$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/rK93iBxMGydTLx7FwegK6uJzNiA.roa File: rK93iBxMGydTLx7FwegK6uJzNiA.roa (raw, json) Hash identifier: elDtjg/qPdYSucaV3wPjDXq4GxhSSi1J24crcxQzKzM= Subject key identifier: AC:AF:77:88:1C:4C:1B:27:53:2F:1E:C5:C1:E8:0A:EA:E2:73:36:20 Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 0875 Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/rK93iBxMGydTLx7FwegK6uJzNiA.roa Signing time: Sat 21 Sep 2024 19:22:39 +0000 ROA not before: Sat 21 Sep 2024 19:22:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.148.72.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Sep 21 19:22:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ACAF77881C4C1B27532F1EC5C1E80AEAE2733620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:11:ef:82:6d:0f:5a:ea:cf:26:7f:22:c4:f3: 8e:f8:29:d8:e1:f8:14:5c:33:30:86:20:58:d1:72: 10:9a:d3:92:33:0a:e0:53:2b:3b:6b:48:5c:00:8f: c8:90:bb:b1:b0:cd:65:7a:9c:c6:06:10:6f:fa:30: 7f:26:0a:52:73:6d:c4:c6:5a:08:af:6c:db:bf:f9: b4:67:e4:1f:15:a1:d8:eb:e8:26:83:4c:38:db:18: 95:d0:ab:ff:7a:3e:94:f0:6f:d6:7b:65:33:96:1e: f5:8c:f3:04:94:87:07:7c:0e:90:81:82:f1:46:61: 0f:7b:c3:c4:52:7f:db:f2:2b:c4:f2:0b:60:a0:67: ed:92:f9:27:cf:72:b3:24:3c:30:94:fe:da:77:24: 37:43:99:fa:d6:fb:30:eb:df:cd:79:81:0d:95:45: 49:e9:2d:7b:0e:73:3d:45:0f:75:93:03:27:92:4c: 6f:e0:84:f9:ee:42:5d:4f:8d:e9:55:89:38:68:5e: 59:50:fc:42:f2:26:07:09:d9:6c:8b:27:13:d0:b5: 65:b5:c1:78:f1:52:b9:02:b4:a8:06:15:69:12:e9: 55:05:8e:32:29:07:79:34:24:b2:a3:c4:90:32:da: f6:c2:bc:35:c3:2e:1c:15:78:75:e5:bc:cf:0b:32: d5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AF:77:88:1C:4C:1B:27:53:2F:1E:C5:C1:E8:0A:EA:E2:73:36:20 X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/rK93iBxMGydTLx7FwegK6uJzNiA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.148.72.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:4f:74:36:b2:42:e9:cc:b1:85:c2:a7:b2:c9:e5:e7:70:00: c7:85:5c:bf:9c:e4:5f:c8:b6:f7:cc:60:bf:9d:85:7d:d5:65: bd:d2:8f:aa:d6:48:3f:a0:6f:72:ba:49:f5:5c:3b:fa:94:0b: a8:d9:e5:ed:3f:44:43:bf:06:fa:73:0d:9f:81:bb:d9:f1:e9: 9e:ba:8a:9a:6f:7b:ba:d9:f2:a4:fb:b9:3e:d7:2c:cd:e0:c9: 8d:06:d0:10:ac:78:2a:9a:bb:84:93:f9:7e:48:e2:83:17:1a: 50:2f:c5:31:b6:56:6d:6d:1e:60:a7:88:28:15:ad:58:cb:95: ac:af:58:cf:59:5b:41:ec:37:79:a7:35:9f:d9:e4:0b:46:91: b2:37:41:88:14:cb:b6:50:bd:58:0d:81:a0:fc:7a:5b:55:67: 82:02:d4:c6:ed:9b:5b:21:a7:83:69:96:67:3e:0f:45:28:28: bc:79:ee:ec:bf:ce:89:d0:8f:98:92:8e:88:c5:5d:b9:00:e0: c1:5b:f5:08:8e:ab:e7:8d:2b:e3:cb:6d:d0:7d:34:8f:69:01: fe:39:c5:a3:fa:9a:17:d8:f5:01:2e:ea:4f:1c:fa:eb:7f:7d: 10:c0:02:54:c9:1d:1e:d4:17:7e:57:8e:2b:23:18:74:a4:af: 2f:18:32:64 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNDA5MjEx OTIyMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDQUY3Nzg4MUM0QzFC Mjc1MzJGMUVDNUMxRTgwQUVBRTI3MzM2MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkEe+CbQ9a6s8mfyLE8474Kdjh+BRcMzCGIFjRchCa05IzCuBT KztrSFwAj8iQu7GwzWV6nMYGEG/6MH8mClJzbcTGWgivbNu/+bRn5B8Vodjr6CaD TDjbGJXQq/96PpTwb9Z7ZTOWHvWM8wSUhwd8DpCBgvFGYQ97w8RSf9vyK8TyC2Cg Z+2S+SfPcrMkPDCU/tp3JDdDmfrW+zDr3815gQ2VRUnpLXsOcz1FD3WTAyeSTG/g hPnuQl1PjelViThoXllQ/ELyJgcJ2WyLJxPQtWW1wXjxUrkCtKgGFWkS6VUFjjIp B3k0JLKjxJAy2vbCvDXDLhwVeHXlvM8LMtWFAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUrK93iBxMGydTLx7FwegK6uJzNiAwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL3JLOTNpQnhNR3lkVEx4N0Z3ZWdLNnVK ek5pQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlEgwDQYJ KoZIhvcNAQELBQADggEBAG1PdDayQunMsYXCp7LJ5edwAMeFXL+c5F/ItvfMYL+d hX3VZb3Sj6rWSD+gb3K6SfVcO/qUC6jZ5e0/REO/BvpzDZ+Bu9nx6Z66ippve7rZ 8qT7uT7XLM3gyY0G0BCseCqau4ST+X5I4oMXGlAvxTG2Vm1tHmCniCgVrVjLlayv WM9ZW0HsN3mnNZ/Z5AtGkbI3QYgUy7ZQvVgNgaD8eltVZ4IC1Mbtm1shp4Nplmc+ D0UoKLx57uy/zonQj5iSjojFXbkA4MFb9QiOq+eNK+PLbdB9NI9pAf45xaP6mhfY 9QEu6k8c+ut/fRDAAlTJHR7UF35XjisjGHSkry8YMmQ= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:12 2024 by rpki-client on console-ams.rpki-client.org