$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/d9jwpWlCbaxziYoPUsM3GZjk89Y.roa File: d9jwpWlCbaxziYoPUsM3GZjk89Y.roa (raw, json) Hash identifier: Em/8SrY4ysvVArA/aPwAMKuVFklHoAo2zBvAiaS0Sw0= Subject key identifier: 77:D8:F0:A5:69:42:6D:AC:73:89:8A:0F:52:C3:37:19:98:E4:F3:D6 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 125A Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/d9jwpWlCbaxziYoPUsM3GZjk89Y.roa Signing time: Mon 10 Feb 2025 14:14:45 +0000 ROA not before: Mon 10 Feb 2025 14:14:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4698 (0x125a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=77D8F0A569426DAC73898A0F52C3371998E4F3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:a8:b6:07:d0:ce:66:1c:a8:64:1e:c3:f6: c7:95:ba:51:ea:3f:c6:b7:ba:1f:e6:c2:f3:b4:2a: c5:c2:60:d5:eb:80:6b:84:db:70:08:d2:98:06:07: 9e:f0:ca:ae:bc:28:a4:b4:76:49:61:b1:12:42:8c: da:1c:21:17:3a:b9:4d:4e:ad:ee:ab:23:70:73:16: 68:1a:0b:67:a1:28:d2:f6:e9:11:71:92:4d:c9:e4: 2f:fa:cc:51:32:1a:b3:bb:f5:69:05:47:4d:c3:0d: 79:1d:07:5b:be:fb:91:f8:55:eb:fd:dd:4a:51:f4: cc:0e:83:1b:1e:38:77:0c:62:9e:af:23:fe:78:36: 38:a0:67:93:b6:be:19:c7:cd:57:43:36:ac:e5:22: 60:e2:52:9d:27:40:0d:6c:2e:f2:fe:66:29:30:33: 30:66:52:91:d4:1f:8b:61:fa:59:6f:0e:21:e1:f9: 4c:ab:7e:72:31:3c:d1:58:95:80:8a:8a:5f:e7:e4: bd:c6:fc:8e:f5:2c:4a:fc:81:2b:35:ca:f3:2d:75: 08:1e:23:25:f0:c8:93:78:02:3c:e4:40:ed:ce:33: 9f:06:c9:28:11:b3:23:08:f6:e6:f8:71:ff:f9:4e: 00:6c:8b:e7:53:7e:21:53:c5:89:28:4e:e8:30:93: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D8:F0:A5:69:42:6D:AC:73:89:8A:0F:52:C3:37:19:98:E4:F3:D6 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/d9jwpWlCbaxziYoPUsM3GZjk89Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.88.0/22 Signature Algorithm: sha256WithRSAEncryption a2:52:67:50:23:7b:e5:30:21:24:86:58:ee:c8:69:f0:d6:45: 99:94:a5:dc:a3:4d:90:4a:6e:55:18:0f:93:b2:08:a3:2e:e5: 93:ff:f1:d2:65:59:53:5f:2e:68:47:3b:6a:93:26:d1:dd:32: ca:1b:07:82:60:e7:b9:05:33:f7:00:75:62:d3:f0:81:f4:11: ae:84:46:bf:66:1d:5a:ce:65:71:7b:00:74:1c:a7:be:4f:ed: ca:67:1e:33:ac:c7:07:ff:fe:97:c5:d2:e2:f7:a6:8c:63:50: 45:f0:69:68:e7:0e:7c:cb:ba:5c:34:73:22:32:e6:80:58:b0: dc:c2:ce:ff:2a:9c:fb:9c:e6:2a:d5:1d:74:41:fe:0b:0c:95: 68:de:12:aa:46:68:ad:b6:b9:11:8a:d5:09:62:85:8a:77:ac: a4:55:97:e5:1a:41:4e:2a:73:13:50:74:61:75:3b:f6:11:0a: 61:ec:64:f1:d3:1d:ad:26:f7:48:07:61:4a:54:cd:48:06:69: 59:40:56:e3:02:93:87:27:28:3f:35:ed:71:87:00:e0:8d:b8: ec:af:e6:8b:f7:bd:47:df:52:d5:38:de:67:25:ed:89:53:34: ed:e6:06:a5:b2:25:34:93:75:e9:b9:cc:bd:ba:59:d7:17:ae: 09:91:95:30 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICElowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3RDhGMEE1Njk0MjZE QUM3Mzg5OEEwRjUyQzMzNzE5OThFNEYzRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa4qi2B9DOZhyoZB7D9seVulHqP8a3uh/mwvO0KsXCYNXrgGuE 23AI0pgGB57wyq68KKS0dklhsRJCjNocIRc6uU1Ore6rI3BzFmgaC2ehKNL26RFx kk3J5C/6zFEyGrO79WkFR03DDXkdB1u++5H4Vev93UpR9MwOgxseOHcMYp6vI/54 NjigZ5O2vhnHzVdDNqzlImDiUp0nQA1sLvL+ZikwMzBmUpHUH4th+llvDiHh+Uyr fnIxPNFYlYCKil/n5L3G/I71LEr8gSs1yvMtdQgeIyXwyJN4AjzkQO3OM58GySgR syMI9ub4cf/5TgBsi+dTfiFTxYkoTugwk2ZRAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUd9jwpWlCbaxziYoPUsM3GZjk89YwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9kOWp3cFdsQ2JheHpp WW9QVXNNM0daams4OVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClnRYMA0GCSqGSIb3DQEBCwUAA4IBAQCiUmdQI3vlMCEkhljuyGnw1kWZlKXc o02QSm5VGA+TsgijLuWT//HSZVlTXy5oRztqkybR3TLKGweCYOe5BTP3AHVi0/CB 9BGuhEa/Zh1azmVxewB0HKe+T+3KZx4zrMcH//6XxdLi96aMY1BF8Glo5w58y7pc NHMiMuaAWLDcws7/Kpz7nOYq1R10Qf4LDJVo3hKqRmittrkRitUJYoWKd6ykVZfl GkFOKnMTUHRhdTv2EQph7GTx0x2tJvdIB2FKVM1IBmlZQFbjApOHJyg/Ne1xhwDg jbjsr+aL971H31LVON5nJe2JUzTt5galsiU0k3Xpucy9ulnXF64JkZUw -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net