$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MKY/PlWD7PkzktlMIG2F-fsLXobP7Oc.roa File: PlWD7PkzktlMIG2F-fsLXobP7Oc.roa (raw, json) Hash identifier: 65KzRazFD2S0jMzAwGy4/tL9zAYbuTSnWJif5iPhh+A= Subject key identifier: 3E:55:83:EC:F9:33:92:D9:4C:20:6D:85:F9:FB:0B:5E:86:CF:EC:E7 Certificate issuer: /CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1 Certificate serial: 0C2D Authority key identifier: 9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/PlWD7PkzktlMIG2F-fsLXobP7Oc.roa Signing time: Mon 26 Aug 2024 05:21:05 +0000 ROA not before: Mon 26 Aug 2024 05:21:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7478 IP address blocks: 210.244.192.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1 Validity Not Before: Aug 26 05:21:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3E5583ECF93392D94C206D85F9FB0B5E86CFECE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5b:2c:00:94:f2:44:39:3a:de:4d:7e:90:a3: f5:2e:e9:7d:61:f4:a2:74:60:0a:0e:be:07:f2:2a: 28:71:4d:0a:05:bb:bd:06:07:27:de:24:81:d2:19: 19:5f:78:95:1d:7a:4f:11:7e:df:95:eb:a6:49:28: 9c:72:09:aa:d4:d3:36:40:29:75:b0:8c:d0:16:17: eb:3e:21:1d:b2:95:f7:24:e1:18:82:67:ef:99:1d: 8b:c7:f9:47:bf:54:2d:bf:cd:3d:cf:0b:13:46:63: de:58:7e:6b:a5:2d:64:6c:39:75:90:32:34:51:31: b1:1d:1d:31:c9:95:b8:d6:79:12:51:5e:92:50:aa: ad:47:69:f9:c6:78:85:5d:cd:73:20:a6:4c:53:2b: fc:c6:d2:26:d2:77:18:b2:d9:b3:3c:90:8a:81:8a: ba:72:a3:d2:3a:b6:71:96:eb:45:fc:11:00:80:44: ff:06:2a:37:aa:f9:59:01:36:db:70:d9:06:36:53: a5:19:3c:5f:6f:95:0b:12:4a:4c:96:0a:3c:8d:35: 3d:7c:cb:0b:05:e3:5f:56:2a:84:da:1c:a1:20:a5: 8f:31:a9:b6:98:63:e0:cf:bf:42:44:4a:43:2d:d0: b0:16:1c:39:37:6f:f5:20:79:ea:34:da:69:45:e8: 8a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:55:83:EC:F9:33:92:D9:4C:20:6D:85:F9:FB:0B:5E:86:CF:EC:E7 X509v3 Authority Key Identifier: keyid:9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/PlWD7PkzktlMIG2F-fsLXobP7Oc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.244.192.0/19 Signature Algorithm: sha256WithRSAEncryption 32:21:1a:c5:c8:f4:38:ab:9f:f6:c1:56:24:f8:3e:93:00:45: 1e:e2:68:4f:cc:38:30:bb:e4:54:49:1e:95:f0:61:8d:cd:61: 5a:17:ec:90:f8:c4:5d:e3:d2:3a:6f:ac:b4:df:82:7f:70:b4: d6:91:71:0c:68:3b:5d:f9:a6:ef:c4:ca:dd:8f:49:d4:b3:5d: 7d:88:dd:1c:66:cb:1c:15:33:3f:99:c2:67:ec:8c:fc:5a:6c: 28:06:db:88:85:d1:0f:96:f1:ff:2c:08:d4:d8:bf:68:51:3f: 93:72:63:b0:55:28:58:21:4c:ba:81:0a:c8:66:dd:44:74:c7: 4f:24:dc:a7:b4:a7:9a:44:ab:90:37:57:da:eb:76:01:e5:ca: 4b:ea:55:13:ec:5e:6a:ec:28:ee:b5:7a:a4:96:16:0e:5d:da: 81:e8:a3:cf:d8:8b:e8:9f:ad:c0:f5:8b:89:ba:ea:d1:49:ac: 8a:88:c5:48:04:da:40:3c:f1:b0:5a:85:28:bb:ea:07:07:81: ed:01:89:02:b2:36:a8:92:9a:bf:b4:a9:ea:10:aa:e0:49:97: 07:39:d4:2a:e6:c3:1c:59:a5:45:2d:66:2d:ef:8b:07:d0:2f: db:28:fa:b9:6a:1c:c2:b5:bf:f2:4d:3d:24:59:44:e1:15:a6: f8:03:18:56 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUQ5 RTk3QjAwRDJFMTVDNDFBRTcwNzE3MzIwMThDMkIxMzdFNTNBMTAeFw0yNDA4MjYw NTIxMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFNTU4M0VDRjkzMzky RDk0QzIwNkQ4NUY5RkIwQjVFODZDRkVDRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnWywAlPJEOTreTX6Qo/Uu6X1h9KJ0YAoOvgfyKihxTQoFu70G ByfeJIHSGRlfeJUdek8Rft+V66ZJKJxyCarU0zZAKXWwjNAWF+s+IR2ylfck4RiC Z++ZHYvH+Ue/VC2/zT3PCxNGY95YfmulLWRsOXWQMjRRMbEdHTHJlbjWeRJRXpJQ qq1HafnGeIVdzXMgpkxTK/zG0ibSdxiy2bM8kIqBirpyo9I6tnGW60X8EQCARP8G Kjeq+VkBNttw2QY2U6UZPF9vlQsSSkyWCjyNNT18ywsF419WKoTaHKEgpY8xqbaY Y+DPv0JESkMt0LAWHDk3b/Ugeeo02mlF6Io5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUPlWD7PkzktlMIG2F+fsLXobP7OcwHwYDVR0jBBgwFoAUnZ6XsA0uFcQa5wcX MgGMKxN+U6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUtZL25a NlhzQTB1RmNRYTV3Y1hNZ0dNS3hOLVU2RS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev blo2WHNBMHVGY1FhNXdjWE1nR01LeE4tVTZFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvTUtZL1BsV0Q3UGt6a3RsTUlHMkYtZnNMWG9i UDdPYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS9MAwDQYJ KoZIhvcNAQELBQADggEBADIhGsXI9Dirn/bBViT4PpMARR7iaE/MODC75FRJHpXw YY3NYVoX7JD4xF3j0jpvrLTfgn9wtNaRcQxoO135pu/Eyt2PSdSzXX2I3RxmyxwV Mz+ZwmfsjPxabCgG24iF0Q+W8f8sCNTYv2hRP5NyY7BVKFghTLqBCshm3UR0x08k 3Ke0p5pEq5A3V9rrdgHlykvqVRPsXmrsKO61eqSWFg5d2oHoo8/Yi+ifrcD1i4m6 6tFJrIqIxUgE2kA88bBahSi76gcHge0BiQKyNqiSmr+0qeoQquBJlwc51CrmwxxZ pUUtZi3viwfQL9so+rlqHMK1v/JNPSRZROEVpvgDGFY= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:40 2024 by rpki-client on console-fra.rpki-client.org