$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/xgJ2Jda2crsFpBdCTswkDQNbNe4.roa File: xgJ2Jda2crsFpBdCTswkDQNbNe4.roa (raw, json) Hash identifier: X1xTXCICAo/Gh3sMYn3OjJ7+LIEOJHLD3Vrdf+r8cwc= Subject key identifier: C6:02:76:25:D6:B6:72:BB:05:A4:17:42:4E:CC:24:0D:03:5B:35:EE Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0D1C Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/xgJ2Jda2crsFpBdCTswkDQNbNe4.roa Signing time: Mon 26 Aug 2024 05:19:35 +0000 ROA not before: Mon 26 Aug 2024 05:19:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 122.99.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 26 05:19:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C6027625D6B672BB05A417424ECC240D035B35EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:f1:3c:ed:92:65:c8:81:5e:c4:3c:ed:e1: 4b:bd:1a:4d:62:32:8d:a1:f4:1e:52:03:67:b3:95: 99:8a:d3:8d:04:1d:aa:9c:2b:73:43:28:d4:75:9c: eb:cd:76:c6:13:be:34:9c:b6:87:4e:95:5f:30:eb: 67:f8:94:35:69:47:39:8c:75:4c:2f:37:12:f8:ff: a7:34:02:b5:70:e8:7e:f7:ac:06:20:00:ec:2e:ce: ba:b8:ed:2c:07:d8:c1:f9:58:5a:21:cb:06:8e:32: d5:54:95:49:6a:38:1e:f9:77:83:ab:44:74:37:59: 15:34:d3:9d:8f:43:7e:55:7e:b9:50:2d:31:02:1c: 2f:ea:b3:f5:3e:e5:b4:ae:66:da:2e:f9:79:4e:d6: cb:6b:29:af:bf:e3:e5:da:01:56:c3:83:85:cb:18: 1b:33:9b:d7:c5:19:39:25:18:ca:7c:4a:6e:9d:4b: 94:23:2b:4c:76:d7:e0:96:04:ce:64:7f:4e:12:56: 06:d1:f8:95:58:51:5f:7c:b5:ad:1f:05:1e:7c:3f: e4:cf:21:e2:4f:8c:4e:42:71:36:44:17:96:3f:8f: 58:ca:c7:a8:da:9c:ee:a6:39:26:93:81:b6:98:9f: 90:b5:06:5e:b9:d9:72:a1:47:5c:9a:d6:07:ba:dd: 1b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:02:76:25:D6:B6:72:BB:05:A4:17:42:4E:CC:24:0D:03:5B:35:EE X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/xgJ2Jda2crsFpBdCTswkDQNbNe4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.99.0.0/18 Signature Algorithm: sha256WithRSAEncryption 6a:91:ba:8a:38:de:7c:df:9a:85:c8:05:51:e1:ca:7b:7f:5a: ec:5b:4b:77:82:c5:d4:57:be:59:40:6b:10:fd:a9:fc:ac:e1: 1e:17:ae:10:f3:6b:b6:9a:32:e0:ed:b3:e4:ea:db:44:0d:d8: 8d:b0:11:53:1b:59:5c:89:a2:53:99:cd:6a:8b:11:ee:2d:3f: b2:bd:ca:da:c5:b4:37:71:69:58:35:09:bd:28:94:53:e9:c9: e5:84:92:a9:14:8d:aa:fa:5c:3e:7d:2c:d4:49:de:bb:eb:ea: f6:d4:ee:bb:ea:a1:82:32:42:d8:db:41:eb:18:b9:f5:1d:07: fe:c9:44:ec:a3:40:1b:92:8e:4d:e6:ed:01:9e:e2:54:81:e4: 97:8b:60:0b:62:e2:80:4c:75:3b:ca:c2:79:28:f7:c7:d3:dd: 1a:a4:39:c4:73:3c:7b:c5:c7:89:d1:32:1c:97:95:ea:cc:ca: 8f:a5:ea:5c:5c:8f:d7:bd:3e:86:c1:92:85:8e:63:c2:62:c8: 78:22:3f:54:29:d9:ef:48:ab:8a:95:22:a1:a1:ef:fe:f0:28: 4a:c6:16:6b:c8:33:3f:31:9c:62:71:a8:5b:76:7f:de:e9:ce: 4c:03:c0:55:67:48:87:df:77:40:0f:6e:4e:f7:4e:38:f3:a0: 8b:ee:46:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNDA4MjYw NTE5MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM2MDI3NjI1RDZCNjcy QkIwNUE0MTc0MjRFQ0MyNDBEMDM1QjM1RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8fPE87ZJlyIFexDzt4Uu9Gk1iMo2h9B5SA2ezlZmK040EHaqc K3NDKNR1nOvNdsYTvjSctodOlV8w62f4lDVpRzmMdUwvNxL4/6c0ArVw6H73rAYg AOwuzrq47SwH2MH5WFohywaOMtVUlUlqOB75d4OrRHQ3WRU0052PQ35VfrlQLTEC HC/qs/U+5bSuZtou+XlO1strKa+/4+XaAVbDg4XLGBszm9fFGTklGMp8Sm6dS5Qj K0x21+CWBM5kf04SVgbR+JVYUV98ta0fBR58P+TPIeJPjE5CcTZEF5Y/j1jKx6ja nO6mOSaTgbaYn5C1Bl652XKhR1ya1ge63Rt7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxgJ2Jda2crsFpBdCTswkDQNbNe4wHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL3hnSjJKZGEyY3JzRnBCZENU c3drRFFOYk5lNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 YwAwDQYJKoZIhvcNAQELBQADggEBAGqRuoo43nzfmoXIBVHhynt/WuxbS3eCxdRX vllAaxD9qfys4R4XrhDza7aaMuDts+Tq20QN2I2wEVMbWVyJolOZzWqLEe4tP7K9 ytrFtDdxaVg1Cb0olFPpyeWEkqkUjar6XD59LNRJ3rvr6vbU7rvqoYIyQtjbQesY ufUdB/7JROyjQBuSjk3m7QGe4lSB5JeLYAti4oBMdTvKwnko98fT3RqkOcRzPHvF x4nRMhyXlerMyo+l6lxcj9e9PobBkoWOY8JiyHgiP1Qp2e9Iq4qVIqGh7/7wKErG FmvIMz8xnGJxqFt2f97pzkwDwFVnSIffd0APbk73TjjzoIvuRlY= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:49 2024 by rpki-client on console-ams.rpki-client.org