$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/KMqD9WjkEzypTbBZHlSsrXVTADE.roa File: KMqD9WjkEzypTbBZHlSsrXVTADE.roa (raw, json) Hash identifier: WEDPKrawLxoCVD473xvX8tkHbDQoE7FxxAe6/AMJPhU= Subject key identifier: 28:CA:83:F5:68:E4:13:3C:A9:4D:B0:59:1E:54:AC:AD:75:53:00:31 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1647 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KMqD9WjkEzypTbBZHlSsrXVTADE.roa Signing time: Mon 26 Aug 2024 05:21:59 +0000 ROA not before: Mon 26 Aug 2024 05:21:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 123.205.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5703 (0x1647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=28CA83F568E4133CA94DB0591E54ACAD75530031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:58:fb:39:25:8f:08:26:55:61:cd:9c:7e:a2: 7e:f1:f2:95:06:27:f1:56:b6:5b:3c:88:ce:39:da: 5f:94:22:d5:a3:59:6a:33:4f:74:e8:d7:6f:b6:a3: 7c:e0:16:f0:7f:d8:82:2c:80:fe:6d:c4:12:10:0e: 0f:36:70:a8:6a:72:0c:64:1e:17:47:fd:b5:ee:dc: 6e:70:e6:3d:ad:d4:8b:2c:86:b0:ec:26:52:eb:e0: f3:7e:e7:55:23:39:28:3a:74:05:fd:c0:81:81:ea: 0e:c0:3c:a0:2c:28:06:e6:61:20:f0:74:00:a0:b4: b5:dd:48:8c:38:e1:25:86:f6:c9:04:56:d0:1e:6b: 1b:1e:43:a7:42:3b:e7:68:cd:59:95:aa:b6:91:84: 5e:8b:24:9b:bb:fe:39:cd:1c:28:f7:62:91:ab:a4: b7:72:cb:6f:ad:9e:f1:ce:17:90:d2:80:3d:a8:b3: b3:20:82:86:5d:7c:7e:29:c9:96:0c:a8:ab:b2:21: a3:67:91:a6:36:96:6f:1a:3a:c4:60:98:e9:54:ef: 02:ac:dd:32:5a:56:1e:45:ba:13:db:0c:c0:23:57: c3:47:72:b1:5b:ae:29:33:ae:c2:94:74:d3:d2:9a: 0a:83:63:57:2c:68:65:df:64:50:3a:10:5c:52:67: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CA:83:F5:68:E4:13:3C:A9:4D:B0:59:1E:54:AC:AD:75:53:00:31 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KMqD9WjkEzypTbBZHlSsrXVTADE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.58.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:50:8f:8d:ee:3b:b4:cb:e3:35:c1:1c:0c:16:db:6d:83:3a: da:b3:49:42:55:dc:a2:ee:50:b5:30:8f:ca:fe:c6:1d:2c:0c: fc:94:22:b0:62:ed:53:50:95:cd:c8:2d:1b:c4:9e:6d:a3:40: 5c:85:e2:de:30:e4:9a:fa:6e:87:7e:7e:bd:b1:db:28:df:da: a5:3c:24:29:79:6b:b4:85:fd:13:d3:d5:73:f7:72:35:cd:79: fb:95:d6:c1:4e:57:42:3c:89:d3:bf:f0:6f:13:d4:82:70:e0: 98:8d:ad:c4:0d:5e:74:93:ab:a8:f8:f0:1e:26:7d:e4:73:d0: eb:93:65:75:cb:64:a5:14:fd:da:47:ab:df:24:70:5d:4c:c0: 3e:67:ed:4a:12:31:78:c6:f3:a5:c5:3b:31:fd:95:6e:c2:93: 6e:e5:81:04:31:ec:9b:fb:12:87:97:f8:9e:92:ea:f6:39:25: da:0a:c9:84:34:e3:6d:86:59:9c:97:e3:b1:03:11:69:fd:ad: f4:18:1e:c7:14:e5:a0:49:32:2d:8e:67:72:39:5b:7c:ae:85: 91:ce:0b:90:cf:3a:d4:1e:21:e3:9b:be:f1:0b:8e:22:bc:1e: a9:7a:25:27:6e:03:34:5d:54:81:6d:d0:f5:4e:d6:2b:48:bb: 6b:d2:db:55 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI4Q0E4M0Y1NjhFNDEz M0NBOTREQjA1OTFFNTRBQ0FENzU1MzAwMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhWPs5JY8IJlVhzZx+on7x8pUGJ/FWtls8iM452l+UItWjWWoz T3To12+2o3zgFvB/2IIsgP5txBIQDg82cKhqcgxkHhdH/bXu3G5w5j2t1IsshrDs JlLr4PN+51UjOSg6dAX9wIGB6g7APKAsKAbmYSDwdACgtLXdSIw44SWG9skEVtAe axseQ6dCO+dozVmVqraRhF6LJJu7/jnNHCj3YpGrpLdyy2+tnvHOF5DSgD2os7Mg goZdfH4pyZYMqKuyIaNnkaY2lm8aOsRgmOlU7wKs3TJaVh5FuhPbDMAjV8NHcrFb rikzrsKUdNPSmgqDY1csaGXfZFA6EFxSZ61DAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUKMqD9WjkEzypTbBZHlSsrXVTADEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvS01xRDlXamtFenlwVGJCWkhsU3Ny WFZUQURFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNOjAN BgkqhkiG9w0BAQsFAAOCAQEAD1CPje47tMvjNcEcDBbbbYM62rNJQlXcou5QtTCP yv7GHSwM/JQisGLtU1CVzcgtG8SebaNAXIXi3jDkmvpuh35+vbHbKN/apTwkKXlr tIX9E9PVc/dyNc15+5XWwU5XQjyJ07/wbxPUgnDgmI2txA1edJOrqPjwHiZ95HPQ 65NldctkpRT92ker3yRwXUzAPmftShIxeMbzpcU7Mf2VbsKTbuWBBDHsm/sSh5f4 npLq9jkl2grJhDTjbYZZnJfjsQMRaf2t9BgexxTloEkyLY5ncjlbfK6Fkc4LkM86 1B4h45u+8QuOIrweqXolJ24DNF1UgW3Q9U7WK0i7a9LbVQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org