$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/KleKOOggvXvjWdQtNfa2dsjgcHA.roa File: KleKOOggvXvjWdQtNfa2dsjgcHA.roa (raw, json) Hash identifier: WUcQ210UmSnAHx7j7jrpmDc0rUDSMisua35mFePcGSE= Subject key identifier: 2A:57:8A:38:E8:20:BD:7B:E3:59:D4:2D:35:F6:B6:76:C8:E0:70:70 Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Certificate serial: 0120 Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/KleKOOggvXvjWdQtNfa2dsjgcHA.roa Signing time: Wed 09 Oct 2024 00:08:28 +0000 ROA not before: Wed 09 Oct 2024 00:08:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 2914 IP address blocks: 202.160.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Validity Not Before: Oct 9 00:08:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2A578A38E820BD7BE359D42D35F6B676C8E07070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:bc:63:23:5e:8b:ae:d7:2b:24:0a:e0:02: 18:cb:f2:96:db:e7:a7:e8:19:b1:a2:ce:39:a3:0f: ae:bb:f1:cb:14:91:6a:be:19:8b:a8:85:43:04:42: d5:f9:61:b3:02:d3:65:06:94:4e:1c:4d:3b:a8:dd: c3:48:e3:32:97:91:fe:46:1a:db:9a:72:99:11:86: a5:92:02:a3:52:78:a3:4d:91:bc:88:f4:d1:3d:37: 52:56:6c:2b:c5:62:89:10:cc:0e:9d:a3:ca:84:b7: 59:8a:95:e0:e7:47:45:2e:dd:0e:a4:0a:33:5a:df: 45:2c:d4:e1:6c:1b:40:68:48:26:66:4d:74:10:c2: 1a:86:89:80:3a:74:ac:96:8b:f0:5c:20:7f:9d:88: 07:1b:d6:b7:0a:88:d1:5a:75:2c:15:f1:3f:42:f2: 74:57:6a:12:cc:09:e7:50:63:d6:85:ef:ba:c8:58: b6:bc:af:73:81:7a:fb:d6:98:f0:bc:46:c6:a5:74: dc:7c:75:17:c2:26:de:eb:4f:8e:8f:75:14:46:cf: 01:bf:b6:58:9f:54:1e:38:12:06:f0:c5:4c:a9:b6: 29:aa:64:0d:42:7e:d5:6e:3a:3b:60:1e:4e:fb:4c: df:cd:80:8c:2a:6d:89:7e:e0:fe:d0:20:9b:cd:ab: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:57:8A:38:E8:20:BD:7B:E3:59:D4:2D:35:F6:B6:76:C8:E0:70:70 X509v3 Authority Key Identifier: keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/KleKOOggvXvjWdQtNfa2dsjgcHA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.72.0/21 Signature Algorithm: sha256WithRSAEncryption 12:93:2d:79:16:79:ea:60:68:b9:35:19:d9:7c:c6:ce:71:e7: a9:02:c3:bd:8f:9e:ed:2d:65:3c:62:0a:0d:42:96:7d:d1:8e: 8d:0d:a5:b2:9c:ba:d8:b4:f1:da:72:13:44:78:bd:ea:fc:d6: a8:a5:de:02:28:52:91:a0:9e:87:bb:58:32:db:17:b8:54:90: d5:9c:4c:2a:b6:fb:ed:87:44:4a:14:b1:5f:d3:a7:fe:12:48: 8b:63:d6:11:3c:84:d2:d1:ad:31:93:95:dd:73:1b:89:52:48: d4:05:36:e6:40:a6:15:b4:36:42:0e:52:27:fb:4e:31:a7:5b: e4:3e:6b:1a:f3:67:11:53:5d:38:8e:8b:44:95:d7:96:da:a5: b1:b6:ff:37:4f:65:7c:cf:6c:6b:7e:3e:19:51:20:8a:66:b3: 26:5a:ba:36:fa:11:7d:70:b6:de:72:48:73:a3:db:a9:f8:28: d7:b4:40:43:bc:c0:85:de:4a:2b:79:42:db:0c:87:59:97:86: 89:0a:39:6d:87:a6:e1:a8:2e:bb:c1:32:b5:7e:c7:91:f2:da: e6:d6:2e:80:f3:aa:16:5b:0d:b1:6f:a4:3d:39:3f:00:31:20: 59:fe:c0:74:5f:63:21:85:ef:fb:14:fb:dd:9e:04:cc:68:89: 86:cb:fa:81 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNDEwMDkw MDA4MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBNTc4QTM4RTgyMEJE N0JFMzU5RDQyRDM1RjZCNjc2QzhFMDcwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCovrxjI16LrtcrJArgAhjL8pbb56foGbGizjmjD6678csUkWq+ GYuohUMEQtX5YbMC02UGlE4cTTuo3cNI4zKXkf5GGtuacpkRhqWSAqNSeKNNkbyI 9NE9N1JWbCvFYokQzA6do8qEt1mKleDnR0Uu3Q6kCjNa30Us1OFsG0BoSCZmTXQQ whqGiYA6dKyWi/BcIH+diAcb1rcKiNFadSwV8T9C8nRXahLMCedQY9aF77rIWLa8 r3OBevvWmPC8RsaldNx8dRfCJt7rT46PdRRGzwG/tlifVB44EgbwxUyptimqZA1C ftVuOjtgHk77TN/NgIwqbYl+4P7QIJvNq/9fAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUKleKOOggvXvjWdQtNfa2dsjgcHAwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9 HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL0tsZUtPT2dndlh2 aldkUXROZmEyZHNqZ2NIQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPKoEgwDQYJKoZIhvcNAQELBQADggEBABKTLXkWeepgaLk1Gdl8xs5x56kC w72Pnu0tZTxiCg1Cln3Rjo0NpbKcuti08dpyE0R4ver81qil3gIoUpGgnoe7WDLb F7hUkNWcTCq2++2HREoUsV/Tp/4SSItj1hE8hNLRrTGTld1zG4lSSNQFNuZAphW0 NkIOUif7TjGnW+Q+axrzZxFTXTiOi0SV15bapbG2/zdPZXzPbGt+PhlRIIpmsyZa ujb6EX1wtt5ySHOj26n4KNe0QEO8wIXeSit5QtsMh1mXhokKOW2HpuGoLrvBMrV+ x5Hy2ubWLoDzqhZbDbFvpD05PwAxIFn+wHRfYyGF7/sU+92eBMxoiYbL+oE= -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:18 2024 by rpki-client on console-ams.rpki-client.org