$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/tCn5GVdb8smMgK6t_m9afMsuO3U.roa File: tCn5GVdb8smMgK6t_m9afMsuO3U.roa (raw, json) Hash identifier: 1MeUY4RbmfLyZPsM4JhV3oWbnXgxfkAWPXGI/vamNmQ= Subject key identifier: B4:29:F9:19:57:5B:F2:C9:8C:80:AE:AD:FE:6F:5A:7C:CB:2E:3B:75 Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Certificate serial: 12FA Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/tCn5GVdb8smMgK6t_m9afMsuO3U.roa Signing time: Mon 26 Aug 2024 05:23:11 +0000 ROA not before: Mon 26 Aug 2024 05:23:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 103.130.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4858 (0x12fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Validity Not Before: Aug 26 05:23:11 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B429F919575BF2C98C80AEADFE6F5A7CCB2E3B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:87:c3:36:09:ed:4d:27:04:c1:4b:f9:e8: 70:01:62:db:e3:66:4d:e9:0f:44:9b:1c:f4:05:69: 76:f0:bc:a5:52:6c:5e:a8:77:44:a1:f1:2c:e9:78: 73:2a:6f:60:1f:b3:7e:6f:93:08:79:91:0a:d0:58: f3:e9:4f:89:6a:ec:d6:ca:fc:06:ff:87:be:fb:cb: ab:23:c8:8e:e0:74:14:f9:24:fa:3a:d8:78:94:c5: 71:67:4d:72:bc:0e:65:d6:3b:1e:03:bb:9c:3f:a9: 9f:cd:8b:1b:8a:40:b2:5a:24:5a:08:bf:b4:fe:f2: 8c:fe:5f:dd:8b:bc:45:6d:59:a7:ca:5a:f5:01:64: b8:a3:05:72:5b:4d:ce:47:ee:1f:4e:b5:a5:73:91: b8:7b:22:65:10:4f:9a:22:e7:91:d6:89:f6:5c:a1: 72:29:98:d7:da:5e:32:ee:65:22:34:fa:8d:49:f4: 2a:91:06:b7:77:ee:7e:1b:eb:39:72:b6:9a:18:44: f9:81:0e:83:54:09:1c:8f:74:7b:7a:dd:11:55:a0: 09:ef:41:1f:e5:4a:de:dc:50:ff:2d:56:0e:a9:40: e2:a7:c1:0f:00:89:ce:3f:e2:de:ed:5c:8a:30:c6: 67:3b:7b:ac:2a:10:6c:8a:9a:9e:90:71:54:34:7c: a9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:29:F9:19:57:5B:F2:C9:8C:80:AE:AD:FE:6F:5A:7C:CB:2E:3B:75 X509v3 Authority Key Identifier: keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/tCn5GVdb8smMgK6t_m9afMsuO3U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.48.0/22 Signature Algorithm: sha256WithRSAEncryption 63:ac:cc:a4:07:77:9a:8c:cb:39:97:d1:eb:8e:fe:72:7a:a0: c3:8f:77:2d:dd:74:3b:e2:b2:1b:8e:09:8f:51:ac:b1:44:5e: 85:a5:91:7a:96:1e:ee:ea:f1:01:42:f8:49:01:27:3b:16:cf: c3:84:88:0a:eb:e3:c5:b1:90:10:c1:68:8f:b3:26:69:4c:db: 9f:0c:d8:38:7d:9f:3f:46:af:d8:76:43:39:88:10:d9:29:5f: 9f:4a:4f:49:2b:b1:82:0c:cb:0d:98:41:eb:bd:3a:82:83:33: 52:90:0f:7f:76:d6:a7:52:6b:1d:04:4c:e3:1d:cb:30:83:94: 55:0a:2e:38:51:ad:16:ad:e3:bb:25:8b:73:d8:a8:98:ed:e0: 5e:cd:19:2b:ee:55:f4:da:8d:19:30:3a:3c:f5:3f:62:a2:d3: ac:c3:bf:d4:71:23:9b:4f:4c:e4:2f:09:95:50:81:6f:d6:a6: 51:be:db:62:ba:28:a0:d0:55:bd:18:46:3f:f4:9f:55:64:61: 09:37:c3:70:40:b1:ac:f8:db:25:08:fd:9a:4a:e6:94:d4:ad: 8f:ea:46:e2:9d:40:b7:5e:b1:52:44:28:3b:bf:43:fa:8d:5d: 4c:0d:dc:14:25:e1:64:54:a2:21:e2:fe:b2:c1:ef:82:62:98: 95:33:1e:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICEvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1 MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yNDA4MjYw NTIzMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0MjlGOTE5NTc1QkYy Qzk4QzgwQUVBREZFNkY1QTdDQ0IyRTNCNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHW4fDNgntTScEwUv56HABYtvjZk3pD0SbHPQFaXbwvKVSbF6o d0Sh8SzpeHMqb2Afs35vkwh5kQrQWPPpT4lq7NbK/Ab/h777y6sjyI7gdBT5JPo6 2HiUxXFnTXK8DmXWOx4Du5w/qZ/NixuKQLJaJFoIv7T+8oz+X92LvEVtWafKWvUB ZLijBXJbTc5H7h9OtaVzkbh7ImUQT5oi55HWifZcoXIpmNfaXjLuZSI0+o1J9CqR Brd37n4b6zlytpoYRPmBDoNUCRyPdHt63RFVoAnvQR/lSt7cUP8tVg6pQOKnwQ8A ic4/4t7tXIowxmc7e6wqEGyKmp6QcVQ0fKl3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtCn5GVdb8smMgK6t/m9afMsuO3UwHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL3RDbjVHVmRiOHNtTWdLNnRf bTlhZk1zdU8zVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn gjAwDQYJKoZIhvcNAQELBQADggEBAGOszKQHd5qMyzmX0euO/nJ6oMOPdy3ddDvi shuOCY9RrLFEXoWlkXqWHu7q8QFC+EkBJzsWz8OEiArr48WxkBDBaI+zJmlM258M 2Dh9nz9Gr9h2QzmIENkpX59KT0krsYIMyw2YQeu9OoKDM1KQD3921qdSax0ETOMd yzCDlFUKLjhRrRat47sli3PYqJjt4F7NGSvuVfTajRkwOjz1P2Ki06zDv9RxI5tP TOQvCZVQgW/WplG+22K6KKDQVb0YRj/0n1VkYQk3w3BAsaz42yUI/ZpK5pTUrY/q RuKdQLdesVJEKDu/Q/qNXUwN3BQl4WRUoiHi/rLB74JimJUzHo0= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:12 2024 by rpki-client on console-fra.rpki-client.org