$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/mBI6RUYzSttoGpYfQIRJaF8MXZU.roa File: mBI6RUYzSttoGpYfQIRJaF8MXZU.roa (raw, json) Hash identifier: 1Gb0u79xw66uaPTDi20SxtcsJ9C7/rpnEoO3cQvREJk= Subject key identifier: 98:12:3A:45:46:33:4A:DB:68:1A:96:1F:40:84:49:68:5F:0C:5D:95 Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Certificate serial: 039C Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/mBI6RUYzSttoGpYfQIRJaF8MXZU.roa Signing time: Mon 26 Aug 2024 05:23:06 +0000 ROA not before: Mon 26 Aug 2024 05:23:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 132369 IP address blocks: 103.159.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Validity Not Before: Aug 26 05:23:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=98123A4546334ADB681A961F408449685F0C5D95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:11:83:40:5c:c9:78:24:7c:9e:4a:42:f2: a8:ca:72:2f:6e:e4:b0:b6:26:42:07:21:59:55:df: 65:d0:a0:f5:1f:1e:6c:d3:e8:4e:1f:61:20:6c:c7: 0b:68:5d:1b:8e:cc:33:87:8f:49:99:0b:58:bf:57: 1a:a9:d9:49:0e:55:7c:63:75:01:da:ca:0c:5b:20: e6:41:df:34:b3:aa:4d:49:9a:0d:26:62:17:7f:dd: c8:4a:17:80:99:19:89:ba:a7:83:13:34:e9:2c:e2: e6:43:63:cd:2c:74:c5:d6:d7:7b:e1:a2:ab:de:23: b6:40:34:47:19:89:64:d9:b1:64:40:df:a5:d9:fd: f3:3a:ff:e4:f2:a0:18:72:61:ce:eb:b9:e3:fa:d3: 48:ff:67:70:c0:d2:58:2a:95:0c:8f:f5:cd:cc:f3: 57:4f:c7:4c:56:02:0e:dc:36:7e:55:70:db:00:7a: 38:31:58:0c:72:07:0d:e7:e3:46:f7:34:95:ab:8d: 09:86:49:dc:b8:48:6a:48:81:15:54:f9:c2:a8:30: ee:bb:bb:fa:d3:13:c1:fc:e9:99:98:c8:5d:19:98: ee:04:9a:04:9d:95:8b:c8:92:f5:aa:14:d6:90:4a: d9:a9:2a:49:59:a4:4c:47:60:49:bc:2c:98:3d:56: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:12:3A:45:46:33:4A:DB:68:1A:96:1F:40:84:49:68:5F:0C:5D:95 X509v3 Authority Key Identifier: keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/mBI6RUYzSttoGpYfQIRJaF8MXZU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.88.0/23 Signature Algorithm: sha256WithRSAEncryption 46:01:62:e9:13:ac:46:16:cc:ad:4c:79:64:4c:f2:5d:28:85: d2:16:27:d6:9a:80:95:db:02:1a:5d:2c:de:59:c7:52:c3:da: 33:21:1f:be:99:9a:8e:9d:9e:4d:48:fe:f1:5a:02:3b:4f:c7: 96:f5:6c:ac:94:11:b1:97:75:75:f6:bc:10:a5:20:85:f2:04: 76:40:f0:30:c2:68:b8:99:50:6c:dd:dd:08:70:4e:a8:b9:5a: fa:3a:97:b0:b5:4e:66:87:ad:85:ff:c2:db:12:dc:78:78:41: 87:ae:7a:84:74:38:e1:af:fc:a2:fc:72:48:4e:54:76:a4:92: 95:01:bc:8b:0e:16:e1:21:f7:30:e7:7e:ce:9a:3a:94:68:f2: f0:1f:89:75:98:00:64:79:1a:5b:f0:ac:81:29:3a:2f:97:a1: 33:ef:a8:c4:22:34:39:96:70:6c:be:7e:92:88:51:15:db:86: 36:20:97:e6:59:22:e6:47:e7:65:b6:3f:8f:61:eb:79:2c:2f: c5:bb:d4:88:1d:66:d0:7b:57:20:53:98:04:ab:d7:7c:ce:e9: 7b:71:48:5a:95:11:85:42:a0:3d:a2:ba:bd:f0:2a:a3:78:7e: 78:53:ef:8e:b2:35:3b:b8:b4:a4:50:f4:ed:c3:5b:08:2f:86: 2b:a9:60:cb -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEy MkE5MjkyQ0M5MzAxNTJBREU1QTI1ODQ4QzFCREM0MDQ0QzkwMjAeFw0yNDA4MjYw NTIzMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk4MTIzQTQ1NDYzMzRB REI2ODFBOTYxRjQwODQ0OTY4NUYwQzVEOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtFhGDQFzJeCR8nkpC8qjKci9u5LC2JkIHIVlV32XQoPUfHmzT 6E4fYSBsxwtoXRuOzDOHj0mZC1i/Vxqp2UkOVXxjdQHaygxbIOZB3zSzqk1Jmg0m Yhd/3chKF4CZGYm6p4MTNOks4uZDY80sdMXW13vhoqveI7ZANEcZiWTZsWRA36XZ /fM6/+TyoBhyYc7rueP600j/Z3DA0lgqlQyP9c3M81dPx0xWAg7cNn5VcNsAejgx WAxyBw3n40b3NJWrjQmGSdy4SGpIgRVU+cKoMO67u/rTE8H86ZmYyF0ZmO4EmgSd lYvIkvWqFNaQStmpKklZpExHYEm8LJg9VtLLAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUmBI6RUYzSttoGpYfQIRJaF8MXZUwHwYDVR0jBBgwFoAUMSKpKSzJMBUq3lol hIwb3EBEyQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVT Q09NL01TS3BLU3pKTUJVcTNsb2xoSXdiM0VCRXlRSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTVNLcEtTekpNQlVxM2xvbGhJd2IzRUJFeVFJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09NL21CSTZSVVl6U3R0 b0dwWWZRSVJKYUY4TVhaVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnn1gwDQYJKoZIhvcNAQELBQADggEBAEYBYukTrEYWzK1MeWRM8l0ohdIW J9aagJXbAhpdLN5Zx1LD2jMhH76Zmo6dnk1I/vFaAjtPx5b1bKyUEbGXdXX2vBCl IIXyBHZA8DDCaLiZUGzd3QhwTqi5Wvo6l7C1TmaHrYX/wtsS3Hh4QYeueoR0OOGv /KL8ckhOVHakkpUBvIsOFuEh9zDnfs6aOpRo8vAfiXWYAGR5GlvwrIEpOi+XoTPv qMQiNDmWcGy+fpKIURXbhjYgl+ZZIuZH52W2P49h63ksL8W71IgdZtB7VyBTmASr 13zO6XtxSFqVEYVCoD2iur3wKqN4fnhT746yNTu4tKRQ9O3DWwgvhiupYMs= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org