$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/dQxMuqH9RYf9-rIxbczPTS-89v8.roa File: dQxMuqH9RYf9-rIxbczPTS-89v8.roa (raw, json) Hash identifier: 1l1wdPSZQaOgbh4Y0nVZ6Syv8GR4ranTelDbCh8VGvo= Subject key identifier: 75:0C:4C:BA:A1:FD:45:87:FD:FA:B2:31:6D:CC:CF:4D:2F:BC:F6:FF Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0D26 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/dQxMuqH9RYf9-rIxbczPTS-89v8.roa Signing time: Mon 26 Aug 2024 05:19:36 +0000 ROA not before: Mon 26 Aug 2024 05:19:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 119.14.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3366 (0xd26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 26 05:19:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=750C4CBAA1FD4587FDFAB2316DCCCF4D2FBCF6FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:c2:92:a9:5c:b7:9b:b9:cc:93:25:2a:b5: 10:b0:9f:a8:a5:2c:5a:7c:90:cd:37:26:bd:83:05: 5b:23:5d:12:52:4b:44:f4:6c:a2:bf:d6:0e:83:77: 1d:d8:4c:0b:9b:e9:1b:a0:65:c5:c0:87:47:9b:f5: ff:a7:9e:70:dc:ac:19:77:e8:3b:36:74:80:a2:42: ff:38:a0:84:bd:6b:3f:06:4c:63:2e:11:d6:4e:b6: 7c:3d:8d:17:da:6d:19:3b:3d:e6:62:de:e9:1b:55: 8e:32:3a:5a:34:49:49:38:a3:ca:5c:44:4b:40:ed: 8b:fd:b9:fe:d1:71:8d:e5:8f:8a:67:c7:03:18:80: bb:6a:fa:7c:00:df:14:b2:b9:93:16:12:79:83:c0: 39:50:2f:3f:f5:54:66:2c:72:c5:08:da:c6:52:2b: af:81:6b:44:48:de:1a:72:84:6d:07:58:86:58:61: 41:09:e8:65:bd:e5:26:33:66:8a:a1:1b:4b:cb:5c: 38:83:bd:36:5a:a7:e3:d3:43:25:ee:f2:40:86:76: 70:54:67:26:43:fb:ba:99:3d:d9:8b:28:85:14:16: fc:b7:2c:8c:91:e3:eb:e8:39:05:d5:ae:d3:6f:ef: aa:a6:e6:c6:07:8f:01:5c:6b:5c:34:0a:04:e3:92: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0C:4C:BA:A1:FD:45:87:FD:FA:B2:31:6D:CC:CF:4D:2F:BC:F6:FF X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/dQxMuqH9RYf9-rIxbczPTS-89v8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.14.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:a7:5b:bb:c8:c9:8b:02:db:3c:c8:6f:74:61:9c:cb:dd:0e: 0e:aa:14:8c:74:a9:b8:9f:79:54:b5:cd:94:44:c2:be:57:d3: 21:c0:54:5e:ef:8f:bc:01:2d:f6:bc:2f:8d:ce:68:15:83:81: 61:22:f6:d4:93:4a:a1:dd:8c:c2:d9:ea:66:50:3f:ad:7f:e0: ec:5e:aa:d1:67:ee:17:cf:fa:a7:34:7a:db:89:fb:b5:a5:cd: b8:aa:8b:33:d2:7b:50:8c:25:39:03:bc:bf:5d:58:21:b6:41: 4a:90:f1:01:a9:93:2e:7b:88:a3:67:fe:cf:09:42:17:08:ca: 00:19:5f:e3:dc:14:1d:38:5c:20:04:80:0f:d2:61:44:e1:11: 87:fa:ec:56:48:bf:64:99:c7:56:4e:30:cb:c7:fe:0d:4d:72: 3f:ae:93:9f:44:e9:a8:3f:cd:9d:e1:7a:79:bf:cb:a4:22:24: b0:70:c8:65:04:a2:3f:a6:62:16:df:f7:57:06:2e:aa:ad:10: 85:2d:77:e4:1f:1e:0e:38:ab:bb:bc:ff:ac:4a:4d:52:07:55: bb:ba:30:59:2d:76:2b:da:1c:7f:23:f9:b1:a5:3a:05:c8:5e: 00:a7:4b:7f:01:57:6d:57:dd:54:84:a9:ce:b6:1d:8d:f2:ce: 77:c9:98:ef -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNDA4MjYw NTE5MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc1MEM0Q0JBQTFGRDQ1 ODdGREZBQjIzMTZEQ0NDRjREMkZCQ0Y2RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDExMKSqVy3m7nMkyUqtRCwn6ilLFp8kM03Jr2DBVsjXRJSS0T0 bKK/1g6Ddx3YTAub6RugZcXAh0eb9f+nnnDcrBl36Ds2dICiQv84oIS9az8GTGMu EdZOtnw9jRfabRk7PeZi3ukbVY4yOlo0SUk4o8pcREtA7Yv9uf7RcY3lj4pnxwMY gLtq+nwA3xSyuZMWEnmDwDlQLz/1VGYscsUI2sZSK6+Ba0RI3hpyhG0HWIZYYUEJ 6GW95SYzZoqhG0vLXDiDvTZap+PTQyXu8kCGdnBUZyZD+7qZPdmLKIUUFvy3LIyR 4+voOQXVrtNv76qm5sYHjwFca1w0CgTjkt+LAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUdQxMuqH9RYf9+rIxbczPTS+89v8wHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL2RReE11cUg5UllmOS1ySXhi Y3pQVFMtODl2OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB3 DjANBgkqhkiG9w0BAQsFAAOCAQEARadbu8jJiwLbPMhvdGGcy90ODqoUjHSpuJ95 VLXNlETCvlfTIcBUXu+PvAEt9rwvjc5oFYOBYSL21JNKod2MwtnqZlA/rX/g7F6q 0WfuF8/6pzR624n7taXNuKqLM9J7UIwlOQO8v11YIbZBSpDxAamTLnuIo2f+zwlC FwjKABlf49wUHThcIASAD9JhROERh/rsVki/ZJnHVk4wy8f+DU1yP66Tn0TpqD/N neF6eb/LpCIksHDIZQSiP6ZiFt/3VwYuqq0QhS135B8eDjiru7z/rEpNUgdVu7ow WS12K9ocfyP5saU6BcheAKdLfwFXbVfdVISpzrYdjfLOd8mY7w== -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:49 2024 by rpki-client on console-ams.rpki-client.org