$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKCO/Smz-jbzcv8paCDl6uS5lflIxgzk.roa File: Smz-jbzcv8paCDl6uS5lflIxgzk.roa (raw, json) Hash identifier: DjelCYLn/q5cO3IWWd1vmM/tiZWgJMvfnI5vcr+glHQ= Subject key identifier: 4A:6C:FE:8D:BC:DC:BF:CA:5A:08:39:7A:B9:2E:65:7E:52:31:83:39 Certificate issuer: /CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1 Certificate serial: 0FAC Authority key identifier: 82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/Smz-jbzcv8paCDl6uS5lflIxgzk.roa Signing time: Mon 26 Aug 2024 05:19:54 +0000 ROA not before: Mon 26 Aug 2024 05:19:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131645 IP address blocks: 2404:63c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4012 (0xfac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1 Validity Not Before: Aug 26 05:19:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4A6CFE8DBCDCBFCA5A08397AB92E657E52318339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:c1:fc:3c:00:94:83:62:8e:6f:05:aa:1b: 91:63:7c:47:0c:df:2f:55:2a:5f:e6:87:77:81:33: 6d:d0:21:3c:13:99:2e:57:ba:96:9b:cc:59:b5:01: e2:3e:88:56:93:ed:ae:0c:09:ba:51:4a:75:51:40: 23:01:e9:19:e7:d6:62:e1:19:4e:58:5f:67:9a:e0: 99:58:8b:b3:9d:af:67:86:4c:c6:bb:fa:da:ce:78: 05:d0:c7:f6:59:4e:14:e3:3d:d7:08:a3:f6:75:44: 9d:2a:b8:ac:08:a7:43:25:bf:48:28:6c:1a:7e:72: 7d:00:89:90:dd:06:95:43:b3:4f:0d:82:23:52:cd: 5f:0b:b6:24:5e:d3:41:fa:42:1d:a8:4e:0e:aa:88: c8:bd:28:4b:1b:45:b2:7b:50:57:e3:bc:b7:23:de: e0:e5:14:4b:81:df:90:25:2f:fc:1a:dc:96:86:0c: 77:8c:57:f4:17:44:1d:5a:d9:5b:19:61:85:d4:45: c3:12:b9:ed:79:4c:82:72:8a:2f:99:fd:81:7f:9b: db:b7:f7:0e:66:36:d7:b6:d5:ca:9e:38:fd:03:b7: 40:b2:9c:53:ab:a8:cf:0e:60:f3:e4:33:1d:4f:8f: 7b:68:d9:fa:1c:30:8f:7b:79:cc:cc:16:88:47:95: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6C:FE:8D:BC:DC:BF:CA:5A:08:39:7A:B9:2E:65:7E:52:31:83:39 X509v3 Authority Key Identifier: keyid:82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/Smz-jbzcv8paCDl6uS5lflIxgzk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:63c0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:d0:c7:8a:9c:8a:ab:d9:f2:5e:5d:e7:60:81:0f:db:d4:af: b5:05:c3:52:90:02:d7:fb:81:79:f3:af:7a:ab:22:0e:a3:d5: e4:64:cd:45:c3:5f:c6:3a:21:2a:63:46:ac:e1:19:82:b7:05: c0:9d:4f:ab:50:3e:e2:d6:be:8d:44:46:d1:01:dc:e3:76:ed: 92:14:9f:08:06:5a:cc:d9:7c:39:df:90:b4:dc:47:93:e1:c1: 26:34:4e:8f:4e:f4:ed:32:a3:ec:d8:65:d0:1e:85:9e:af:4d: 57:42:6d:28:dc:79:bf:eb:00:d7:34:b6:48:83:d6:04:da:c7: 6e:72:54:5c:c8:73:c1:d9:f8:bf:17:3d:bb:a0:7b:09:9b:ef: 4d:ed:7a:18:d1:bf:e4:d3:48:ca:26:0e:8c:6c:60:ac:cc:01: 29:23:c4:f9:78:c9:5d:9e:0e:7f:41:00:4d:dc:6c:3e:34:bf: a3:ee:ca:25:88:f4:13:89:60:19:42:62:5b:b7:ac:aa:c4:0e: 5b:25:b7:94:46:cf:90:df:2a:15:4b:bb:83:ce:90:11:7a:4c: 32:53:17:d3:b9:5b:e0:8a:7a:28:eb:c3:38:fa:95:61:64:0c: fe:70:65:be:08:b1:8f:b6:60:95:39:d4:1c:f2:e7:a7:bd:ec: 15:7b:d6:83 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODI4 QkQxOUVGQThFQkU1OUVGNDA3QkI3RkFCNjg5OEY3NTRDN0VDMTAeFw0yNDA4MjYw NTE5NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBNkNGRThEQkNEQ0JG Q0E1QTA4Mzk3QUI5MkU2NTdFNTIzMTgzMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWycH8PACUg2KObwWqG5FjfEcM3y9VKl/mh3eBM23QITwTmS5X upabzFm1AeI+iFaT7a4MCbpRSnVRQCMB6Rnn1mLhGU5YX2ea4JlYi7Odr2eGTMa7 +trOeAXQx/ZZThTjPdcIo/Z1RJ0quKwIp0Mlv0gobBp+cn0AiZDdBpVDs08NgiNS zV8LtiRe00H6Qh2oTg6qiMi9KEsbRbJ7UFfjvLcj3uDlFEuB35AlL/wa3JaGDHeM V/QXRB1a2VsZYYXURcMSue15TIJyii+Z/YF/m9u39w5mNte21cqeOP0Dt0CynFOr qM8OYPPkMx1Pj3to2focMI97eczMFohHlf0lAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUSmz+jbzcv8paCDl6uS5lflIxgzkwHwYDVR0jBBgwFoAUgovRnvqOvlnvQHu3 +raJj3VMfsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tDTy9n b3ZSbnZxT3ZsbnZRSHUzLXJhSmozVk1mc0UuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2dvdlJudnFPdmxudlFIdTMtcmFKajNWTWZzRS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0tLQ08vU216LWpiemN2OHBhQ0RsNnVTNWxm bEl4Z3prLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEY8Aw DQYJKoZIhvcNAQELBQADggEBAB3Qx4qciqvZ8l5d52CBD9vUr7UFw1KQAtf7gXnz r3qrIg6j1eRkzUXDX8Y6ISpjRqzhGYK3BcCdT6tQPuLWvo1ERtEB3ON27ZIUnwgG WszZfDnfkLTcR5PhwSY0To9O9O0yo+zYZdAehZ6vTVdCbSjceb/rANc0tkiD1gTa x25yVFzIc8HZ+L8XPbugewmb703tehjRv+TTSMomDoxsYKzMASkjxPl4yV2eDn9B AE3cbD40v6PuyiWI9BOJYBlCYlu3rKrEDlslt5RGz5DfKhVLu4POkBF6TDJTF9O5 W+CKeijrwzj6lWFkDP5wZb4IsY+2YJU51Bzy56e97BV71oM= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org