$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/h8yPtCI8nzDchoWtgAkTY7k_k6U.roa File: h8yPtCI8nzDchoWtgAkTY7k_k6U.roa (raw, json) Hash identifier: P/X8hdQFYg+lnlDA6sFFTESI+wxJnRQWigWJA1P9IHY= Subject key identifier: 87:CC:8F:B4:22:3C:9F:30:DC:86:85:AD:80:09:13:63:B9:3F:93:A5 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1251 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/h8yPtCI8nzDchoWtgAkTY7k_k6U.roa Signing time: Mon 10 Feb 2025 14:14:42 +0000 ROA not before: Mon 10 Feb 2025 14:14:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 150.116.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4689 (0x1251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=87CC8FB4223C9F30DC8685AD80091363B93F93A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:08:69:07:c8:ab:82:08:14:00:7a:ea:2c: b2:08:fa:17:4d:98:b9:93:1e:d9:c3:2d:bf:67:5b: ee:b2:0b:77:1f:1a:11:db:73:8a:0f:bd:ce:e7:67: fe:be:8f:0d:73:96:d8:d9:4d:2d:ec:f4:23:f1:23: 11:2b:37:8c:94:d0:ed:fd:f0:fa:3c:7f:ff:3a:87: d4:ef:15:f2:98:e0:ae:2c:b2:cd:76:f1:a9:ac:7c: 74:e4:77:0a:4a:6a:4e:4a:0a:02:d0:c7:13:75:70: c1:ac:12:aa:f0:2e:52:e6:b8:89:47:54:66:0d:3e: 68:e3:36:f2:03:01:26:71:a6:ba:4d:f7:91:fd:23: 4a:7f:c1:a7:1b:9c:84:67:a9:72:33:78:7f:35:b8: 34:cf:15:7d:30:39:ed:31:1a:d5:54:0a:33:ad:db: 2d:83:e2:fc:31:49:22:09:31:d8:6d:c5:e6:13:71: af:27:56:39:2c:b4:2c:09:77:52:93:c9:38:76:99: 10:fc:cc:fe:cd:fa:49:20:90:4a:09:87:7f:7c:83: ab:76:c4:2b:c8:80:01:49:82:c9:b1:86:e3:ce:11: 22:2a:ac:bb:8e:86:bc:9c:2e:dc:53:27:08:b0:2e: 69:eb:bd:48:d4:45:7f:a3:f4:5a:a9:0f:97:65:d7: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CC:8F:B4:22:3C:9F:30:DC:86:85:AD:80:09:13:63:B9:3F:93:A5 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/h8yPtCI8nzDchoWtgAkTY7k_k6U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.160.0/21 Signature Algorithm: sha256WithRSAEncryption 34:10:c3:5f:a0:ee:36:92:69:8c:91:c5:e6:e9:c2:97:7c:82: 84:60:c9:4d:80:50:45:ae:6a:f3:f8:14:d4:54:2d:4a:43:f9: 05:52:d5:1a:28:96:ed:86:f5:cb:d8:24:15:21:ff:5a:e3:ff: 35:71:24:bb:3d:2b:8f:22:e0:31:7d:01:15:36:92:68:72:2f: fc:cc:a8:6b:03:2c:6b:5f:4e:80:84:18:36:c8:00:a2:13:78: 1f:03:ed:0d:2c:68:8a:4f:e3:2d:99:36:f1:32:bb:d6:85:79: 45:da:f0:b5:c8:96:d5:52:9d:02:aa:d2:38:d2:4c:6f:2d:46: c2:37:81:ef:6a:d0:a1:05:91:63:e0:63:20:8d:ee:38:b7:eb: 3a:09:db:4a:3f:05:25:57:68:ad:17:15:50:ad:e7:ef:b8:91: eb:41:2a:62:48:a4:29:d9:72:74:04:c8:9a:cb:ae:1a:f8:28: a0:a3:a2:36:44:c5:58:77:aa:67:89:b9:03:36:63:59:a1:e7: d1:75:a3:2d:99:e5:46:6c:b1:87:87:5e:b1:06:6b:c7:74:b1: 04:1f:36:4f:cb:b1:4d:16:3b:43:06:c9:e7:00:db:00:17:31: e6:ff:a3:48:22:37:d1:8c:c1:a5:a2:ab:cb:98:e5:0f:47:dd: 5e:7e:af:b3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICElEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg3Q0M4RkI0MjIzQzlG MzBEQzg2ODVBRDgwMDkxMzYzQjkzRjkzQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD3whpB8irgggUAHrqLLII+hdNmLmTHtnDLb9nW+6yC3cfGhHb c4oPvc7nZ/6+jw1zltjZTS3s9CPxIxErN4yU0O398Po8f/86h9TvFfKY4K4sss12 8amsfHTkdwpKak5KCgLQxxN1cMGsEqrwLlLmuIlHVGYNPmjjNvIDASZxprpN95H9 I0p/wacbnIRnqXIzeH81uDTPFX0wOe0xGtVUCjOt2y2D4vwxSSIJMdhtxeYTca8n VjkstCwJd1KTyTh2mRD8zP7N+kkgkEoJh398g6t2xCvIgAFJgsmxhuPOESIqrLuO hrycLtxTJwiwLmnrvUjURX+j9FqpD5dl11olAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUh8yPtCI8nzDchoWtgAkTY7k/k6UwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9oOHlQdENJOG56RGNo b1d0Z0FrVFk3a19rNlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnSgMA0GCSqGSIb3DQEBCwUAA4IBAQA0EMNfoO42kmmMkcXm6cKXfIKEYMlN gFBFrmrz+BTUVC1KQ/kFUtUaKJbthvXL2CQVIf9a4/81cSS7PSuPIuAxfQEVNpJo ci/8zKhrAyxrX06AhBg2yACiE3gfA+0NLGiKT+MtmTbxMrvWhXlF2vC1yJbVUp0C qtI40kxvLUbCN4HvatChBZFj4GMgje44t+s6CdtKPwUlV2itFxVQrefvuJHrQSpi SKQp2XJ0BMiay64a+Cigo6I2RMVYd6pnibkDNmNZoefRdaMtmeVGbLGHh16xBmvH dLEEHzZPy7FNFjtDBsnnANsAFzHm/6NIIjfRjMGloqvLmOUPR91efq+z -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net