$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ZI2Xxndo_OrEmquNllMo-nGRKN8.roa File: ZI2Xxndo_OrEmquNllMo-nGRKN8.roa (raw, json) Hash identifier: CF1n9ryfTx7B9YYoPn4rULM6/da2DNcG9FogGOINgXo= Subject key identifier: 64:8D:97:C6:77:68:FC:EA:C4:9A:AB:8D:96:53:28:FA:71:91:28:DF Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1270 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ZI2Xxndo_OrEmquNllMo-nGRKN8.roa Signing time: Mon 10 Feb 2025 14:14:51 +0000 ROA not before: Mon 10 Feb 2025 14:14:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4720 (0x1270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=648D97C67768FCEAC49AAB8D965328FA719128DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:2e:70:cf:6c:5d:7e:35:be:0f:3d:8d:9d: 5f:a1:77:39:c9:23:43:e4:50:84:31:24:3d:2e:c1: 9b:65:71:42:c7:b8:a1:3b:33:b7:8d:c3:24:d9:95: b6:f0:87:0d:30:20:32:6e:21:07:61:86:8d:a0:7e: 03:42:01:1e:f7:ec:7c:66:1a:2a:f8:a9:c0:d5:cb: 1e:0e:ad:8f:33:19:90:a3:ec:18:8f:03:c0:dd:21: 28:b5:b8:84:2f:68:cf:cf:8b:af:83:56:e4:bb:61: 69:69:9c:ef:93:76:77:0a:eb:9d:09:b0:45:b7:1f: a4:16:09:a6:50:e5:ca:d1:ce:6b:6d:60:92:f7:0f: 70:0d:41:71:48:f7:65:af:08:21:74:aa:5b:60:ac: bc:83:ef:8a:45:e7:a2:23:6e:41:1a:3f:d7:61:03: e4:fb:13:e0:ec:6a:0f:76:b5:57:55:7f:fd:13:24: a3:21:0f:e1:be:de:a9:e3:d2:6c:66:75:c9:e9:91: b3:77:63:af:f8:bf:2b:74:9d:a3:4a:2f:4b:ca:ee: 41:2a:29:7d:0c:d8:dc:57:38:3f:db:53:9a:75:a4: 1b:fc:4e:47:76:d5:25:7b:0d:d6:54:40:3e:13:bb: a6:23:f5:7e:e3:b8:08:3b:e1:5b:3e:3f:9e:db:5c: 1d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8D:97:C6:77:68:FC:EA:C4:9A:AB:8D:96:53:28:FA:71:91:28:DF X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ZI2Xxndo_OrEmquNllMo-nGRKN8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.83.0/24 Signature Algorithm: sha256WithRSAEncryption 42:a3:7d:d9:42:b6:ba:f2:4b:78:7d:69:64:73:f4:fb:81:6b: d8:2b:78:f5:15:8c:f5:11:4f:86:13:9b:3e:5b:9a:b4:06:a6: cc:0e:85:9c:57:6b:4b:31:d4:eb:d0:5f:69:01:f8:28:5b:a1: 1a:0e:21:16:36:21:3b:3e:e6:1c:e0:93:00:f6:4c:12:b7:ff: 6d:5f:83:20:aa:22:c3:4d:db:a3:62:ab:28:23:1e:d2:1e:48: 85:43:58:dc:d0:87:a6:11:39:36:7b:2e:c1:07:41:f0:17:56: 65:75:ae:80:a3:02:86:d4:b6:ce:b4:4a:15:e3:ac:1f:22:5c: 6f:c4:75:8b:49:04:22:17:c3:83:91:37:03:90:dd:8d:d8:5a: 07:99:d1:34:5e:26:27:a6:73:cd:26:76:24:bd:47:13:81:2c: d1:ca:84:83:7f:6d:31:3d:82:b9:40:e5:c7:fe:99:4c:44:f1: 6a:11:d7:cc:a5:f2:52:4f:27:2d:ca:06:ac:f1:56:2b:7b:5b: 30:ea:df:50:f0:2a:08:c6:05:a6:73:c4:aa:04:27:d4:ea:52: fe:6a:5c:19:6e:e7:80:42:b5:f3:56:db:be:20:a4:c6:ac:88: f9:36:83:a9:9e:38:10:a8:db:3f:75:1c:e5:cd:9e:7c:6d:7c: 2b:50:a3:d1 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0OEQ5N0M2Nzc2OEZD RUFDNDlBQUI4RDk2NTMyOEZBNzE5MTI4REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPFS5wz2xdfjW+Dz2NnV+hdznJI0PkUIQxJD0uwZtlcULHuKE7 M7eNwyTZlbbwhw0wIDJuIQdhho2gfgNCAR737HxmGir4qcDVyx4OrY8zGZCj7BiP A8DdISi1uIQvaM/Pi6+DVuS7YWlpnO+TdncK650JsEW3H6QWCaZQ5crRzmttYJL3 D3ANQXFI92WvCCF0qltgrLyD74pF56IjbkEaP9dhA+T7E+Dsag92tVdVf/0TJKMh D+G+3qnj0mxmdcnpkbN3Y6/4vyt0naNKL0vK7kEqKX0M2NxXOD/bU5p1pBv8Tkd2 1SV7DdZUQD4Tu6Yj9X7juAg74Vs+P57bXB1jAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUZI2Xxndo/OrEmquNllMo+nGRKN8wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9aSTJYeG5kb19PckVt cXVObGxNby1uR1JLTjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnRTMA0GCSqGSIb3DQEBCwUAA4IBAQBCo33ZQra68kt4fWlkc/T7gWvYK3j1 FYz1EU+GE5s+W5q0BqbMDoWcV2tLMdTr0F9pAfgoW6EaDiEWNiE7PuYc4JMA9kwS t/9tX4MgqiLDTdujYqsoIx7SHkiFQ1jc0IemETk2ey7BB0HwF1Zlda6AowKG1LbO tEoV46wfIlxvxHWLSQQiF8ODkTcDkN2N2FoHmdE0XiYnpnPNJnYkvUcTgSzRyoSD f20xPYK5QOXH/plMRPFqEdfMpfJSTyctygas8VYre1sw6t9Q8CoIxgWmc8SqBCfU 6lL+alwZbueAQrXzVtu+IKTGrIj5NoOpnjgQqNs/dRzlzZ58bXwrUKPR -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net