$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/KCoaoUJSr12LBtpli1mhhUy1pdM.roa File: KCoaoUJSr12LBtpli1mhhUy1pdM.roa (raw, json) Hash identifier: 6IYfLsb3x6O09OaqJxN76WaV0rbSxgsrrOXU0deEFP4= Subject key identifier: 28:2A:1A:A1:42:52:AF:5D:8B:06:DA:65:8B:59:A1:85:4C:B5:A5:D3 Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Certificate serial: 0B5B Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/KCoaoUJSr12LBtpli1mhhUy1pdM.roa Signing time: Fri 01 Sep 2023 09:48:56 +0000 ROA not before: Fri 01 Sep 2023 09:48:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4783 IP address blocks: 210.67.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Validity Not Before: Sep 1 09:48:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=282A1AA14252AF5D8B06DA658B59A1854CB5A5D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:25:57:ee:ca:05:72:e2:e6:d8:80:36:87: ed:9a:97:50:ed:d8:66:86:74:c6:9d:48:f8:30:ab: d2:91:19:2a:75:f8:54:ec:16:68:0d:df:e0:c7:bb: b5:a9:3a:73:75:13:35:83:a3:73:54:e9:78:72:82: b5:68:17:bf:7c:89:0b:d0:e3:1d:3a:5d:ef:80:e7: f9:df:3e:b1:38:eb:e9:eb:15:da:30:1b:9d:10:82: b8:d5:ba:09:c2:35:6e:f6:1b:5e:f7:5a:fc:b0:97: fd:76:d8:24:69:e7:3e:27:95:01:0b:60:64:a2:0f: 7d:47:fc:ed:27:53:44:4d:4a:b1:ed:d5:5a:71:4c: 58:97:16:86:39:b4:f6:0e:47:d2:c5:71:cd:22:fd: 27:20:e9:8e:53:f0:5b:f6:61:6f:de:cd:c9:2e:35: 90:8d:6c:c1:05:eb:03:84:31:22:71:28:bb:81:2d: 0e:64:47:77:f2:7b:fe:5a:66:59:2d:5a:48:65:5c: 5e:8e:e1:2c:56:aa:b7:e4:84:7c:b2:5a:63:50:b7: bd:13:12:5d:c3:af:6f:37:77:e7:5b:34:4f:e9:b5: 75:fd:76:ce:c0:3d:e7:2e:d8:26:e1:f7:f9:30:ef: b9:ec:ce:9f:70:6c:13:a5:22:f8:ce:75:7c:6a:5b: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2A:1A:A1:42:52:AF:5D:8B:06:DA:65:8B:59:A1:85:4C:B5:A5:D3 X509v3 Authority Key Identifier: keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/KCoaoUJSr12LBtpli1mhhUy1pdM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.128.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:f9:00:8d:07:c0:95:1e:8d:ee:81:64:61:f0:f9:9c:2d:48: ca:e6:cf:b5:f6:10:29:9d:96:5a:f1:9b:35:91:78:f1:73:54: 2e:1f:40:6b:9a:54:89:c2:22:75:b6:3a:6a:d2:cd:ae:93:96: 29:69:1f:f9:60:b0:4d:a4:be:42:be:46:8e:ad:0d:b3:e5:ce: 35:c1:73:52:9a:6a:61:eb:da:6a:bc:a7:51:03:c9:b6:57:bb: be:2a:e7:8f:36:63:d5:71:57:79:27:cf:f1:a7:6e:f7:22:77: 2b:e8:6f:a9:9c:c8:b9:eb:cc:9a:2e:ea:5e:6d:2e:2d:cf:07: 7d:90:02:af:97:15:8c:c4:ad:6e:e0:08:26:a4:67:67:88:72: d1:d9:8a:f3:6a:d6:a1:ed:a1:6f:24:e5:6a:eb:85:0f:e0:4c: 9f:1b:96:c7:d4:2e:98:4a:14:0b:59:ce:a8:06:19:1d:76:4c: b2:69:99:5c:3f:c0:db:15:11:bf:c4:79:d9:7c:99:99:ce:b3: b3:75:47:db:80:37:29:b8:61:a7:98:ab:e4:e2:b5:55:e5:dc: eb:47:40:c8:82:17:8a:88:d1:c3:ce:13:f3:f0:a3:f4:55:01: 5c:9e:32:1e:e2:90:71:13:e1:62:bb:59:52:db:95:08:51:6f: 21:58:68:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICC1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTZC Qjk0QjQ1N0Y5RDgyQTI5QjVCMkZEOUYzQTQ0MTg4OTlFNzFFQzAeFw0yMzA5MDEw OTQ4NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI4MkExQUExNDI1MkFG NUQ4QjA2REE2NThCNTlBMTg1NENCNUE1RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdDSVX7soFcuLm2IA2h+2al1Dt2GaGdMadSPgwq9KRGSp1+FTs FmgN3+DHu7WpOnN1EzWDo3NU6XhygrVoF798iQvQ4x06Xe+A5/nfPrE46+nrFdow G50QgrjVugnCNW72G173Wvywl/122CRp5z4nlQELYGSiD31H/O0nU0RNSrHt1Vpx TFiXFoY5tPYOR9LFcc0i/Scg6Y5T8Fv2YW/ezckuNZCNbMEF6wOEMSJxKLuBLQ5k R3fye/5aZlktWkhlXF6O4SxWqrfkhHyyWmNQt70TEl3Dr283d+dbNE/ptXX9ds7A Pecu2Cbh9/kw77nszp9wbBOlIvjOdXxqW9t7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKCoaoUJSr12LBtpli1mhhUy1pdMwHwYDVR0jBBgwFoAUlruUtFf52CoptbL9 nzpEGImecewwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVU L2xydVV0RmY1MkNvcHRiTDluenBFR0ltZWNldy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbHJ1VXRGZjUyQ29wdGJMOW56cEVHSW1lY2V3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVUL0tDb2FvVUpTcjEyTEJ0cGxp MW1oaFV5MXBkTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATS Q4AwDQYJKoZIhvcNAQELBQADggEBAD35AI0HwJUeje6BZGHw+ZwtSMrmz7X2ECmd llrxmzWRePFzVC4fQGuaVInCInW2OmrSza6TlilpH/lgsE2kvkK+Ro6tDbPlzjXB c1KaamHr2mq8p1EDybZXu74q5482Y9VxV3knz/Gnbvcidyvob6mcyLnrzJou6l5t Li3PB32QAq+XFYzErW7gCCakZ2eIctHZivNq1qHtoW8k5WrrhQ/gTJ8blsfULphK FAtZzqgGGR12TLJpmVw/wNsVEb/Eedl8mZnOs7N1R9uANym4YaeYq+TitVXl3OtH QMiCF4qI0cPOE/Pwo/RVAVyeMh7ikHET4WK7WVLblQhRbyFYaOo= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:52 2024 by rpki-client on console-ams.rpki-client.org