$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Q-0By00uwyDA2lIYVxr28p1HoUQ.roa File: Q-0By00uwyDA2lIYVxr28p1HoUQ.roa (raw, json) Hash identifier: 0bBr7wY6sbYxZYuBNwDonQBB0DToHa7Qvl8tI6mC0VE= Subject key identifier: 43:ED:01:CB:4D:2E:C3:20:C0:DA:52:18:57:1A:F6:F2:9D:47:A1:44 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0D12 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Q-0By00uwyDA2lIYVxr28p1HoUQ.roa Signing time: Mon 26 Aug 2024 05:19:32 +0000 ROA not before: Mon 26 Aug 2024 05:19:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 119.14.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 26 05:19:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=43ED01CB4D2EC320C0DA5218571AF6F29D47A144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:44:29:8c:42:09:f0:e5:71:a8:8e:cf:42: 22:d3:41:0f:2a:82:e7:f5:8d:4e:dc:57:0f:c9:3a: d1:16:a7:30:02:2c:02:03:e5:60:52:b5:62:3e:4c: 4f:06:e0:47:5a:c2:98:2f:5f:1e:dd:88:a3:2f:21: 03:8b:2f:64:41:6c:1d:bb:2a:49:44:c0:07:58:a9: bc:02:56:a5:d4:9b:74:e3:4d:ef:c6:df:57:bf:29: 49:6c:35:da:05:04:43:e9:d8:45:d0:8b:c1:fc:23: b4:64:84:dd:9f:09:ee:39:bb:21:6f:cf:20:bd:ce: 2c:b3:a1:a0:88:04:32:61:c7:87:6d:6c:1c:b9:88: 44:90:5e:4d:be:f9:04:cf:90:59:f6:dd:7c:08:b2: ac:ad:5a:67:e6:46:87:35:5a:f6:eb:a0:3f:78:75: 47:0b:3b:dc:a2:e5:8b:62:ce:ab:fc:a0:ee:9c:c5: af:93:74:ca:68:d7:64:e7:02:13:ae:9e:60:89:c2: 96:69:26:87:58:84:55:20:aa:8f:bb:f3:a8:4e:f9: 9f:fe:a6:8c:4c:b2:57:c5:42:d2:aa:c0:40:91:28: 3c:50:74:c1:be:cc:46:22:37:8f:32:6c:17:f0:42: f6:b2:6d:4d:ac:9a:15:90:c0:ad:f7:db:08:32:c7: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:ED:01:CB:4D:2E:C3:20:C0:DA:52:18:57:1A:F6:F2:9D:47:A1:44 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Q-0By00uwyDA2lIYVxr28p1HoUQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.14.128.0/17 Signature Algorithm: sha256WithRSAEncryption 17:b9:a7:a3:f6:7c:10:ab:9f:3c:08:02:2f:46:14:fb:0a:a3: 5f:bf:97:e1:39:a7:22:f9:e2:67:bb:87:85:f3:b8:bb:e6:2d: 3b:a6:77:f5:71:8f:f0:85:cd:67:59:58:49:dd:58:1a:98:28: b6:b1:db:04:b2:e9:91:fa:a0:72:42:d8:5c:5d:9a:7d:39:61: f2:10:1f:ba:41:19:44:3c:88:73:0b:53:e4:1e:b3:e3:07:11: 38:b4:a7:0f:f2:24:e6:20:6e:b2:e4:f7:e4:55:d5:9e:61:6a: 47:20:52:82:f7:5c:a5:e2:d1:d3:16:ba:8b:97:17:8c:65:2e: 0a:14:f9:ae:5f:ee:13:1b:dc:80:24:b1:99:a7:7a:2f:7a:7b: 6e:78:23:2d:bf:8e:66:2f:52:af:fc:cb:d2:d8:af:f4:91:e4: b5:0b:a0:5f:27:c1:40:20:bf:60:af:c9:56:df:9e:c5:41:8f: 72:56:6d:59:2e:c2:ac:d5:58:ff:cc:e0:35:76:aa:c9:74:d0: bc:7e:fa:b3:f1:62:f7:37:1c:d4:95:36:b9:7f:e9:13:89:9f: 63:7c:53:22:88:cb:43:5a:07:66:00:4b:02:c8:f0:8c:73:fd: 7f:61:3b:74:3d:c9:d0:85:4e:a8:4f:df:f9:7e:7d:1f:ef:71: 4c:d9:55:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNDA4MjYw NTE5MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQzRUQwMUNCNEQyRUMz MjBDMERBNTIxODU3MUFGNkYyOUQ0N0ExNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+AUQpjEIJ8OVxqI7PQiLTQQ8qguf1jU7cVw/JOtEWpzACLAID 5WBStWI+TE8G4EdawpgvXx7diKMvIQOLL2RBbB27KklEwAdYqbwCVqXUm3TjTe/G 31e/KUlsNdoFBEPp2EXQi8H8I7RkhN2fCe45uyFvzyC9ziyzoaCIBDJhx4dtbBy5 iESQXk2++QTPkFn23XwIsqytWmfmRoc1WvbroD94dUcLO9yi5Ytizqv8oO6cxa+T dMpo12TnAhOunmCJwpZpJodYhFUgqo+786hO+Z/+poxMslfFQtKqwECRKDxQdMG+ zEYiN48ybBfwQvaybU2smhWQwK332wgyx0OxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQ+0By00uwyDA2lIYVxr28p1HoUQwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL1EtMEJ5MDB1d3lEQTJsSVlW eHIyOHAxSG9VUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 DoAwDQYJKoZIhvcNAQELBQADggEBABe5p6P2fBCrnzwIAi9GFPsKo1+/l+E5pyL5 4me7h4XzuLvmLTumd/Vxj/CFzWdZWEndWBqYKLax2wSy6ZH6oHJC2Fxdmn05YfIQ H7pBGUQ8iHMLU+Qes+MHETi0pw/yJOYgbrLk9+RV1Z5hakcgUoL3XKXi0dMWuouX F4xlLgoU+a5f7hMb3IAksZmnei96e254Iy2/jmYvUq/8y9LYr/SR5LULoF8nwUAg v2CvyVbfnsVBj3JWbVkuwqzVWP/M4DV2qsl00Lx++rPxYvc3HNSVNrl/6ROJn2N8 UyKIy0NaB2YASwLI8Ixz/X9hO3Q9ydCFTqhP3/l+fR/vcUzZVWA= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:49 2024 by rpki-client on console-ams.rpki-client.org