$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/pGlDkJ0nS0cuDfQiETe_u3MEIXg.roa File: pGlDkJ0nS0cuDfQiETe_u3MEIXg.roa (raw, json) Hash identifier: /t7Ly2SVYRLyjQymdDwmUmuYgbE/IevnszWm6IDzUvI= Subject key identifier: A4:69:43:90:9D:27:4B:47:2E:0D:F4:22:11:37:BF:BB:73:04:21:78 Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Certificate serial: 039E Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/pGlDkJ0nS0cuDfQiETe_u3MEIXg.roa Signing time: Mon 26 Aug 2024 05:23:08 +0000 ROA not before: Mon 26 Aug 2024 05:23:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 31972 IP address blocks: 103.159.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Validity Not Before: Aug 26 05:23:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A46943909D274B472E0DF4221137BFBB73042178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:e1:1b:1a:de:88:e7:07:48:10:c7:9d:b3: bb:7d:a9:d7:20:43:78:12:c6:7a:9c:aa:25:ee:c5: 26:4f:fb:5f:2d:bf:f9:0d:66:59:99:2e:46:d9:44: aa:e1:e6:58:42:08:b0:f3:2b:75:10:0d:1b:ad:9f: 2e:84:f8:b4:73:1a:e8:f3:87:55:9f:b8:e4:e9:35: 83:4c:01:02:17:0c:c1:a7:ce:c3:55:b7:3a:90:98: 4c:50:39:78:f9:ff:a6:f2:c9:e7:9f:09:ed:2c:e0: 19:02:c4:e4:24:07:07:2d:c4:d0:d3:7b:7c:7d:8b: 8d:81:cc:75:54:68:68:92:c6:8c:9f:b1:ac:af:13: f3:95:45:26:d9:82:43:75:af:a8:52:cf:e9:95:6f: c6:84:8e:56:16:e5:ef:e0:cd:2e:45:44:7e:df:86: f5:83:2e:2a:08:07:79:e3:e5:cb:16:43:91:f1:e1: 9b:c1:9f:83:91:aa:d8:94:76:a7:dd:a4:9b:74:75: b3:50:d6:84:e7:31:30:28:b1:b6:64:bd:ce:80:6b: 5f:1f:c9:f0:7e:df:4a:02:e7:23:06:b0:17:7a:d4: 5e:cb:27:48:c1:a7:16:54:0d:06:7f:02:41:d7:23: 1b:da:21:ca:2f:93:af:a4:2e:1f:64:07:46:de:4b: 79:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:69:43:90:9D:27:4B:47:2E:0D:F4:22:11:37:BF:BB:73:04:21:78 X509v3 Authority Key Identifier: keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/pGlDkJ0nS0cuDfQiETe_u3MEIXg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.88.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:05:db:8f:2d:b0:c5:c7:28:67:42:50:bc:8b:a9:3a:7b:c3: ef:c6:99:86:10:93:ec:7b:d0:7d:cc:5f:e6:f8:52:25:43:43: 2e:ea:da:3a:c5:d2:50:eb:3e:fc:18:3a:94:34:3c:9f:84:c5: ab:a8:9e:0b:67:26:72:4b:00:8a:ea:3e:87:a8:96:2a:bf:20: 3e:4d:fd:0d:68:65:6b:e2:98:2d:2e:ef:4e:c7:f1:55:f7:6f: 38:8e:3d:c0:8b:c0:c4:b8:1d:84:38:08:fd:04:63:db:c9:95: 4d:22:b2:44:ec:f4:64:6e:20:f4:48:40:3a:e1:ed:4c:a7:c5: 3f:5d:68:0e:90:85:a4:4a:db:e1:62:4f:a0:25:f8:d5:9b:6f: 0e:20:55:76:96:85:df:11:89:e0:71:f9:48:6c:59:2b:1c:b0: 0e:31:40:95:89:f3:71:15:39:51:ab:85:5d:62:c1:62:f9:6b: e2:c0:99:10:8a:c3:2a:82:2e:f2:0f:18:61:06:c1:a4:f3:b6: 72:58:74:90:b8:e1:dd:7e:ac:de:61:e0:ec:94:49:e1:63:04: 7c:64:ac:67:a6:3c:da:df:20:90:c9:8f:2b:e9:c4:7e:c6:eb: 9d:20:12:8a:3f:a3:32:8c:08:fd:c2:91:0a:ad:1f:1e:59:b5: 3e:95:5a:dd -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICA54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEy MkE5MjkyQ0M5MzAxNTJBREU1QTI1ODQ4QzFCREM0MDQ0QzkwMjAeFw0yNDA4MjYw NTIzMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0Njk0MzkwOUQyNzRC NDcyRTBERjQyMjExMzdCRkJCNzMwNDIxNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbk+EbGt6I5wdIEMeds7t9qdcgQ3gSxnqcqiXuxSZP+18tv/kN ZlmZLkbZRKrh5lhCCLDzK3UQDRutny6E+LRzGujzh1WfuOTpNYNMAQIXDMGnzsNV tzqQmExQOXj5/6byyeefCe0s4BkCxOQkBwctxNDTe3x9i42BzHVUaGiSxoyfsayv E/OVRSbZgkN1r6hSz+mVb8aEjlYW5e/gzS5FRH7fhvWDLioIB3nj5csWQ5Hx4ZvB n4ORqtiUdqfdpJt0dbNQ1oTnMTAosbZkvc6Aa18fyfB+30oC5yMGsBd61F7LJ0jB pxZUDQZ/AkHXIxvaIcovk6+kLh9kB0beS3mvAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUpGlDkJ0nS0cuDfQiETe/u3MEIXgwHwYDVR0jBBgwFoAUMSKpKSzJMBUq3lol hIwb3EBEyQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVT Q09NL01TS3BLU3pKTUJVcTNsb2xoSXdiM0VCRXlRSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTVNLcEtTekpNQlVxM2xvbGhJd2IzRUJFeVFJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09NL3BHbERrSjBuUzBj dURmUWlFVGVfdTNNRUlYZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnn1gwDQYJKoZIhvcNAQELBQADggEBAJsF248tsMXHKGdCULyLqTp7w+/G mYYQk+x70H3MX+b4UiVDQy7q2jrF0lDrPvwYOpQ0PJ+ExauongtnJnJLAIrqPoeo liq/ID5N/Q1oZWvimC0u707H8VX3bziOPcCLwMS4HYQ4CP0EY9vJlU0iskTs9GRu IPRIQDrh7UynxT9daA6QhaRK2+FiT6Al+NWbbw4gVXaWhd8RieBx+UhsWSscsA4x QJWJ83EVOVGrhV1iwWL5a+LAmRCKwyqCLvIPGGEGwaTztnJYdJC44d1+rN5h4OyU SeFjBHxkrGemPNrfIJDJjyvpxH7G650gEoo/ozKMCP3CkQqtHx5ZtT6VWt0= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:12 2024 by rpki-client on console-fra.rpki-client.org