$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/ZmJz8EQa4oPLBSEwCJDNAtyfJBc.roa File: ZmJz8EQa4oPLBSEwCJDNAtyfJBc.roa (raw, json) Hash identifier: GMEdZTFXYEq15I0FFJlPzzVH5TSEFxld5dmbfcmdki4= Subject key identifier: 66:62:73:F0:44:1A:E2:83:CB:05:21:30:08:90:CD:02:DC:9F:24:17 Certificate issuer: /CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6 Certificate serial: 0E9E Authority key identifier: 27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/ZmJz8EQa4oPLBSEwCJDNAtyfJBc.roa Signing time: Mon 26 Aug 2024 05:20:05 +0000 ROA not before: Mon 26 Aug 2024 05:20:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 103.136.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3742 (0xe9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6 Validity Not Before: Aug 26 05:20:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=666273F0441AE283CB0521300890CD02DC9F2417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:cd:ee:25:61:62:6d:1d:e5:fd:55:28:f3: e3:fe:e1:f6:6f:0f:29:01:d5:cf:cb:b7:1f:0c:77: ac:c2:57:0a:16:73:44:96:14:df:8b:d0:21:e8:b5: 5f:32:3d:48:82:c3:47:b4:8e:8a:1c:33:9c:c8:1d: 2f:53:dc:6b:07:ca:eb:bb:b9:ac:4a:4f:8f:b9:df: 85:90:83:39:55:c1:d6:71:79:02:9f:8f:1f:54:e2: 52:1f:e2:ff:1f:7d:c9:09:20:9f:a3:1a:f6:03:db: ab:a3:fa:59:ac:7e:96:24:4d:11:46:49:6d:20:27: fe:5c:ba:14:82:55:8a:85:8c:c8:66:42:67:67:b9: 98:af:20:95:61:3a:84:cc:52:51:de:61:cd:5b:c1: cd:2e:75:a4:da:6d:0f:8a:13:cc:a6:9e:9b:2a:27: 42:2e:0b:c7:6d:69:c6:63:24:91:e5:cc:e1:17:34: 0c:db:5e:3c:c1:4a:30:43:df:be:3c:b1:46:0e:b2: fc:3d:cf:36:09:75:c9:1b:e8:d8:00:67:57:1c:9f: 45:98:4c:67:fb:35:6f:26:d2:7f:54:f4:12:d1:4f: 6d:da:b8:06:76:87:5a:a6:27:ac:65:8f:a8:fc:dd: 29:35:18:3d:91:bf:08:d6:9c:90:c9:0d:99:81:b1: 3a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:62:73:F0:44:1A:E2:83:CB:05:21:30:08:90:CD:02:DC:9F:24:17 X509v3 Authority Key Identifier: keyid:27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/ZmJz8EQa4oPLBSEwCJDNAtyfJBc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.210.0/23 Signature Algorithm: sha256WithRSAEncryption 00:6d:25:b6:0b:63:6b:ab:f7:c7:d0:2d:2e:cd:bf:e3:55:03: ac:08:27:96:d2:2a:2d:50:b8:01:c2:4f:80:a5:a2:e5:8b:c0: 3a:5c:ac:12:8e:8e:2b:dc:1e:6a:c5:88:d6:07:ad:19:e3:50: 09:a6:84:77:3e:a8:03:50:d6:1f:30:75:c9:1e:58:7d:79:bf: 86:ac:5d:df:85:07:ba:64:9a:4f:6b:09:ea:26:74:04:d1:cf: 02:49:08:51:b2:ca:3b:50:f1:8e:db:c7:89:79:c5:59:ed:da: d5:22:55:19:d5:e6:40:d4:5a:33:4c:57:47:40:3f:80:ff:21: 81:d7:ad:77:59:0b:cb:34:35:10:fc:77:34:dc:6c:81:a1:80: 4a:63:52:ea:f5:ea:76:9c:37:5e:1a:60:d8:94:45:75:a9:78: de:8e:c2:c8:26:15:46:32:a9:b1:19:de:73:84:9c:1a:dc:a5: 16:ca:c2:09:4a:d3:f7:fa:6b:04:15:ff:b9:ae:12:78:b6:3a: cb:08:81:c9:e9:94:86:3a:59:94:46:f3:49:36:86:ee:f5:71: e4:c9:21:bb:a0:bd:1f:68:56:b1:c9:f9:ef:af:0d:4e:52:39: a7:09:bc:50:31:c1:46:60:64:ec:28:e8:2d:ec:ab:6f:65:96: d2:0a:66:45 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjcx MDlBRTI1MEVGMkVDQUY3OUJGNDg5MEYwRDZDQkU1RTJEN0NDNjAeFw0yNDA4MjYw NTIwMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2NjI3M0YwNDQxQUUy ODNDQjA1MjEzMDA4OTBDRDAyREM5RjI0MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgpM3uJWFibR3l/VUo8+P+4fZvDykB1c/Ltx8Md6zCVwoWc0SW FN+L0CHotV8yPUiCw0e0joocM5zIHS9T3GsHyuu7uaxKT4+534WQgzlVwdZxeQKf jx9U4lIf4v8ffckJIJ+jGvYD26uj+lmsfpYkTRFGSW0gJ/5cuhSCVYqFjMhmQmdn uZivIJVhOoTMUlHeYc1bwc0udaTabQ+KE8ymnpsqJ0IuC8dtacZjJJHlzOEXNAzb XjzBSjBD3748sUYOsvw9zzYJdckb6NgAZ1ccn0WYTGf7NW8m0n9U9BLRT23auAZ2 h1qmJ6xlj6j83Sk1GD2RvwjWnJDJDZmBsTpjAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUZmJz8EQa4oPLBSEwCJDNAtyfJBcwHwYDVR0jBBgwFoAUJxCa4lDvLsr3m/SJ Dw1svl4tfMYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1VBTkdT SElIL0p4Q2E0bER2THNyM21fU0pEdzFzdmw0dGZNWS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvSnhDYTRsRHZMc3IzbV9TSkR3MXN2bDR0Zk1ZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1VBTkdTSElIL1ptSno4RVFhNG9Q TEJTRXdDSkROQXR5ZkpCYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFniNIwDQYJKoZIhvcNAQELBQADggEBAABtJbYLY2ur98fQLS7Nv+NVA6wI J5bSKi1QuAHCT4ClouWLwDpcrBKOjivcHmrFiNYHrRnjUAmmhHc+qANQ1h8wdcke WH15v4asXd+FB7pkmk9rCeomdATRzwJJCFGyyjtQ8Y7bx4l5xVnt2tUiVRnV5kDU WjNMV0dAP4D/IYHXrXdZC8s0NRD8dzTcbIGhgEpjUur16nacN14aYNiURXWpeN6O wsgmFUYyqbEZ3nOEnBrcpRbKwglK0/f6awQV/7muEni2OssIgcnplIY6WZRG80k2 hu71ceTJIbugvR9oVrHJ+e+vDU5SOacJvFAxwUZgZOwo6C3sq29lltIKZkU= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:34 2024 by rpki-client on console-ams.rpki-client.org