$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/KnNKMvT7aDFYsDhV29_wCq8wcaA.roa File: KnNKMvT7aDFYsDhV29_wCq8wcaA.roa (raw, json) Hash identifier: +3UPvXyltcZiy/Sj14vXpsFz918JFKcb2pIvyYHwVEM= Subject key identifier: 2A:73:4A:32:F4:FB:68:31:58:B0:38:55:DB:DF:F0:0A:AF:30:71:A0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FCB Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KnNKMvT7aDFYsDhV29_wCq8wcaA.roa Signing time: Mon 26 Aug 2024 05:15:46 +0000 ROA not before: Mon 26 Aug 2024 05:15:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 124.219.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4043 (0xfcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2A734A32F4FB683158B03855DBDFF00AAF3071A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:4b:53:72:ea:f2:32:d3:b6:ae:c5:85:e3: d6:9b:ea:a4:95:46:e1:1b:6d:64:f3:0a:5f:68:ec: 2d:56:7d:4c:d1:eb:82:ae:4a:2b:73:5e:c6:bb:a0: c2:fb:6e:90:a2:20:a3:95:87:2e:dc:56:f6:cd:39: ed:1e:8e:d6:fd:7c:87:5f:7d:d5:d0:1a:3e:73:39: 22:7b:57:b4:a6:3d:97:0b:f8:98:da:f7:33:4d:72: 06:a1:18:8d:ae:8d:4e:b0:0a:9a:f2:f2:52:7c:c0: 36:e6:da:64:00:a0:cb:74:23:89:06:f8:f3:ec:9e: 45:83:66:55:8b:d7:00:f8:66:af:ce:9b:b5:c9:ab: 34:3f:40:98:b0:e1:4e:d4:a8:f7:8d:94:45:ac:29: 4b:38:79:a2:7d:ca:2c:95:80:e1:1b:33:e9:de:c3: 0b:55:cd:d4:c1:29:ea:06:0b:c7:c7:a7:a1:91:b1: d9:0f:90:5f:d2:86:b7:54:5d:a1:be:24:d7:fa:e2: 7f:b7:b7:bd:80:ff:0b:3d:6e:28:5d:fa:e8:57:8b: 0e:de:e2:81:09:19:48:65:f7:e8:e7:71:78:8c:8e: 6f:5d:c8:6b:41:4e:a9:06:6b:39:58:5e:aa:50:6d: dc:31:76:0a:2d:ff:f3:3b:01:99:6d:c0:c5:a4:2e: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:73:4A:32:F4:FB:68:31:58:B0:38:55:DB:DF:F0:0A:AF:30:71:A0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KnNKMvT7aDFYsDhV29_wCq8wcaA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.219.0.0/17 Signature Algorithm: sha256WithRSAEncryption 77:12:6d:6d:41:15:6e:f2:2a:b1:dd:80:4c:60:3f:64:f6:40: e3:55:65:7b:77:9d:fd:af:04:29:e9:d8:e0:c2:e9:c3:4c:e8: 3c:05:8c:c7:a5:34:fc:f1:5b:b5:6f:a5:0f:75:1e:aa:f6:5e: 4c:3a:69:51:f3:a5:6f:44:17:0a:58:f2:da:ea:a8:06:76:6f: 9b:d9:a6:fa:9c:38:45:43:a9:6f:d0:0c:0e:25:c2:6a:a3:8f: ff:39:fc:20:0d:4a:c4:40:5d:be:8c:68:a8:7e:8f:20:a8:c0: b6:1e:fd:9d:71:8f:96:64:a4:ba:de:4d:9b:41:ef:c1:32:ff: d5:d1:11:bd:b2:0a:b5:c4:4d:9d:51:cd:0d:34:d1:24:8d:0b: a0:f3:5e:2e:8e:62:00:0f:d0:d7:1a:4c:8b:f7:fd:09:c8:42: 73:e9:4d:bd:c8:5e:ca:b5:ed:19:a3:93:c0:34:0f:e7:47:e4: 8d:8f:79:f7:a1:47:17:2f:e1:a9:8c:21:80:a7:64:fb:89:f4: 3f:65:2e:ae:bb:b9:37:3a:5f:2a:2f:c5:44:d5:00:ed:44:70: 30:53:bf:1a:fc:ed:a6:34:b3:b2:91:1c:1e:ba:83:ba:85:a7: d3:10:a4:be:84:f6:34:40:1a:43:89:c0:b9:9d:fe:1a:28:f3: e2:df:20:43 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBNzM0QTMyRjRGQjY4 MzE1OEIwMzg1NURCREZGMDBBQUYzMDcxQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKvUtTcuryMtO2rsWF49ab6qSVRuEbbWTzCl9o7C1WfUzR64Ku SitzXsa7oML7bpCiIKOVhy7cVvbNOe0ejtb9fIdffdXQGj5zOSJ7V7SmPZcL+Jja 9zNNcgahGI2ujU6wCpry8lJ8wDbm2mQAoMt0I4kG+PPsnkWDZlWL1wD4Zq/Om7XJ qzQ/QJiw4U7UqPeNlEWsKUs4eaJ9yiyVgOEbM+newwtVzdTBKeoGC8fHp6GRsdkP kF/ShrdUXaG+JNf64n+3t72A/ws9bihd+uhXiw7e4oEJGUhl9+jncXiMjm9dyGtB TqkGazlYXqpQbdwxdgot//M7AZltwMWkLplFAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUKnNKMvT7aDFYsDhV29/wCq8wcaAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0tuTktNdlQ3YURGWXNEaFYyOV93Q3E4 d2NhQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd82wAwDQYJ KoZIhvcNAQELBQADggEBAHcSbW1BFW7yKrHdgExgP2T2QONVZXt3nf2vBCnp2ODC 6cNM6DwFjMelNPzxW7VvpQ91Hqr2Xkw6aVHzpW9EFwpY8trqqAZ2b5vZpvqcOEVD qW/QDA4lwmqjj/85/CANSsRAXb6MaKh+jyCowLYe/Z1xj5ZkpLreTZtB78Ey/9XR Eb2yCrXETZ1RzQ000SSNC6DzXi6OYgAP0NcaTIv3/QnIQnPpTb3IXsq17Rmjk8A0 D+dH5I2PefehRxcv4amMIYCnZPuJ9D9lLq67uTc6XyovxUTVAO1EcDBTvxr87aY0 s7KRHB66g7qFp9MQpL6E9jRAGkOJwLmd/hoo8+LfIEM= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:07 2024 by rpki-client on console-fra.rpki-client.org