$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/kz-VnYsvpUje3MnYLF69Jsvu3cM.roa File: kz-VnYsvpUje3MnYLF69Jsvu3cM.roa (raw, json) Hash identifier: rh+NHWW0Rc84xYiJFSTFHh/N52BZQM+bs9+7z5QVhQA= Subject key identifier: 93:3F:95:9D:8B:2F:A5:48:DE:DC:C9:D8:2C:5E:BD:26:CB:EE:DD:C3 Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Certificate serial: 02A9 Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/kz-VnYsvpUje3MnYLF69Jsvu3cM.roa Signing time: Sun 22 Sep 2024 17:56:58 +0000 ROA not before: Sun 22 Sep 2024 17:56:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.180.20.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Validity Not Before: Sep 22 17:56:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=933F959D8B2FA548DEDCC9D82C5EBD26CBEEDDC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c9:3d:a2:d4:f8:36:d5:c4:84:0b:1d:b8:44: ee:44:3a:b0:37:61:55:41:93:77:14:6a:66:2f:62: 2c:14:77:4b:1b:9f:c9:ff:49:41:57:b7:28:8f:5a: e7:32:94:af:d7:c7:c6:cc:d1:fe:31:6f:19:f2:d1: e1:ad:99:b4:70:c2:cf:ac:1d:f2:d1:43:62:c2:3a: 35:d0:dc:60:05:b8:2a:e1:f2:ef:04:25:03:26:8b: 9b:89:97:91:e3:0e:db:95:03:8a:01:92:2f:d1:f4: ab:5a:67:1f:5c:ba:16:bb:f4:8b:18:11:3f:3a:d7: 98:38:08:ce:3c:5b:5d:2b:c1:b7:86:3b:ce:57:e7: a3:1c:b0:be:05:65:6a:e1:a4:c2:f3:a8:1e:27:d1: 6b:bf:3e:92:93:e1:18:a4:10:7e:29:5b:af:df:5c: 31:40:86:74:23:77:0e:61:8d:de:70:f0:2b:45:49: b5:e8:68:14:49:e5:d4:2b:06:48:9b:ca:ba:9c:a9: b8:77:c9:b3:b2:64:d5:86:b3:9a:e1:e2:92:a9:62: a4:f4:1b:23:2e:b5:7d:73:2f:07:eb:c8:18:d4:06: dd:fc:5c:e1:50:73:b0:37:e6:85:4e:28:f6:60:18: 5c:83:ae:c3:25:a7:ab:26:65:e7:0f:71:bd:0e:8a: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3F:95:9D:8B:2F:A5:48:DE:DC:C9:D8:2C:5E:BD:26:CB:EE:DD:C3 X509v3 Authority Key Identifier: keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/kz-VnYsvpUje3MnYLF69Jsvu3cM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.180.20.0/23 Signature Algorithm: sha256WithRSAEncryption 82:af:13:64:cf:b9:9c:af:49:2a:3b:47:9e:5c:cc:b9:fe:9c: f8:95:7c:49:78:cc:05:0e:72:f7:19:57:7d:df:00:75:b1:35: 1a:2a:6d:4d:35:70:c0:b0:57:2d:34:03:4d:6a:04:85:bb:d2: d7:03:fe:64:ed:3e:a2:3a:1e:6f:64:13:3c:af:19:ae:7f:3f: 2d:a4:48:04:83:77:b8:b3:4d:7a:ba:2b:f1:0b:32:38:2c:9d: 28:90:5f:0a:b4:69:1c:22:a7:95:28:4a:2b:c4:19:41:b3:01: a6:b8:fc:cc:d7:71:91:88:aa:ed:7a:f5:dd:74:55:3d:18:5c: 24:40:b7:b3:eb:54:21:ed:a8:91:49:54:1d:bc:20:e6:56:5e: 47:15:32:15:07:f8:e5:e8:6f:5d:2a:f8:47:d9:56:ae:9b:e2: cb:fa:dd:f1:5e:7e:9a:86:c2:f9:40:7d:b9:0e:30:c8:b9:6a: 35:87:63:5a:a8:64:dd:6e:6d:6f:38:65:36:4e:42:7d:12:c3: 01:75:e8:d3:37:38:92:84:02:6c:d5:eb:59:84:ea:fa:12:c3: 5a:84:a5:c3:63:0e:b0:0d:a9:53:44:18:a2:dd:c3:ac:9c:40: 7b:4f:fc:de:f6:ef:0f:1e:76:d3:db:d4:9b:80:e1:34:7b:56: 1e:40:6b:69 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUI2 MDY5NkQ2ODc3M0FFMkU1MzJGMENENUQxMEZEQzBDODI3M0VBNTAeFw0yNDA5MjIx NzU2NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkzM0Y5NTlEOEIyRkE1 NDhERURDQzlEODJDNUVCRDI2Q0JFRUREQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkyT2i1Pg21cSECx24RO5EOrA3YVVBk3cUamYvYiwUd0sbn8n/ SUFXtyiPWucylK/Xx8bM0f4xbxny0eGtmbRwws+sHfLRQ2LCOjXQ3GAFuCrh8u8E JQMmi5uJl5HjDtuVA4oBki/R9KtaZx9cuha79IsYET8615g4CM48W10rwbeGO85X 56McsL4FZWrhpMLzqB4n0Wu/PpKT4RikEH4pW6/fXDFAhnQjdw5hjd5w8CtFSbXo aBRJ5dQrBkibyrqcqbh3ybOyZNWGs5rh4pKpYqT0GyMutX1zLwfryBjUBt38XOFQ c7A35oVOKPZgGFyDrsMlp6smZecPcb0Oiu39AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUkz+VnYsvpUje3MnYLF69Jsvu3cMwHwYDVR0jBBgwFoAUm2BpbWh3OuLlMvDN XRD9wMgnPqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL20y QnBiV2gzT3VMbE12RE5YUkQ5d01nblBxVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bTJCcGJXaDNPdUxsTXZETlhSRDl3TWduUHFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL2t6LVZuWXN2cFVqZTNNbllMRjY5SnN2 dTNjTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntBQwDQYJ KoZIhvcNAQELBQADggEBAIKvE2TPuZyvSSo7R55czLn+nPiVfEl4zAUOcvcZV33f AHWxNRoqbU01cMCwVy00A01qBIW70tcD/mTtPqI6Hm9kEzyvGa5/Py2kSASDd7iz TXq6K/ELMjgsnSiQXwq0aRwip5UoSivEGUGzAaa4/MzXcZGIqu169d10VT0YXCRA t7PrVCHtqJFJVB28IOZWXkcVMhUH+OXob10q+EfZVq6b4sv63fFefpqGwvlAfbkO MMi5ajWHY1qoZN1ubW84ZTZOQn0SwwF16NM3OJKEAmzV61mE6voSw1qEpcNjDrAN qVNEGKLdw6ycQHtP/N727w8edtPb1JuA4TR7Vh5Aa2k= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:45 2024 by rpki-client on console-fra.rpki-client.org