$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/xwloUzXf_HHw60mpF_ms9dQexoM.roa File: xwloUzXf_HHw60mpF_ms9dQexoM.roa (raw, json) Hash identifier: 0tJY2t190BR924PQumDbjYQz0vOydW8pcpOm1AnV59s= Subject key identifier: C7:09:68:53:35:DF:FC:71:F0:EB:49:A9:17:F9:AC:F5:D4:1E:C6:83 Certificate issuer: /CN=2716EBB895BC844795A684C9673EA981145775CE Certificate serial: 03AF Authority key identifier: 27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/xwloUzXf_HHw60mpF_ms9dQexoM.roa Signing time: Thu 24 Oct 2024 08:57:37 +0000 ROA not before: Thu 24 Oct 2024 08:57:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 103.129.180.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 943 (0x3af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2716EBB895BC844795A684C9673EA981145775CE Validity Not Before: Oct 24 08:57:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C709685335DFFC71F0EB49A917F9ACF5D41EC683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:8f:9d:e9:ff:d0:1e:87:a7:7e:5d:38:a0: 4d:51:93:9d:5e:35:c3:36:97:49:f9:18:56:8d:05: 1d:da:94:73:9b:82:5b:41:94:83:0c:ba:e5:a1:4e: dd:88:1b:ee:10:04:96:6e:38:0c:4d:51:28:8d:ff: 22:d6:b7:0a:c2:67:ee:5f:32:56:2e:0f:5a:68:f9: 54:01:95:a4:f7:67:87:25:fe:29:f9:1c:c0:fa:a7: 32:de:fa:0e:b0:4b:ba:ff:31:76:4a:97:c3:cc:ca: de:a9:c2:72:f8:2e:94:88:81:ee:8b:10:e7:e5:c1: 4f:5e:0a:2c:e9:5f:8e:83:2a:80:76:f7:69:1c:85: 56:43:7a:c4:3d:ad:d7:82:41:a3:4a:b9:c6:a5:04: f6:94:81:23:2a:b4:1d:a5:48:23:d4:cc:c5:56:23: 16:04:7c:79:5b:5b:e4:60:05:11:2a:dd:f7:8b:1f: 8f:ac:2c:af:24:44:35:6a:8b:e4:9e:f5:04:de:a5: 4c:ee:31:ab:64:d5:9d:b4:00:1c:ef:fd:31:9d:56: 58:c7:3d:a8:31:dd:28:62:21:0b:c9:46:8a:5d:94: 2a:ed:17:a5:f8:e8:b8:92:92:97:16:94:8b:9f:bd: 3d:61:1e:56:e4:cf:dc:68:7d:f9:a0:de:f2:3a:26: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:09:68:53:35:DF:FC:71:F0:EB:49:A9:17:F9:AC:F5:D4:1E:C6:83 X509v3 Authority Key Identifier: keyid:27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/xwloUzXf_HHw60mpF_ms9dQexoM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.180.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:ef:03:f2:96:45:5c:03:54:b0:86:f5:ce:ff:70:86:1c:e9: 0b:fe:6c:57:f8:bb:81:20:5b:a3:03:c5:6a:a7:2d:b8:22:07: c5:18:db:cf:6a:20:ae:64:02:02:8c:eb:ad:f6:14:42:ab:36: 2f:27:9a:44:44:7d:53:64:70:bf:51:9a:1f:8f:8e:ef:ea:d3: 30:ea:a5:e9:b8:ca:52:8b:fc:08:e2:12:49:86:15:7b:37:36: 36:1b:5f:f0:19:39:ab:3d:45:dc:8a:cf:16:32:21:14:02:1b: 56:b0:68:08:9b:40:c3:63:af:d4:ce:05:fc:ca:91:c0:02:b9: a8:81:c8:5b:32:b3:45:bd:4c:3f:6e:88:de:43:c2:31:24:36: 3f:7e:f8:86:f9:5b:cb:9c:2b:f7:bd:5f:80:96:b7:b2:f4:2e: 61:c4:4e:d5:0a:46:81:df:81:fb:85:84:b5:a2:3a:6a:19:01: 32:f8:7f:6a:7a:69:db:df:9d:cf:20:a8:d4:0a:61:df:f4:22: a8:72:f9:01:44:59:76:3d:92:46:77:15:88:d1:1b:6b:08:77: a1:81:e0:5c:50:dc:7b:93:f3:71:9c:4e:19:5e:e0:ce:02:5e: 97:19:6e:34:eb:2e:4c:f3:c0:06:3d:be:c9:a7:8c:c6:ae:7b: 52:7c:30:74 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICA68wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjcx NkVCQjg5NUJDODQ0Nzk1QTY4NEM5NjczRUE5ODExNDU3NzVDRTAeFw0yNDEwMjQw ODU3MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3MDk2ODUzMzVERkZD NzFGMEVCNDlBOTE3RjlBQ0Y1RDQxRUM2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZc4+d6f/QHoenfl04oE1Rk51eNcM2l0n5GFaNBR3alHObgltB lIMMuuWhTt2IG+4QBJZuOAxNUSiN/yLWtwrCZ+5fMlYuD1po+VQBlaT3Z4cl/in5 HMD6pzLe+g6wS7r/MXZKl8PMyt6pwnL4LpSIge6LEOflwU9eCizpX46DKoB292kc hVZDesQ9rdeCQaNKucalBPaUgSMqtB2lSCPUzMVWIxYEfHlbW+RgBREq3feLH4+s LK8kRDVqi+Se9QTepUzuMatk1Z20ABzv/TGdVljHPagx3ShiIQvJRopdlCrtF6X4 6LiSkpcWlIufvT1hHlbkz9xoffmg3vI6Jr0dAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUxwloUzXf/HHw60mpF/ms9dQexoMwHwYDVR0jBBgwFoAUJxbruJW8hEeVpoTJ Zz6pgRRXdc4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1hUL0p4 YnJ1Slc4aEVlVnBvVEpaejZwZ1JSWGRjNC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev SnhicnVKVzhoRWVWcG9USlp6NnBnUlJYZGM0LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvQ1hUL3h3bG9VelhmX0hIdzYwbXBGX21zOWRR ZXhvTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJngbQwDQYJ KoZIhvcNAQELBQADggEBAI/vA/KWRVwDVLCG9c7/cIYc6Qv+bFf4u4EgW6MDxWqn LbgiB8UY289qIK5kAgKM6632FEKrNi8nmkREfVNkcL9Rmh+Pju/q0zDqpem4ylKL /AjiEkmGFXs3NjYbX/AZOas9RdyKzxYyIRQCG1awaAibQMNjr9TOBfzKkcACuaiB yFsys0W9TD9uiN5DwjEkNj9++Ib5W8ucK/e9X4CWt7L0LmHETtUKRoHfgfuFhLWi OmoZATL4f2p6advfnc8gqNQKYd/0Iqhy+QFEWXY9kkZ3FYjRG2sId6GB4FxQ3HuT 83GcThle4M4CXpcZbjTrLkzzwAY9vsmnjMaue1J8MHQ= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:24 2024 by rpki-client on console-fra.rpki-client.org