$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/XkZyISNyRd-aY_KnxzMmVUi1uoE.roa File: XkZyISNyRd-aY_KnxzMmVUi1uoE.roa (raw, json) Hash identifier: S9ag7VflzI7n2hWZVoUbF8JUog+jV4By2eLAbkhBVbw= Subject key identifier: 5E:46:72:21:23:72:45:DF:9A:63:F2:A7:C7:33:26:55:48:B5:BA:81 Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0CAD Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/XkZyISNyRd-aY_KnxzMmVUi1uoE.roa Signing time: Mon 26 Aug 2024 05:19:26 +0000 ROA not before: Mon 26 Aug 2024 05:19:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 58.86.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3245 (0xcad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Aug 26 05:19:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5E467221237245DF9A63F2A7C733265548B5BA81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:30:dc:6a:90:56:5b:ae:10:ba:cc:3c:95: 3d:f0:3f:32:59:42:6f:39:17:9f:02:cf:64:13:e6: 67:7f:22:c4:d7:e7:34:2c:fa:69:0c:7c:d2:81:dc: fe:8c:2e:2f:1b:26:c6:56:62:6f:6a:95:bf:12:4d: 1f:87:b6:9d:83:db:b5:d6:d5:df:2e:36:f4:ce:16: 39:ff:a8:af:50:00:67:a3:ae:4b:7e:02:55:c9:7a: 73:5a:61:1f:47:5b:9b:a0:f3:08:69:b8:e3:d3:b8: 8b:87:ea:d2:69:55:61:f2:c1:b8:2f:c2:9a:c1:91: a0:c9:27:37:84:10:4a:b8:dc:60:06:7d:ae:f4:6a: d2:5a:af:ca:d3:77:7b:f6:38:fc:da:b1:3b:27:97: 91:17:d3:a6:18:d2:81:a7:62:ff:f9:be:39:b5:23: 80:c8:b9:48:5c:9c:5b:f0:e1:41:72:21:fe:55:7d: a7:1a:54:e6:dc:cf:91:9a:bc:31:8b:1c:a4:b3:b8: af:b3:62:df:7f:d6:44:4c:1f:94:a4:83:c9:8d:c5: bc:69:13:34:b7:9c:c7:ba:28:e7:f2:82:16:bb:2c: 44:7e:21:e1:f2:e0:f7:50:e6:80:c1:27:1a:c8:2d: 94:fd:aa:2b:72:0f:c8:3e:c5:27:bf:9d:fe:18:13: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:46:72:21:23:72:45:DF:9A:63:F2:A7:C7:33:26:55:48:B5:BA:81 X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/XkZyISNyRd-aY_KnxzMmVUi1uoE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.86.46.0/24 Signature Algorithm: sha256WithRSAEncryption 27:d6:32:33:e2:b9:3b:37:1d:4e:b5:e1:2d:90:69:23:97:33: 54:60:5c:51:b2:ec:2d:54:52:19:01:4e:69:bc:25:a5:07:a9: 0b:dc:11:c6:77:1f:c5:62:11:fd:b4:56:05:d1:07:da:91:11: b4:4b:16:fc:29:c0:9e:05:79:77:f5:31:f1:f5:be:fb:7f:ae: 37:75:66:ae:99:7b:b9:81:c5:fc:22:3f:63:37:21:c0:b1:d2: 78:41:a9:c8:2a:2e:d3:50:76:e7:b3:87:33:5d:1f:cd:44:a4: 1f:d8:6c:42:cc:ed:80:86:f0:74:65:76:f8:18:1b:c2:76:ab: 36:58:5c:88:e4:98:5b:88:40:af:f1:ea:9b:a6:1e:02:c3:09: 4e:50:52:cd:69:60:24:00:7a:09:df:a4:5f:1b:cf:90:bc:80: 6a:ff:27:e6:76:9c:e4:e9:12:68:aa:d5:cb:44:dc:04:af:69: da:94:a8:0f:7f:42:f8:14:ab:25:d9:9c:e7:cf:0c:0d:67:56: 86:f9:8d:29:b9:bb:c7:75:c2:a4:57:31:6a:4b:dd:4d:af:b4: 82:9c:43:43:0e:38:37:9e:58:02:13:31:d4:3f:d1:73:f2:dc: 8e:6b:2a:0b:ec:5e:3d:3a:b2:73:ab:85:44:b6:da:21:96:39: df:91:33:78 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNDA4MjYw NTE5MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVFNDY3MjIxMjM3MjQ1 REY5QTYzRjJBN0M3MzMyNjU1NDhCNUJBODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+oDDcapBWW64Qusw8lT3wPzJZQm85F58Cz2QT5md/IsTX5zQs +mkMfNKB3P6MLi8bJsZWYm9qlb8STR+Htp2D27XW1d8uNvTOFjn/qK9QAGejrkt+ AlXJenNaYR9HW5ug8whpuOPTuIuH6tJpVWHywbgvwprBkaDJJzeEEEq43GAGfa70 atJar8rTd3v2OPzasTsnl5EX06YY0oGnYv/5vjm1I4DIuUhcnFvw4UFyIf5Vfaca VObcz5GavDGLHKSzuK+zYt9/1kRMH5Skg8mNxbxpEzS3nMe6KOfygha7LER+IeHy 4PdQ5oDBJxrILZT9qityD8g+xSe/nf4YEwDnAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXkZyISNyRd+aY/KnxzMmVUi1uoEwHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL1hrWnlJU055UmQtYVlfS254ek1tVlVp MXVvRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA6Vi4wDQYJ KoZIhvcNAQELBQADggEBACfWMjPiuTs3HU614S2QaSOXM1RgXFGy7C1UUhkBTmm8 JaUHqQvcEcZ3H8ViEf20VgXRB9qREbRLFvwpwJ4FeXf1MfH1vvt/rjd1Zq6Ze7mB xfwiP2M3IcCx0nhBqcgqLtNQduezhzNdH81EpB/YbELM7YCG8HRldvgYG8J2qzZY XIjkmFuIQK/x6pumHgLDCU5QUs1pYCQAegnfpF8bz5C8gGr/J+Z2nOTpEmiq1ctE 3ASvadqUqA9/QvgUqyXZnOfPDA1nVob5jSm5u8d1wqRXMWpL3U2vtIKcQ0MOODee WAITMdQ/0XPy3I5rKgvsXj06snOrhUS22iGWOd+RM3g= -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:46 2024 by rpki-client on console-fra.rpki-client.org