$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/j-vGiRRz_CrPlLmU2XuoOFjjFDc.roa File: j-vGiRRz_CrPlLmU2XuoOFjjFDc.roa (raw, json) Hash identifier: ixE1UbWi7NYTs9PakzKDaXzy7r6aFCZVL8DWVDZh05Y= Subject key identifier: 8F:EB:C6:89:14:73:FC:2A:CF:94:B9:94:D9:7B:A8:38:58:E3:14:37 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12BE Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/j-vGiRRz_CrPlLmU2XuoOFjjFDc.roa Signing time: Mon 10 Feb 2025 14:15:11 +0000 ROA not before: Mon 10 Feb 2025 14:15:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7532 IP address blocks: 150.116.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4798 (0x12be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8FEBC6891473FC2ACF94B994D97BA83858E31437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:5b:47:de:65:b1:7a:aa:d2:fb:11:34:3e: 68:81:18:cd:af:19:96:26:91:09:8d:15:10:96:fa: 90:db:7a:f3:77:78:b3:5b:f1:43:49:02:59:86:8b: 0a:eb:d9:14:ac:96:9d:24:b2:04:9f:31:d7:e3:32: 1b:96:d4:5c:cd:50:f1:1c:8a:fd:41:43:99:20:a1: 14:77:f7:af:f8:d2:0b:26:8e:45:f8:cf:9d:14:21: 02:08:6d:ad:3f:c3:88:f8:a1:b2:2f:16:54:e8:ca: 62:92:c8:fa:cc:53:1e:f5:6a:16:40:ae:c1:22:a8: 73:7b:c8:c4:18:a8:d9:03:44:e1:f2:a8:6f:08:68: aa:5b:1d:e8:f7:5f:37:4d:8f:2b:a6:32:5d:e3:84: 31:72:f4:1a:2f:c5:47:5a:02:79:ca:7a:f5:b0:d4: 21:11:20:c3:1c:da:cc:f6:c9:6a:28:6d:f6:6f:56: f9:a1:a5:1a:e2:af:7c:a7:46:7f:5c:00:5c:c9:fc: be:b0:76:32:66:cc:23:be:25:83:a6:6b:53:cb:52: 67:98:ce:19:18:b4:5f:27:5e:63:2d:2e:a7:e4:26: ee:4b:5e:9a:1e:7a:69:2f:2a:15:4f:8f:fb:68:8c: f2:97:6d:ce:6b:27:1d:7c:39:9d:3d:ee:68:47:70: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EB:C6:89:14:73:FC:2A:CF:94:B9:94:D9:7B:A8:38:58:E3:14:37 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/j-vGiRRz_CrPlLmU2XuoOFjjFDc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.56.0/21 Signature Algorithm: sha256WithRSAEncryption 70:14:88:d4:49:49:e5:7b:9b:17:32:a6:83:11:b2:25:cd:45: 10:e7:69:0e:96:d8:7f:a0:cf:be:ad:42:71:df:b8:32:5e:c1: 7c:98:51:47:f1:46:9e:c0:7f:02:5f:18:b0:33:c7:ee:87:ea: 7d:62:ba:7c:49:de:3a:3c:37:3c:f8:cf:8c:19:81:79:11:e9: 83:1e:8c:db:30:8a:8a:3e:00:72:a8:e4:2a:75:b4:d2:88:3f: e3:f1:74:65:75:4f:33:fe:ab:f9:56:b4:72:41:72:b1:66:e0: 36:e3:c1:65:e6:3b:4f:1b:9f:e5:49:9c:64:53:33:92:b2:78: f7:27:9c:a1:cf:52:5b:50:9e:35:70:25:fc:86:d7:50:de:ac: 62:ca:58:da:d2:ed:8c:09:19:80:fc:c3:2b:58:cb:36:f5:17: 2d:2f:56:24:ff:14:5a:07:6d:b9:82:6b:0c:63:4d:91:e6:db: 99:67:f3:7c:42:dc:ae:44:12:ad:1b:f9:92:b0:f9:49:4e:22: f5:fd:54:fe:11:1c:37:6b:1c:1c:cb:ff:99:6d:aa:aa:04:0e: 82:95:57:d2:35:d5:d2:1e:f2:3c:1f:ad:02:6d:12:43:d6:d5: 05:e8:18:07:b4:bd:b0:fb:59:9f:14:4c:44:a1:55:f8:a0:3c: 5e:b6:0e:7f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGRUJDNjg5MTQ3M0ZD MkFDRjk0Qjk5NEQ5N0JBODM4NThFMzE0MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzuVtH3mWxeqrS+xE0PmiBGM2vGZYmkQmNFRCW+pDbevN3eLNb 8UNJAlmGiwrr2RSslp0ksgSfMdfjMhuW1FzNUPEciv1BQ5kgoRR396/40gsmjkX4 z50UIQIIba0/w4j4obIvFlToymKSyPrMUx71ahZArsEiqHN7yMQYqNkDROHyqG8I aKpbHej3XzdNjyumMl3jhDFy9BovxUdaAnnKevWw1CERIMMc2sz2yWoobfZvVvmh pRrir3ynRn9cAFzJ/L6wdjJmzCO+JYOma1PLUmeYzhkYtF8nXmMtLqfkJu5LXpoe emkvKhVPj/tojPKXbc5rJx18OZ097mhHcEgPAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUj+vGiRRz/CrPlLmU2XuoOFjjFDcwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9qLXZHaVJSel9DclBs TG1VMlh1b09GampGRGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnQ4MA0GCSqGSIb3DQEBCwUAA4IBAQBwFIjUSUnle5sXMqaDEbIlzUUQ52kO lth/oM++rUJx37gyXsF8mFFH8UaewH8CXxiwM8fuh+p9Yrp8Sd46PDc8+M+MGYF5 EemDHozbMIqKPgByqOQqdbTSiD/j8XRldU8z/qv5VrRyQXKxZuA248Fl5jtPG5/l SZxkUzOSsnj3J5yhz1JbUJ41cCX8htdQ3qxiylja0u2MCRmA/MMrWMs29RctL1Yk /xRaB225gmsMY02R5tuZZ/N8QtyuRBKtG/mSsPlJTiL1/VT+ERw3axwcy/+Zbaqq BA6ClVfSNdXSHvI8H60CbRJD1tUF6BgHtL2w+1mfFExEoVX4oDxetg5/ -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net