$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/8KKweT6B90sKjMQRqYBwlv-pc00.roa File: 8KKweT6B90sKjMQRqYBwlv-pc00.roa (raw, json) Hash identifier: 7xAbw6QEivtqTlN14DNn6PShdNmPnAjZ3FphAlQwtH4= Subject key identifier: F0:A2:B0:79:3E:81:F7:4B:0A:8C:C4:11:A9:80:70:96:FF:A9:73:4D Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0CB1 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/8KKweT6B90sKjMQRqYBwlv-pc00.roa Signing time: Mon 26 Aug 2024 05:19:28 +0000 ROA not before: Mon 26 Aug 2024 05:19:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 61.67.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Aug 26 05:19:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F0A2B0793E81F74B0A8CC411A9807096FFA9734D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:15:70:4d:44:dd:2f:d5:9e:53:e6:1f:ca: d7:25:db:40:82:59:29:85:00:7b:1a:03:7f:63:40: f3:30:72:7b:83:a8:a4:05:be:a0:40:fc:94:33:ea: bf:9b:32:3b:9d:57:3f:7a:57:5c:6e:38:72:eb:9f: 78:a1:f5:cf:a6:91:a0:6f:7a:f4:d0:11:e6:46:a4: 97:50:a3:e3:65:6a:fd:c1:04:59:d8:68:8e:1a:67: bb:87:23:a3:2d:f2:f5:fe:61:17:e9:1a:af:22:f8: 9c:77:c1:fb:df:5b:c1:35:fb:ad:00:68:25:8a:ea: 7d:71:ce:8d:c2:cb:5a:13:94:36:f3:9d:09:d6:db: 52:98:ba:93:56:fd:77:6b:a0:95:83:a6:a6:a4:42: e1:1f:02:7d:48:d5:43:c7:71:53:5c:30:2a:a2:23: 35:ab:20:19:73:a7:90:b3:71:c6:ab:34:6e:f9:76: 5c:fb:27:a1:6c:c2:27:88:5a:2e:70:57:58:da:0d: 37:e2:33:c3:d6:56:61:63:99:91:b7:8e:7e:ff:34: 77:d7:a1:0d:95:16:02:9b:36:bf:10:b5:ca:b2:ff: 0f:9c:66:fb:34:1a:06:05:5f:19:2b:77:d3:17:71: 81:50:df:4f:b1:74:df:2c:cb:ce:c0:f8:3b:cf:e1: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:B0:79:3E:81:F7:4B:0A:8C:C4:11:A9:80:70:96:FF:A9:73:4D X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/8KKweT6B90sKjMQRqYBwlv-pc00.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.67.207.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:17:e7:92:1a:17:02:08:c5:b5:72:5a:58:5b:3b:67:c5:c0: ae:53:cb:bc:fe:3c:52:84:9d:4b:1c:dc:64:0f:1f:72:d4:88: 61:2f:8a:29:1f:9d:bf:c4:29:d8:59:48:b4:2d:23:82:d2:dc: 08:f9:33:6f:b0:5c:f5:ab:9f:b5:79:ab:f7:82:0d:4e:19:dd: 17:71:43:9a:e5:7d:e3:c4:0d:c6:1f:4b:e8:30:6f:db:45:cd: 12:00:cd:3f:24:0e:9a:1f:8b:d0:9e:68:fe:83:7e:e3:37:51: c1:d3:54:9b:b3:ad:57:b3:ef:3a:96:17:6d:ab:f0:42:7d:18: 3c:fe:b2:7a:84:fc:fb:f3:03:7b:1e:b1:6e:3a:42:53:a3:9b: e5:7e:3f:eb:cd:bd:5f:c0:b5:d8:88:95:9e:51:27:88:26:71: fa:10:80:02:35:d2:74:70:07:e4:e5:cf:fc:c2:f9:4d:0b:4e: 02:db:f3:25:40:93:6a:6d:33:84:2c:e6:9e:3d:d9:30:14:3e: dd:fa:51:34:e6:6d:50:d2:71:8b:fc:d0:73:42:df:9b:9f:1e: 9d:b8:de:61:96:aa:0d:60:0d:29:07:2a:8b:78:bc:2e:e7:e2: ad:0e:b0:9c:8b:02:5a:71:ef:4b:a4:6a:85:52:ea:bb:74:75: 7e:a4:85:b8 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNDA4MjYw NTE5MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYwQTJCMDc5M0U4MUY3 NEIwQThDQzQxMUE5ODA3MDk2RkZBOTczNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC19xVwTUTdL9WeU+Yfytcl20CCWSmFAHsaA39jQPMwcnuDqKQF vqBA/JQz6r+bMjudVz96V1xuOHLrn3ih9c+mkaBvevTQEeZGpJdQo+Nlav3BBFnY aI4aZ7uHI6Mt8vX+YRfpGq8i+Jx3wfvfW8E1+60AaCWK6n1xzo3Cy1oTlDbznQnW 21KYupNW/XdroJWDpqakQuEfAn1I1UPHcVNcMCqiIzWrIBlzp5CzccarNG75dlz7 J6FswieIWi5wV1jaDTfiM8PWVmFjmZG3jn7/NHfXoQ2VFgKbNr8Qtcqy/w+cZvs0 GgYFXxkrd9MXcYFQ30+xdN8sy87A+DvP4WpBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU8KKweT6B90sKjMQRqYBwlv+pc00wHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JULzhLS3dlVDZCOTBzS2pNUVJxWUJ3bHYt cGMwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9Q88wDQYJ KoZIhvcNAQELBQADggEBAEwX55IaFwIIxbVyWlhbO2fFwK5Ty7z+PFKEnUsc3GQP H3LUiGEviikfnb/EKdhZSLQtI4LS3Aj5M2+wXPWrn7V5q/eCDU4Z3RdxQ5rlfePE DcYfS+gwb9tFzRIAzT8kDpofi9CeaP6DfuM3UcHTVJuzrVez7zqWF22r8EJ9GDz+ snqE/PvzA3sesW46QlOjm+V+P+vNvV/AtdiIlZ5RJ4gmcfoQgAI10nRwB+Tlz/zC +U0LTgLb8yVAk2ptM4Qs5p492TAUPt36UTTmbVDScYv80HNC35ufHp243mGWqg1g DSkHKot4vC7n4q0OsJyLAlpx70ukaoVS6rt0dX6khbg= -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:46 2024 by rpki-client on console-fra.rpki-client.org