$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/PnVFnKvB44XVxC9IXYc9Vt6M8MA.roa File: PnVFnKvB44XVxC9IXYc9Vt6M8MA.roa (raw, json) Hash identifier: uv0tdEa+46RutlItfk6D1MQHlSpJOX3//6g+AcxrSys= Subject key identifier: 3E:75:45:9C:AB:C1:E3:85:D5:C4:2F:48:5D:87:3D:56:DE:8C:F0:C0 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0D15 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/PnVFnKvB44XVxC9IXYc9Vt6M8MA.roa Signing time: Mon 26 Aug 2024 05:19:33 +0000 ROA not before: Mon 26 Aug 2024 05:19:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9416 IP address blocks: 123.252.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 26 05:19:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3E75459CABC1E385D5C42F485D873D56DE8CF0C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:d6:c2:9f:da:f0:f4:ad:8a:eb:83:10:d8: 27:63:92:24:e7:d8:87:2b:da:13:e7:b2:b7:0c:32: 39:02:f8:0b:67:ff:1f:cb:42:dd:fe:1b:e6:80:a0: 43:5e:c8:e0:ad:04:f7:38:81:d0:d7:f6:bc:a5:53: 69:e0:36:9d:15:88:9e:ab:c3:fb:99:a1:1a:9e:61: 6e:70:ed:ef:5b:86:1b:eb:03:f8:0b:b3:a6:58:c1: 2a:89:70:e4:9f:44:74:cb:cc:9b:c2:dd:3a:a9:a3: 5c:fb:90:d9:16:a8:28:a9:51:76:e1:42:cb:b1:16: 73:57:eb:1c:06:d4:e4:5b:1b:a4:dc:81:af:59:f1: bd:0c:6d:14:33:08:8a:c3:f0:77:36:9e:55:b7:45: 76:c4:58:9f:10:62:e3:30:82:a6:62:46:67:4f:c4: 80:e4:8b:61:2d:8f:f9:38:bb:3f:13:92:ee:ac:8c: 3c:87:d4:81:7f:ec:ad:9f:0d:d4:09:63:9d:0f:0e: c9:77:e2:8b:df:42:18:18:2b:97:b1:97:c5:01:f5: fd:f6:55:77:ab:42:8d:79:be:18:61:64:ff:6f:ff: b7:59:e8:76:38:9d:57:91:14:fc:7f:20:f1:eb:ed: 0b:68:6e:74:f9:6c:9c:2d:92:b0:b5:ec:b5:6c:b2: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:75:45:9C:AB:C1:E3:85:D5:C4:2F:48:5D:87:3D:56:DE:8C:F0:C0 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/PnVFnKvB44XVxC9IXYc9Vt6M8MA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.252.64.0/18 Signature Algorithm: sha256WithRSAEncryption 5b:ba:24:d8:32:74:51:c6:b8:aa:00:31:00:1a:c4:1d:e3:61: 33:ae:50:ce:e5:9e:f9:c6:4f:c3:16:05:d6:15:d0:f8:f0:72: 85:21:af:4a:15:89:ed:96:a1:d0:20:51:0e:a0:3c:91:19:e3: ff:1c:72:7b:78:d8:b1:1b:bb:eb:3e:58:47:0d:14:74:37:b0: 20:3e:9c:8f:68:c0:43:65:a9:42:ad:f2:ac:9d:21:dc:96:69: 9e:b9:82:2e:01:88:da:5d:ca:36:72:28:d0:8a:31:3c:4d:4d: f8:fc:8d:54:58:82:ba:18:70:4a:0c:da:57:65:96:86:34:53: cc:17:3b:ba:ac:1b:6c:fe:01:61:c8:84:20:4e:e2:ea:35:dc: 79:3a:8f:f8:11:ec:d9:40:92:f1:4f:b3:37:86:2f:27:e5:fd: c5:a6:f6:d8:7d:e2:03:7e:bd:3b:e1:4c:c7:0d:9f:1d:81:4c: bc:a3:2f:46:be:f7:1c:24:c2:34:4a:ae:16:f6:72:fa:7d:a3: a6:9f:e3:e5:2a:8f:ae:89:8f:80:a0:12:00:44:85:03:3a:36: b0:f4:de:47:e6:01:a1:cd:7b:04:b1:cf:ad:15:94:22:85:62: 4f:83:be:8b:0f:23:93:68:a8:c2:31:d5:e2:fc:da:d6:1e:2e: df:8f:42:b5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNDA4MjYw NTE5MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFNzU0NTlDQUJDMUUz ODVENUM0MkY0ODVEODczRDU2REU4Q0YwQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC899bCn9rw9K2K64MQ2CdjkiTn2Icr2hPnsrcMMjkC+Atn/x/L Qt3+G+aAoENeyOCtBPc4gdDX9rylU2ngNp0ViJ6rw/uZoRqeYW5w7e9bhhvrA/gL s6ZYwSqJcOSfRHTLzJvC3Tqpo1z7kNkWqCipUXbhQsuxFnNX6xwG1ORbG6Tcga9Z 8b0MbRQzCIrD8Hc2nlW3RXbEWJ8QYuMwgqZiRmdPxIDki2Etj/k4uz8Tku6sjDyH 1IF/7K2fDdQJY50PDsl34ovfQhgYK5exl8UB9f32VXerQo15vhhhZP9v/7dZ6HY4 nVeRFPx/IPHr7QtobnT5bJwtkrC17LVsss0hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPnVFnKvB44XVxC9IXYc9Vt6M8MAwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL1BuVkZuS3ZCNDRYVnhDOUlY WWM5VnQ2TThNQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7 /EAwDQYJKoZIhvcNAQELBQADggEBAFu6JNgydFHGuKoAMQAaxB3jYTOuUM7lnvnG T8MWBdYV0PjwcoUhr0oVie2WodAgUQ6gPJEZ4/8ccnt42LEbu+s+WEcNFHQ3sCA+ nI9owENlqUKt8qydIdyWaZ65gi4BiNpdyjZyKNCKMTxNTfj8jVRYgroYcEoM2ldl loY0U8wXO7qsG2z+AWHIhCBO4uo13Hk6j/gR7NlAkvFPszeGLyfl/cWm9th94gN+ vTvhTMcNnx2BTLyjL0a+9xwkwjRKrhb2cvp9o6af4+Uqj66Jj4CgEgBEhQM6NrD0 3kfmAaHNewSxz60VlCKFYk+DvosPI5NoqMIx1eL82tYeLt+PQrU= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org