$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KrLpauQ3ZTOf882cNCGi91qRYiI.roa File: KrLpauQ3ZTOf882cNCGi91qRYiI.roa (raw, json) Hash identifier: NMMK1gfbaBpIRuZNNCKETaHuRxD1mjT5ppay6U61RC4= Subject key identifier: 2A:B2:E9:6A:E4:37:65:33:9F:F3:CD:9C:34:21:A2:F7:5A:91:62:22 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12B9 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KrLpauQ3ZTOf882cNCGi91qRYiI.roa Signing time: Mon 10 Feb 2025 14:15:10 +0000 ROA not before: Mon 10 Feb 2025 14:15:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 150.116.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4793 (0x12b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2AB2E96AE43765339FF3CD9C3421A2F75A916222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:81:09:b0:0a:da:2e:67:ba:0e:ba:0d:00:70: b7:94:a6:28:96:b9:f3:72:6e:ab:4a:00:7f:cf:44: f2:92:47:d6:45:cb:3c:96:12:70:5e:32:0c:90:66: e7:6f:2b:c5:68:09:05:6b:84:69:d9:19:5a:56:6b: a7:50:54:23:c2:0c:4c:65:b7:ee:8e:27:3f:98:02: e1:93:2e:27:47:bb:ec:fa:b5:a6:62:ee:33:43:28: fc:ac:66:d3:46:87:d1:c0:0e:bb:8f:22:bf:fd:e5: b2:78:60:04:44:49:d3:f7:6d:91:6d:7f:c5:81:df: cb:05:ba:17:1b:71:d0:8d:f6:0b:03:6d:3a:f6:f1: 2b:cb:7e:78:b8:01:40:7d:7c:96:e3:9a:46:de:f2: 83:d9:8c:c2:ad:62:d9:83:64:7c:18:bd:c1:d5:40: 58:39:bf:85:4f:f2:ef:96:0e:74:7e:bd:97:26:5a: b2:24:46:08:47:e4:2e:39:63:a4:19:50:a0:c6:a8: 91:9a:30:10:6b:8d:9d:39:6f:83:aa:4a:eb:9b:b7: d0:25:7a:4f:18:ad:29:7b:1b:00:32:d7:52:5f:40: ef:45:e6:f2:73:81:a5:97:d8:70:98:ed:87:d9:fa: a4:99:63:6f:fc:12:6b:76:0d:4d:de:ff:7e:7d:0a: 9b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B2:E9:6A:E4:37:65:33:9F:F3:CD:9C:34:21:A2:F7:5A:91:62:22 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/KrLpauQ3ZTOf882cNCGi91qRYiI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.16.0/20 Signature Algorithm: sha256WithRSAEncryption 92:22:04:76:04:e4:f3:ff:45:b5:47:9a:c8:07:6e:29:c9:9b: 17:2c:ff:08:04:37:6a:4d:2f:6c:89:9e:7b:70:69:93:4f:61: c4:59:7e:ee:a3:f3:b6:4d:fe:d7:74:10:5a:21:0a:4c:c2:8c: e2:d6:0b:af:e5:cd:12:d7:18:3c:cd:e1:9c:33:64:77:0b:3d: cc:a5:1b:16:fa:96:cc:ea:42:34:94:0d:9b:7c:c7:73:c4:d2: 29:60:38:fb:f5:0c:a3:a6:f9:11:36:66:94:34:58:e1:0b:e6: 53:c8:b2:5e:0e:9c:8d:e0:92:94:68:de:e8:be:60:f8:8e:26: f7:9f:19:ea:22:17:5b:90:13:3c:a7:78:90:db:2b:3b:50:a7: 4a:f1:a7:ef:fd:d9:44:af:be:07:04:7d:c4:2f:17:ec:8e:3c: 51:cc:33:a1:ad:61:ec:dc:87:ee:c7:f2:1f:fe:11:4e:08:e3: 3a:ca:a4:3d:32:2e:1f:78:f5:c9:9b:4a:c2:94:7f:de:19:0b: d1:fc:0f:73:3e:a1:14:d5:e9:d8:00:59:50:71:3a:72:7b:12: d5:80:62:3b:cd:5b:a4:35:33:f1:08:ea:a3:fb:fe:2c:90:14: 8b:60:c8:55:94:60:cf:5d:1d:1b:04:93:6e:74:df:21:a7:b7: 7e:8a:a8:5f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICErkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBQjJFOTZBRTQzNzY1 MzM5RkYzQ0Q5QzM0MjFBMkY3NUE5MTYyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWgQmwCtouZ7oOug0AcLeUpiiWufNybqtKAH/PRPKSR9ZFyzyW EnBeMgyQZudvK8VoCQVrhGnZGVpWa6dQVCPCDExlt+6OJz+YAuGTLidHu+z6taZi 7jNDKPysZtNGh9HADruPIr/95bJ4YARESdP3bZFtf8WB38sFuhcbcdCN9gsDbTr2 8SvLfni4AUB9fJbjmkbe8oPZjMKtYtmDZHwYvcHVQFg5v4VP8u+WDnR+vZcmWrIk RghH5C45Y6QZUKDGqJGaMBBrjZ05b4OqSuubt9Alek8YrSl7GwAy11JfQO9F5vJz gaWX2HCY7YfZ+qSZY2/8Emt2DU3e/359CptbAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUKrLpauQ3ZTOf882cNCGi91qRYiIwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9LckxwYXVRM1pUT2Y4 ODJjTkNHaTkxcVJZaUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnQQMA0GCSqGSIb3DQEBCwUAA4IBAQCSIgR2BOTz/0W1R5rIB24pyZsXLP8I BDdqTS9siZ57cGmTT2HEWX7uo/O2Tf7XdBBaIQpMwozi1guv5c0S1xg8zeGcM2R3 Cz3MpRsW+pbM6kI0lA2bfMdzxNIpYDj79QyjpvkRNmaUNFjhC+ZTyLJeDpyN4JKU aN7ovmD4jib3nxnqIhdbkBM8p3iQ2ys7UKdK8afv/dlEr74HBH3ELxfsjjxRzDOh rWHs3Ifux/If/hFOCOM6yqQ9Mi4fePXJm0rClH/eGQvR/A9zPqEU1enYAFlQcTpy exLVgGI7zVukNTPxCOqj+/4skBSLYMhVlGDPXR0bBJNudN8hp7d+iqhf -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net