$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/KFAERCluRY-TQLBjQrbYOk5kV90.roa File: KFAERCluRY-TQLBjQrbYOk5kV90.roa (raw, json) Hash identifier: 2QIbswsZhYupjAOFuZyKrdFtdipGlJ04T2r7F5MBgEU= Subject key identifier: 28:50:04:44:29:6E:45:8F:93:40:B0:63:42:B6:D8:3A:4E:64:57:DD Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0D29 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/KFAERCluRY-TQLBjQrbYOk5kV90.roa Signing time: Mon 26 Aug 2024 05:19:37 +0000 ROA not before: Mon 26 Aug 2024 05:19:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 115.43.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3369 (0xd29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 26 05:19:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=28500444296E458F9340B06342B6D83A4E6457DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:fe:81:11:dc:88:bd:d8:63:1c:af:a1:5d: 32:76:cb:0f:e6:21:1d:16:3e:8f:fa:27:48:dd:3e: 59:be:64:49:5c:c6:5c:af:88:39:92:47:3a:41:01: 50:5b:d0:02:3e:35:79:1e:57:12:76:16:60:58:3e: 72:30:79:68:df:35:e6:d7:b3:57:cf:84:bf:8f:65: 44:1e:f2:4b:82:0e:9a:b1:f0:56:c7:fa:75:34:12: 74:79:a4:19:d5:53:c9:2c:10:85:33:a4:61:7a:8c: 64:9f:7c:89:7d:0b:8b:fb:49:68:b3:0d:db:a6:35: 9a:84:c7:ca:bb:48:54:d8:56:fc:0e:ba:fd:a0:2a: 50:63:6d:84:e6:57:f2:18:24:d4:bf:74:df:ec:c4: ba:1a:c2:05:0d:b2:5f:7f:8c:6a:fe:13:21:2c:15: 3d:98:ef:1f:12:59:fa:d6:f0:4f:1d:6a:a8:4e:3a: 21:48:dd:fa:e6:6d:09:10:dd:bf:97:9b:4f:1e:60: 1e:f5:d6:65:b8:ab:bc:67:17:eb:5a:26:81:c0:3d: 30:c7:e6:eb:10:1a:3e:40:6e:12:80:e2:4e:49:ae: 4b:15:5c:b3:45:69:d4:a1:fb:80:e0:d3:d9:13:a8: b7:17:f1:0b:e1:97:84:fb:f9:34:b3:b2:69:60:76: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:50:04:44:29:6E:45:8F:93:40:B0:63:42:B6:D8:3A:4E:64:57:DD X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/KFAERCluRY-TQLBjQrbYOk5kV90.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.43.128.0/17 Signature Algorithm: sha256WithRSAEncryption 41:62:d5:c5:03:8a:b5:6d:d3:a2:f3:83:c9:46:df:31:c3:20: 6d:00:81:61:0e:5e:4c:a7:07:d6:a7:31:2b:b4:5e:bf:d7:b5: 75:b9:8f:b2:9e:42:13:5d:96:75:5e:2c:61:26:38:78:6d:f9: a7:a0:04:de:29:ed:54:83:3b:fc:36:63:b2:1d:52:ad:fd:48: 52:33:0a:d9:89:ca:0b:c0:6f:5f:1b:60:6a:41:36:52:4e:25: 72:67:30:16:8e:55:e8:ea:38:4d:5f:cc:c1:f5:2a:3a:76:a4: e3:ff:87:ec:b6:76:39:fe:7b:e4:9d:6c:59:71:64:6e:17:2c: 9d:64:06:0a:66:1f:de:d0:b0:ca:2f:bd:72:2a:3b:9b:af:14: e2:1a:cf:c4:91:53:37:b3:c9:5f:7d:a1:9b:17:07:82:b8:10: 3a:7e:fa:ee:d0:80:5e:9b:f6:2c:c8:e1:37:bb:50:c0:da:7f: 2e:e1:4a:82:f4:ee:a1:62:42:dd:36:9c:f4:b9:60:2c:90:d4: e8:94:c6:1e:a3:2b:4f:90:b2:3f:63:8f:6c:ad:18:1c:ab:bd: e7:40:7b:b6:6a:09:00:f9:ea:d6:a9:8f:77:10:71:6a:dc:44: 87:aa:bf:cb:33:d2:b7:56:6a:31:95:e8:19:be:13:3d:23:f5: 9f:d5:dd:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNDA4MjYw NTE5MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI4NTAwNDQ0Mjk2RTQ1 OEY5MzQwQjA2MzQyQjZEODNBNEU2NDU3REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChLv6BEdyIvdhjHK+hXTJ2yw/mIR0WPo/6J0jdPlm+ZElcxlyv iDmSRzpBAVBb0AI+NXkeVxJ2FmBYPnIweWjfNebXs1fPhL+PZUQe8kuCDpqx8FbH +nU0EnR5pBnVU8ksEIUzpGF6jGSffIl9C4v7SWizDdumNZqEx8q7SFTYVvwOuv2g KlBjbYTmV/IYJNS/dN/sxLoawgUNsl9/jGr+EyEsFT2Y7x8SWfrW8E8daqhOOiFI 3frmbQkQ3b+Xm08eYB711mW4q7xnF+taJoHAPTDH5usQGj5AbhKA4k5JrksVXLNF adSh+4Dg09kTqLcX8Qvhl4T7+TSzsmlgdh9xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKFAERCluRY+TQLBjQrbYOk5kV90wHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0tGQUVSQ2x1UlktVFFMQmpR cmJZT2s1a1Y5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdz K4AwDQYJKoZIhvcNAQELBQADggEBAEFi1cUDirVt06Lzg8lG3zHDIG0AgWEOXkyn B9anMSu0Xr/XtXW5j7KeQhNdlnVeLGEmOHht+aegBN4p7VSDO/w2Y7IdUq39SFIz CtmJygvAb18bYGpBNlJOJXJnMBaOVejqOE1fzMH1Kjp2pOP/h+y2djn+e+SdbFlx ZG4XLJ1kBgpmH97QsMovvXIqO5uvFOIaz8SRUzezyV99oZsXB4K4EDp++u7QgF6b 9izI4Te7UMDafy7hSoL07qFiQt02nPS5YCyQ1OiUxh6jK0+Qsj9jj2ytGByrvedA e7ZqCQD56tapj3cQcWrcRIeqv8sz0rdWajGV6Bm+Ez0j9Z/V3VE= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:49 2024 by rpki-client on console-ams.rpki-client.org