$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Kmi90O9Ps0jgHCnrW4RYP3l2-fo.roa File: Kmi90O9Ps0jgHCnrW4RYP3l2-fo.roa (raw, json) Hash identifier: /mo4hS1dPk28uMzPgr/BjD9O83kF1qRF7X0yBp2NA5E= Subject key identifier: 2A:68:BD:D0:EF:4F:B3:48:E0:1C:29:EB:5B:84:58:3F:79:76:F9:FA Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FFF Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Kmi90O9Ps0jgHCnrW4RYP3l2-fo.roa Signing time: Mon 26 Aug 2024 05:15:57 +0000 ROA not before: Mon 26 Aug 2024 05:15:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.58.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4095 (0xfff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:57 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2A68BDD0EF4FB348E01C29EB5B84583F7976F9FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:2b:79:2e:49:5f:4b:b5:05:a4:6c:bf:2b: f0:97:81:0e:89:16:d7:a3:fc:7f:c5:25:3f:51:d2: f0:c2:f3:70:eb:9b:e4:70:e3:f7:d1:5f:d0:57:14: b4:af:21:df:ea:70:c6:ce:9c:5b:5a:b8:5b:59:86: 95:34:f8:7a:bf:1c:60:e5:0e:64:16:fc:56:59:a3: 16:36:60:da:77:96:d5:e5:58:cc:34:c0:77:95:fc: 87:6b:c8:80:39:ec:17:18:b6:ef:23:41:e9:fa:bc: c5:d5:1d:a6:ab:9e:b1:58:51:f0:e1:cd:5e:21:a1: 69:53:a6:42:02:17:59:98:ff:4a:67:40:c4:0a:b6: 7e:97:db:df:90:8c:b6:4f:51:1e:f6:a0:a9:f6:2a: 8c:66:8a:9b:f6:89:c2:69:c8:c4:5e:5d:63:92:b3: 25:56:ce:5a:db:f2:50:8d:8c:d3:a3:22:e2:48:c1: a3:f2:cd:07:0e:b8:e3:79:18:e9:d2:8a:24:98:b4: 4d:db:f3:ca:06:11:99:83:e7:bd:45:64:f2:bd:40: da:0f:be:01:82:6f:8d:e6:df:0b:8e:ae:0a:d4:74: 64:0e:ed:7b:60:35:ad:c7:37:96:49:8a:e1:33:9b: 3e:43:36:88:65:c8:89:12:e3:29:5d:7e:18:a8:57: 3b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:68:BD:D0:EF:4F:B3:48:E0:1C:29:EB:5B:84:58:3F:79:76:F9:FA X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Kmi90O9Ps0jgHCnrW4RYP3l2-fo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.104.0/22 Signature Algorithm: sha256WithRSAEncryption 82:fb:23:ec:a5:3b:84:23:36:81:1c:04:15:b0:25:6e:dd:dc: 9e:98:fc:91:2a:6c:24:67:ed:eb:60:09:35:34:e7:c9:e2:42: cd:55:9a:3e:ec:98:65:67:71:34:82:31:95:87:f5:8e:a5:a9: af:11:86:d6:66:3d:dc:2f:eb:cf:7e:b1:b0:50:ae:e1:d1:58: 8e:cc:1b:a3:cd:cd:cc:bf:4d:b7:17:37:eb:41:31:0c:ea:a9: ad:eb:5b:48:72:9b:39:9f:7f:b3:01:72:14:47:9b:3c:e7:ac: 70:46:f4:c6:e3:d8:f2:c5:c9:8e:eb:9a:6d:57:00:33:e4:d8: 0f:f8:8c:20:53:9d:b9:c5:ca:c0:41:e4:fc:59:5d:fc:f7:e7: 18:f4:52:fa:ae:a9:0e:6e:e7:61:8b:67:48:6f:0d:d7:81:93: 06:85:c2:8b:6b:04:ec:4a:d9:94:3e:71:c4:e0:93:c8:ff:b4: ab:17:9f:3d:15:b4:87:ed:ba:6e:5b:b3:b6:b7:38:6d:f7:a8: 29:91:1e:e3:a4:28:ab:74:1a:65:04:a4:d5:63:8a:6c:b9:86: a8:4e:a1:80:44:df:b2:18:dd:af:13:24:23:a2:61:8c:1f:e1: b6:50:07:36:19:65:cc:0e:66:23:51:ec:f2:fc:a3:d3:05:71: 77:0f:60:9b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBNjhCREQwRUY0RkIz NDhFMDFDMjlFQjVCODQ1ODNGNzk3NkY5RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDryt5LklfS7UFpGy/K/CXgQ6JFtej/H/FJT9R0vDC83Drm+Rw 4/fRX9BXFLSvId/qcMbOnFtauFtZhpU0+Hq/HGDlDmQW/FZZoxY2YNp3ltXlWMw0 wHeV/IdryIA57BcYtu8jQen6vMXVHaarnrFYUfDhzV4hoWlTpkICF1mY/0pnQMQK tn6X29+QjLZPUR72oKn2Koxmipv2icJpyMReXWOSsyVWzlrb8lCNjNOjIuJIwaPy zQcOuON5GOnSiiSYtE3b88oGEZmD571FZPK9QNoPvgGCb43m3wuOrgrUdGQO7Xtg Na3HN5ZJiuEzmz5DNohlyIkS4yldfhioVzuzAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUKmi90O9Ps0jgHCnrW4RYP3l2+fowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0ttaTkwTzlQczBqZ0hDbnJXNFJZUDNs Mi1mby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSOmgwDQYJ KoZIhvcNAQELBQADggEBAIL7I+ylO4QjNoEcBBWwJW7d3J6Y/JEqbCRn7etgCTU0 58niQs1Vmj7smGVncTSCMZWH9Y6lqa8RhtZmPdwv689+sbBQruHRWI7MG6PNzcy/ TbcXN+tBMQzqqa3rW0hymzmff7MBchRHmzznrHBG9Mbj2PLFyY7rmm1XADPk2A/4 jCBTnbnFysBB5PxZXfz35xj0UvquqQ5u52GLZ0hvDdeBkwaFwotrBOxK2ZQ+ccTg k8j/tKsXnz0VtIftum5bs7a3OG33qCmRHuOkKKt0GmUEpNVjimy5hqhOoYBE37IY 3a8TJCOiYYwf4bZQBzYZZcwOZiNR7PL8o9MFcXcPYJs= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org