$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_K3XE6xNNPcn3GQfnsOvdzB2V8U.roa File: _K3XE6xNNPcn3GQfnsOvdzB2V8U.roa (raw, json) Hash identifier: HlFripZXFoyF0RWDktI7jicdq5pnW59loy8cE55V5Mk= Subject key identifier: FC:AD:D7:13:AC:4D:34:F7:27:DC:64:1F:9E:C3:AF:77:30:76:57:C5 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1283 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_K3XE6xNNPcn3GQfnsOvdzB2V8U.roa Signing time: Mon 10 Feb 2025 14:14:56 +0000 ROA not before: Mon 10 Feb 2025 14:14:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17408 IP address blocks: 150.116.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4739 (0x1283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FCADD713AC4D34F727DC641F9EC3AF77307657C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:1e:ee:76:1e:8c:6e:75:20:a5:0c:1b:3c: 40:bf:19:85:be:fa:22:22:2e:ff:cf:2f:cf:11:66: 9d:36:33:71:53:83:04:aa:08:75:c3:53:82:aa:16: 6b:41:2b:19:7c:cd:a5:62:2f:43:18:d8:c0:0b:ec: 9c:c4:9f:41:6c:4e:d9:83:c1:7c:ba:51:ac:aa:a7: 7d:26:1a:59:9a:7e:7c:0a:1e:76:d2:bc:9f:89:d8: 81:22:24:a2:b2:fe:96:0e:ce:b7:8f:02:56:a0:b1: 86:41:a9:4d:cb:8f:be:74:a5:55:96:2e:91:5a:44: 1b:d0:4c:45:fd:47:95:d8:fb:57:72:9b:94:d1:af: 5c:4c:ee:c9:e5:b6:d2:74:a7:0c:ab:2c:0c:0f:72: a4:22:4a:90:32:f4:2c:01:9e:17:08:d7:42:37:c1: 6b:e3:7c:a7:0d:9f:d8:a1:d1:8f:f8:5d:b8:60:77: ca:9b:a4:e6:5f:25:2b:c3:df:85:2f:70:f8:12:b1: 26:eb:80:1c:3a:2f:c5:dd:ce:f8:92:f0:96:5d:99: fa:f4:56:9a:e0:bc:6d:19:8e:e9:bf:8b:ba:82:72: 8a:dd:59:aa:3c:99:80:a4:3e:a5:ad:6f:54:5f:6d: ea:e5:55:0a:fa:9f:e4:2e:3d:45:5f:f3:5b:d8:ad: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AD:D7:13:AC:4D:34:F7:27:DC:64:1F:9E:C3:AF:77:30:76:57:C5 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_K3XE6xNNPcn3GQfnsOvdzB2V8U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.112.0/22 Signature Algorithm: sha256WithRSAEncryption b2:d4:8f:b9:bb:e7:8d:3e:0f:e8:29:1a:ff:eb:ee:f7:0b:2d: d1:3c:5e:00:62:6c:2d:d4:5b:6c:fe:6c:fc:9f:ac:7d:aa:9d: eb:8f:75:c1:6c:16:86:97:4b:a8:ae:96:5b:d8:a9:33:2c:15: d7:a7:0d:ea:cd:c4:40:d6:4d:9a:b7:a6:77:a9:ce:fc:ae:06: 36:f1:9a:52:af:4b:2a:11:c9:5b:fd:17:98:c7:76:36:06:03: a2:47:98:1c:ea:a9:f5:bb:31:9a:7b:54:5d:1b:90:cc:0e:39: 45:22:62:16:69:6c:c6:9d:04:d8:51:bf:ca:43:e3:5e:cd:a6: f6:77:48:0b:3a:a6:0f:40:b2:be:cb:da:93:23:ae:5b:88:89: 71:f6:95:c3:62:c9:b4:55:8d:ca:c0:d4:4e:d9:7f:a7:3a:59: ea:c2:2d:3a:36:af:1f:69:24:c1:5b:68:1b:e0:e1:78:64:ca: 8a:c4:0a:3e:7f:ab:86:76:9b:9b:5e:5b:6e:09:d9:7f:d7:5c: d0:86:4b:ab:87:af:f5:16:55:85:84:ca:ee:90:b6:22:f4:8c: e6:9d:85:37:7a:da:bf:18:42:61:49:1c:3c:3d:2f:d3:a2:ea: 78:11:ad:32:9f:14:1f:79:a1:9a:50:f6:40:a1:13:e8:ec:b1: 5e:bb:e7:8b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDQURENzEzQUM0RDM0 RjcyN0RDNjQxRjlFQzNBRjc3MzA3NjU3QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHax7udh6MbnUgpQwbPEC/GYW++iIiLv/PL88RZp02M3FTgwSq CHXDU4KqFmtBKxl8zaViL0MY2MAL7JzEn0FsTtmDwXy6Uayqp30mGlmafnwKHnbS vJ+J2IEiJKKy/pYOzrePAlagsYZBqU3Lj750pVWWLpFaRBvQTEX9R5XY+1dym5TR r1xM7snlttJ0pwyrLAwPcqQiSpAy9CwBnhcI10I3wWvjfKcNn9ih0Y/4Xbhgd8qb pOZfJSvD34UvcPgSsSbrgBw6L8XdzviS8JZdmfr0VprgvG0Zjum/i7qCcordWao8 mYCkPqWtb1RfberlVQr6n+QuPUVf81vYrYu5AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU/K3XE6xNNPcn3GQfnsOvdzB2V8UwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9fSzNYRTZ4Tk5QY24z R1FmbnNPdmR6QjJWOFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClnRwMA0GCSqGSIb3DQEBCwUAA4IBAQCy1I+5u+eNPg/oKRr/6+73Cy3RPF4A Ymwt1Fts/mz8n6x9qp3rj3XBbBaGl0uorpZb2KkzLBXXpw3qzcRA1k2at6Z3qc78 rgY28ZpSr0sqEclb/ReYx3Y2BgOiR5gc6qn1uzGae1RdG5DMDjlFImIWaWzGnQTY Ub/KQ+Nezab2d0gLOqYPQLK+y9qTI65biIlx9pXDYsm0VY3KwNRO2X+nOlnqwi06 Nq8faSTBW2gb4OF4ZMqKxAo+f6uGdpubXltuCdl/11zQhkurh6/1FlWFhMrukLYi 9IzmnYU3etq/GEJhSRw8PS/Toup4Ea0ynxQfeaGaUPZAoRPo7LFeu+eL -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net