$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKSMF/pFbBwC3Gl1AriqQNxokuOa4Q4Bg.roa File: pFbBwC3Gl1AriqQNxokuOa4Q4Bg.roa (raw, json) Hash identifier: Wrd+IbXjq6wuUg//XoSQlpeB0PGM1zoTDOUPZJm5hKc= Subject key identifier: A4:56:C1:C0:2D:C6:97:50:2B:8A:A4:0D:C6:89:2E:39:AE:10:E0:18 Certificate issuer: /CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A Certificate serial: 0D2D Authority key identifier: FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/pFbBwC3Gl1AriqQNxokuOa4Q4Bg.roa Signing time: Mon 26 Aug 2024 05:20:02 +0000 ROA not before: Mon 26 Aug 2024 05:20:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131645 IP address blocks: 103.142.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3373 (0xd2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A Validity Not Before: Aug 26 05:20:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A456C1C02DC697502B8AA40DC6892E39AE10E018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:ed:cd:f3:6b:f3:fb:05:48:7f:5c:56:b9: a1:be:b4:55:5a:70:e6:8e:a5:83:61:f0:0f:94:88: f6:64:13:83:73:7e:9c:80:c5:9d:77:c9:5b:00:2b: 9a:1a:b0:1a:af:21:42:be:05:46:14:f6:0d:0f:e8: 49:e5:2c:55:ba:fc:f0:29:a3:88:12:6e:6d:6e:0e: 6b:89:8f:41:11:db:ce:6a:88:c8:22:ec:d4:44:a8: f9:d2:16:04:86:c7:5e:d1:e7:e6:6e:26:4d:2a:08: 3d:01:f3:3b:9c:dd:d6:e8:fc:40:5f:d4:7a:42:13: 19:82:45:57:b3:d5:3f:f6:fb:33:4c:70:eb:b5:ff: 83:32:80:cc:b3:b8:33:8b:81:b0:90:b4:91:5e:f1: 48:8a:f2:75:9b:05:cc:6a:bc:3c:1c:16:b0:5e:3e: c3:11:da:21:9d:b2:92:7a:24:2d:0e:e6:b6:53:12: 48:4f:04:c9:48:fd:a8:a2:91:64:ca:a7:b8:0c:40: 2b:eb:09:ed:48:b7:0d:11:4a:8e:c2:cc:ab:e0:3b: 23:7a:0e:52:83:2a:18:9a:82:e9:95:6c:bb:a3:9e: de:d3:ec:9d:c7:88:35:04:de:9d:47:95:76:cc:1c: 99:f6:ef:43:54:36:d0:f0:5a:8a:fe:d6:d1:bc:bf: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:56:C1:C0:2D:C6:97:50:2B:8A:A4:0D:C6:89:2E:39:AE:10:E0:18 X509v3 Authority Key Identifier: keyid:FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/pFbBwC3Gl1AriqQNxokuOa4Q4Bg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.142.42.0/23 Signature Algorithm: sha256WithRSAEncryption 06:ee:08:49:17:95:b7:c9:b4:01:46:69:1f:6e:23:b7:b1:7a: 91:07:6d:67:59:54:ce:0b:23:6b:c3:71:26:25:30:41:3f:5e: cb:fd:01:9a:ac:93:c5:18:1c:a2:fa:d4:92:06:0b:dc:77:d6: 98:40:97:3f:52:e8:a3:f2:39:c7:d4:fe:bd:ca:54:c1:e4:d6: e1:7e:3b:7a:1a:04:d6:a3:e8:ec:cf:ee:11:34:71:8e:06:de: 5c:75:43:44:dd:bf:55:58:e7:a4:3d:bc:f6:fc:8f:f6:cd:7d: 41:d2:48:c7:a4:0b:e7:1d:a5:16:18:ea:2c:25:4b:ed:93:de: c4:a8:de:9f:d2:c6:f8:87:62:16:b2:be:d1:33:b8:17:1f:5e: df:e5:fe:bc:e2:36:86:2f:5b:8a:3c:82:c1:df:d7:7a:f9:6b: 48:55:c9:d6:44:2e:5e:72:07:99:41:94:93:62:c6:28:10:5c: e8:5d:14:ef:cd:51:5f:a9:97:76:a9:36:77:b1:4b:78:76:67: 8d:81:6b:91:65:93:1d:f6:e1:16:d9:7c:48:94:7d:41:8a:1e: d3:66:c8:12:3c:e0:26:a1:ab:99:63:36:1f:52:89:5b:5e:f3: d2:39:00:d0:6d:bd:3b:44:4c:ad:c1:e0:20:cb:8e:7a:81:1d: fe:e9:36:16 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD RkExODgwQUM4NkNFNEZCOTlGOTc0RTk5NTNGMzU5N0RDREUwQTAeFw0yNDA4MjYw NTIwMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0NTZDMUMwMkRDNjk3 NTAyQjhBQTQwREM2ODkyRTM5QUUxMEUwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv4+3N82vz+wVIf1xWuaG+tFVacOaOpYNh8A+UiPZkE4NzfpyA xZ13yVsAK5oasBqvIUK+BUYU9g0P6EnlLFW6/PApo4gSbm1uDmuJj0ER285qiMgi 7NREqPnSFgSGx17R5+ZuJk0qCD0B8zuc3dbo/EBf1HpCExmCRVez1T/2+zNMcOu1 /4MygMyzuDOLgbCQtJFe8UiK8nWbBcxqvDwcFrBePsMR2iGdspJ6JC0O5rZTEkhP BMlI/aiikWTKp7gMQCvrCe1Itw0RSo7CzKvgOyN6DlKDKhiagumVbLujnt7T7J3H iDUE3p1HlXbMHJn270NUNtDwWor+1tG8v0C9AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUpFbBwC3Gl1AriqQNxokuOa4Q4BgwHwYDVR0jBBgwFoAU+8+hiArIbOT7mfl0 6ZU/NZfc3gowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tTTUYv LTgtaGlBckliT1Q3bWZsMDZaVV9OWmZjM2dvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8tOC1oaUFySWJPVDdtZmwwNlpVX05aZmMzZ28uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS1NNRi9wRmJCd0MzR2wxQXJpcVFOeG9r dU9hNFE0Qmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ44q MA0GCSqGSIb3DQEBCwUAA4IBAQAG7ghJF5W3ybQBRmkfbiO3sXqRB21nWVTOCyNr w3EmJTBBP17L/QGarJPFGByi+tSSBgvcd9aYQJc/Uuij8jnH1P69ylTB5Nbhfjt6 GgTWo+jsz+4RNHGOBt5cdUNE3b9VWOekPbz2/I/2zX1B0kjHpAvnHaUWGOosJUvt k97EqN6f0sb4h2IWsr7RM7gXH17f5f684jaGL1uKPILB39d6+WtIVcnWRC5ecgeZ QZSTYsYoEFzoXRTvzVFfqZd2qTZ3sUt4dmeNgWuRZZMd9uEW2XxIlH1Bih7TZsgS POAmoauZYzYfUolbXvPSOQDQbb07REytweAgy456gR3+6TYW -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:09 2024 by rpki-client on console-ams.rpki-client.org