$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/B1N0USczceabvQZjgsrCGYL6HJI.roa File: B1N0USczceabvQZjgsrCGYL6HJI.roa (raw, json) Hash identifier: ggNxd1kwKJMGXza+q24nRTlFLQQl57Nbp7nOacbSCXc= Subject key identifier: 07:53:74:51:27:33:71:E6:9B:BD:06:63:82:CA:C2:19:82:FA:1C:92 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 129F Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/B1N0USczceabvQZjgsrCGYL6HJI.roa Signing time: Mon 10 Feb 2025 14:15:03 +0000 ROA not before: Mon 10 Feb 2025 14:15:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131607 IP address blocks: 150.117.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4767 (0x129f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=07537451273371E69BBD066382CAC21982FA1C92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ae:db:b4:cc:e2:e3:8e:80:d4:12:89:ca:93: 0d:81:6a:07:f1:ca:dd:e8:56:b8:1d:67:08:6a:1f: 8c:1e:ad:b2:77:ed:43:40:b3:2e:64:05:a2:cf:7e: ce:02:e5:7c:0e:c1:70:00:03:b1:4e:d9:d2:78:b3: bc:ce:21:d0:7f:06:58:05:d8:14:58:ef:4a:4e:00: 07:75:34:21:de:47:0c:60:56:0f:ed:2e:ba:65:27: 5b:d9:37:3e:b9:53:5f:cf:58:f8:ba:30:d5:69:af: fe:8a:b8:6d:48:be:d3:11:9e:b0:0d:c3:2b:97:7a: f2:a9:82:eb:33:ec:e7:17:5d:35:85:df:23:05:7d: 1f:69:b2:80:f6:05:40:4c:fd:8a:a6:af:b3:59:65: ae:e9:35:84:75:fc:bd:fd:6c:1d:b9:f2:2e:e8:61: 2d:5f:48:43:67:31:03:fd:8b:5a:7e:60:30:d5:95: f9:5b:4f:95:ac:e4:c9:c8:1a:1b:18:96:bd:33:f4: 71:92:47:36:fa:3d:46:8b:6e:1b:8d:05:ee:d1:ff: 58:32:9b:53:29:13:ae:3b:cb:a1:81:3c:3a:8e:b0: 80:05:ab:35:87:78:a7:44:16:da:c0:ee:85:bd:45: 73:12:75:61:56:8a:d8:f4:ab:66:55:d7:13:56:22: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:53:74:51:27:33:71:E6:9B:BD:06:63:82:CA:C2:19:82:FA:1C:92 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/B1N0USczceabvQZjgsrCGYL6HJI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.224.0/21 Signature Algorithm: sha256WithRSAEncryption 92:64:00:d7:f2:49:af:1d:23:6f:87:4d:91:10:02:90:44:74: 88:fe:ad:22:3c:65:dd:95:a8:b5:81:5d:2c:fa:f4:c7:30:f0: 91:73:8b:93:aa:49:a3:08:c5:b8:a3:81:d2:99:93:cf:04:e2: 76:93:b7:e6:af:99:d4:65:0a:8f:43:6a:14:b8:14:9e:6e:bb: 86:65:48:84:e4:1c:fa:d0:82:44:50:51:ae:38:86:bb:c9:3e: c8:30:a4:0a:95:06:35:3c:ce:86:a4:4c:9d:b8:9a:51:d7:26: bc:d5:8d:c5:da:2d:26:c9:8c:89:23:7b:d0:84:02:55:20:2c: 5c:16:ff:d5:2d:92:56:96:0f:17:ce:56:ec:b8:85:74:cb:60: 8a:06:11:19:1d:d6:2f:0d:a0:12:2e:3c:a6:f0:f2:75:46:46: dc:9e:95:1a:62:af:be:97:5a:aa:ab:a1:8c:18:49:a7:dc:23: a9:e3:81:1c:db:af:aa:89:a9:b2:30:a5:85:a9:ce:8b:ea:a6: 34:33:a4:74:2e:a7:55:0e:e0:ef:51:26:2d:27:41:fe:e4:c5: 13:28:d3:fd:ed:d3:32:2e:1f:79:63:4b:17:a2:5f:0b:81:5f: 38:0e:73:ea:02:24:48:42:c5:10:bb:30:97:71:f6:30:c6:07: 87:28:87:b4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3NTM3NDUxMjczMzcx RTY5QkJEMDY2MzgyQ0FDMjE5ODJGQTFDOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwrtu0zOLjjoDUEonKkw2Bagfxyt3oVrgdZwhqH4werbJ37UNA sy5kBaLPfs4C5XwOwXAAA7FO2dJ4s7zOIdB/BlgF2BRY70pOAAd1NCHeRwxgVg/t LrplJ1vZNz65U1/PWPi6MNVpr/6KuG1IvtMRnrANwyuXevKpgusz7OcXXTWF3yMF fR9psoD2BUBM/Yqmr7NZZa7pNYR1/L39bB258i7oYS1fSENnMQP9i1p+YDDVlflb T5Ws5MnIGhsYlr0z9HGSRzb6PUaLbhuNBe7R/1gym1MpE647y6GBPDqOsIAFqzWH eKdEFtrA7oW9RXMSdWFWitj0q2ZV1xNWIu8xAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUB1N0USczceabvQZjgsrCGYL6HJIwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9CMU4wVVNjemNlYWJ2 UVpqZ3NyQ0dZTDZISkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnXgMA0GCSqGSIb3DQEBCwUAA4IBAQCSZADX8kmvHSNvh02REAKQRHSI/q0i PGXdlai1gV0s+vTHMPCRc4uTqkmjCMW4o4HSmZPPBOJ2k7fmr5nUZQqPQ2oUuBSe bruGZUiE5Bz60IJEUFGuOIa7yT7IMKQKlQY1PM6GpEyduJpR1ya81Y3F2i0myYyJ I3vQhAJVICxcFv/VLZJWlg8XzlbsuIV0y2CKBhEZHdYvDaASLjym8PJ1RkbcnpUa Yq++l1qqq6GMGEmn3COp44Ec26+qiamyMKWFqc6L6qY0M6R0LqdVDuDvUSYtJ0H+ 5MUTKNP97dMyLh95Y0sXol8LgV84DnPqAiRIQsUQuzCXcfYwxgeHKIe0 -----END CERTIFICATE-----Generated at Sat Apr 26 20:13:04 2025 by rpki-client