:61:a1:73:04:74:be:1c:d2:a4:d5:fa:44:74:38:87: 97:65:1e:6c:0d:ad:b4:bf:37:ec:9d:62:b6:8f:34:4b:ca:bb: 34:d0:55:c3:3e:e5:18:88:7c:ea:e0:aa:e8:c1:79:6c:13:86: 66:f0:e2:4d:30:f6:f4:86:0e:af:c2:57:61:9e:51:82:2f:a8: 34:0f:66:41:ac:ca:8a:18:1b:45:a0:17:0f:8a:52:ee:b4:e3: 4c:06:10:fc:78:2d:69:85:9e:cc:35:36:2a:32:0f:c5:06:de: 83:ce:28:2e:1e:6d:c8:65:51:95:d8:45:bf:eb:92:6f:97:00: 56:fc:eb:1b:fe:53:7a:24:88:75:9b:ee:6a:7e:52:99:30:46: c2:f8:38:e1:b4:21:6b:66:06:74:60:66:55:03:b6:20:6f:88: 7d:88:45:77:f3:cf:b9:80:a5:9f:92:95:64:c6:af:7b:c2:86: 7d:0a:6f:c7:34:3b:c0:85:eb:b6:51:02:26:1d:bd:4f:b1:e6: c1:1e:5d:69:fb:c7:79:58:6b:6c:57:b9:fb:a6:91:50:d6:e7: 1f:3e:74:1d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICElUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2RjEyNDk3RTI2NDIw QkNFRkY5RDdCNTZBMUIxMjNGNzBCMTEyMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcS1Bu884p8AJKxQHN7lZwSH+V0EddW7dtVAnUz1uh/Yiob8Gz WfS2byhczq6FM6r7qHKc11cX0c/zVNstC3ugn2DhclizH/DPKgd3s7ce52jyfLF2 AGmjxyGMHBKkALRFGGOH6Uu33uR98lkoc4sQ4aYSUeetS8m9qlw322zZo8lHpCRT Dvh3UPIhQE1tmmRrDDWC+gZ85r6JlHW2dT2q+8rB08TNo4MYFC4Yn9fMTuYBnG6q hGi+3dt7ywk4fMOb2gRAUC3WwIH2HgVV2/O16dCaHe4n3MrR0PfE/OcJQlSGOgNL Po3bJzyVJ6vUyrfqdlKm/Rsb8JRa75RtVABTAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUFvEkl+JkILzv+de1ahsSP3CxEh4wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9GdkVrbC1Ka0lMenYt ZGUxYWhzU1AzQ3hFaDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnR0MA0GCSqGSIb3DQEBCwUAA4IBAQAzEP0dxTMItdxMrYticQsq9OoxazGx 1Vg0SoQ7oaJYg2dUmmdxlgFhoXMEdL4c0qTV+kR0OIeXZR5sDa20vzfsnWK2jzRL yrs00FXDPuUYiHzq4KrowXlsE4Zm8OJNMPb0hg6vwldhnlGCL6g0D2ZBrMqKGBtF oBcPilLutONMBhD8eC1phZ7MNTYqMg/FBt6DziguHm3IZVGV2EW/65JvlwBW/Osb /lN6JIh1m+5qflKZMEbC+DjhtCFrZgZ0YGZVA7Ygb4h9iEV388+5gKWfkpVkxq97 woZ9Cm/HNDvAheu2UQImHb1PsebBHl1p+8d5WGtsV7n7ppFQ1ucfPnQd -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net