$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fah9DUz2dXsh_T4h8vVLmQ5nFnA.roa File: fah9DUz2dXsh_T4h8vVLmQ5nFnA.roa (raw, json) Hash identifier: BtzwO6fpfzr5m+l+gyK4aphGWnwoT+oeog3zOvmzUpI= Subject key identifier: 7D:A8:7D:0D:4C:F6:75:7B:21:FD:3E:21:F2:F5:4B:99:0E:67:16:70 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1294 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fah9DUz2dXsh_T4h8vVLmQ5nFnA.roa Signing time: Mon 10 Feb 2025 14:15:01 +0000 ROA not before: Mon 10 Feb 2025 14:15:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131600 IP address blocks: 150.117.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4756 (0x1294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7DA87D0D4CF6757B21FD3E21F2F54B990E671670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:52:14:5f:2a:c9:8e:92:e2:46:52:07:3a:93: b4:ff:7b:cd:4f:ba:30:a5:73:2c:cf:8a:2c:2c:c5: dd:7a:4f:78:11:4f:35:6e:23:69:6c:ac:1b:55:53: cd:46:ed:a3:a9:61:9e:f8:d3:bb:ce:e2:7b:2b:2a: 76:61:e7:a8:db:85:a0:12:5c:0a:9b:f2:f3:33:c0: 6d:b0:32:8f:be:f5:7e:4f:cb:ed:25:a7:fe:d9:0d: e2:08:55:01:ef:1d:73:37:80:1d:51:90:bb:89:38: ad:13:47:2c:ad:bc:34:01:82:77:4e:ec:4f:db:de: 00:21:1f:c1:9d:af:b2:7f:97:78:14:ae:bd:09:b8: 5d:5e:d4:0d:10:bd:10:9c:80:4b:1f:26:c2:46:94: f5:5c:1d:c8:0a:4b:b9:63:d2:f3:55:bf:f8:52:77: 22:bc:b4:67:2d:f5:b6:35:05:b5:b9:2f:63:41:3b: 96:2e:74:bd:58:d6:1b:68:89:72:81:06:a1:23:80: 94:e1:77:e4:91:8d:e0:19:d2:30:1c:16:5b:d0:86: 4d:63:14:46:d3:9e:39:8c:ef:30:e6:36:96:b1:31: 43:26:88:50:08:75:c5:c0:d0:c7:c2:03:4b:a4:73: 33:51:95:c3:1d:f0:01:8b:16:ea:02:3d:fc:cf:62: 75:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A8:7D:0D:4C:F6:75:7B:21:FD:3E:21:F2:F5:4B:99:0E:67:16:70 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fah9DUz2dXsh_T4h8vVLmQ5nFnA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.120.0/21 Signature Algorithm: sha256WithRSAEncryption 95:68:1c:3a:42:9a:69:e6:24:2d:f7:72:ef:22:c0:88:0e:1b: e2:08:d3:c9:43:0a:ed:38:7d:64:55:14:dc:72:85:81:e8:a2: 57:60:44:0b:25:7a:0e:66:c0:34:f9:44:d6:29:a8:e2:f4:9c: b8:56:88:69:f6:b1:21:c0:98:b6:28:36:9c:b9:01:45:80:76: bd:81:6c:f8:1d:64:f1:12:92:80:15:66:46:4d:d0:54:91:47: 57:47:e7:4b:93:ec:e6:d4:a9:0b:73:13:6e:e6:9f:44:6f:97: a8:5a:c2:6c:97:2d:2d:8d:be:06:6b:f4:71:b4:1e:08:f4:8a: 64:31:b4:29:56:fc:47:35:91:a7:de:33:3d:26:0a:37:36:07: 52:eb:58:04:bd:90:0d:a7:f0:01:fd:26:1a:8c:df:f5:cf:9b: 5d:dc:2d:41:be:ed:ab:b5:a9:43:51:10:87:e0:3b:ea:14:03: c0:cd:23:6f:30:84:f5:2a:99:d3:6b:a0:63:a0:b8:95:05:d6: e6:54:29:31:78:3f:bb:55:b8:58:9f:64:c1:d6:66:0f:b0:c9: ac:45:84:53:ba:45:94:76:4a:be:29:3f:8a:82:7d:11:96:41: 4b:59:5b:ab:af:4f:63:4d:7b:c2:36:66:d6:25:65:44:7d:96: 22:e3:1d:db -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEpQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdEQTg3RDBENENGNjc1 N0IyMUZEM0UyMUYyRjU0Qjk5MEU2NzE2NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZUhRfKsmOkuJGUgc6k7T/e81PujClcyzPiiwsxd16T3gRTzVu I2lsrBtVU81G7aOpYZ7407vO4nsrKnZh56jbhaASXAqb8vMzwG2wMo++9X5Py+0l p/7ZDeIIVQHvHXM3gB1RkLuJOK0TRyytvDQBgndO7E/b3gAhH8Gdr7J/l3gUrr0J uF1e1A0QvRCcgEsfJsJGlPVcHcgKS7lj0vNVv/hSdyK8tGct9bY1BbW5L2NBO5Yu dL1Y1htoiXKBBqEjgJThd+SRjeAZ0jAcFlvQhk1jFEbTnjmM7zDmNpaxMUMmiFAI dcXA0MfCA0ukczNRlcMd8AGLFuoCPfzPYnV7AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUfah9DUz2dXsh/T4h8vVLmQ5nFnAwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9mYWg5RFV6MmRYc2hf VDRoOHZWTG1RNW5GbkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnV4MA0GCSqGSIb3DQEBCwUAA4IBAQCVaBw6Qppp5iQt93LvIsCIDhviCNPJ QwrtOH1kVRTccoWB6KJXYEQLJXoOZsA0+UTWKaji9Jy4Vohp9rEhwJi2KDacuQFF gHa9gWz4HWTxEpKAFWZGTdBUkUdXR+dLk+zm1KkLcxNu5p9Eb5eoWsJsly0tjb4G a/RxtB4I9IpkMbQpVvxHNZGn3jM9Jgo3NgdS61gEvZANp/AB/SYajN/1z5td3C1B vu2rtalDURCH4DvqFAPAzSNvMIT1KpnTa6BjoLiVBdbmVCkxeD+7VbhYn2TB1mYP sMmsRYRTukWUdkq+KT+Kgn0RlkFLWVurr09jTXvCNmbWJWVEfZYi4x3b -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net