$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/KgxK8MobaRd4UMQIFbfEi4GKv94.roa File: KgxK8MobaRd4UMQIFbfEi4GKv94.roa (raw, json) Hash identifier: +bPoKcjnplhpjEn8QLy5sv4OEscwIrW7XBHpyfN5Y14= Subject key identifier: 2A:0C:4A:F0:CA:1B:69:17:78:50:C4:08:15:B7:C4:8B:81:8A:BF:DE Certificate issuer: /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9 Certificate serial: 0BFD Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/KgxK8MobaRd4UMQIFbfEi4GKv94.roa Signing time: Mon 26 Aug 2024 05:32:29 +0000 ROA not before: Mon 26 Aug 2024 05:32:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18185 IP address blocks: 211.76.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 09:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9 Validity Not Before: Aug 26 05:32:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2A0C4AF0CA1B69177850C40815B7C48B818ABFDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:49:a4:33:bb:57:e0:42:7c:15:4f:fd:50: 68:50:25:e8:cd:93:d0:74:0a:05:c4:c9:f4:b5:a6: 58:37:ba:91:bd:73:37:0f:18:f2:f7:71:a5:83:c1: 4f:fc:fe:22:f9:e0:08:4c:98:29:77:c0:5f:cf:ee: 00:36:85:8d:38:c8:83:cb:ba:2d:b9:7d:22:3f:a1: e8:17:1a:67:68:30:61:c6:02:fb:84:00:d9:6a:ec: 99:6e:eb:b4:c4:04:82:22:a4:d4:45:8a:47:15:79: 70:d0:2f:28:75:80:06:32:34:33:9d:7d:c2:66:33: 8d:93:4b:da:20:42:7c:bc:e5:bb:6b:db:d5:14:b8: a4:26:2a:d4:7b:77:a9:c2:2e:c0:ff:c5:83:c7:57: a9:63:fa:bb:ee:e0:b0:eb:1a:b7:7f:74:06:a4:2f: 37:b3:c6:dd:70:ee:82:3d:58:40:c5:b9:f7:4f:39: ee:db:da:57:a5:34:e1:ce:2e:32:20:26:b7:eb:54: 61:28:fb:f2:67:28:c9:58:74:2e:44:2e:9d:c2:75: ae:f9:a1:00:af:2f:56:68:16:98:6b:65:fb:8b:a6: c3:78:a0:9b:12:cc:82:73:26:dd:ba:9f:3b:40:6f: 62:82:59:41:01:e7:3c:e3:90:84:71:82:57:18:6a: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0C:4A:F0:CA:1B:69:17:78:50:C4:08:15:B7:C4:8B:81:8A:BF:DE X509v3 Authority Key Identifier: keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/KgxK8MobaRd4UMQIFbfEi4GKv94.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.240.0/20 Signature Algorithm: sha256WithRSAEncryption a8:34:a0:40:2d:73:17:3d:8c:24:f4:03:be:37:ce:79:c5:b0: fc:d7:6f:40:f8:61:6a:89:23:ef:7d:ae:0b:96:99:81:ea:1a: 2a:b5:c5:39:38:3f:03:e7:47:52:f1:b3:cc:44:13:6d:6f:23: 32:26:08:19:4e:83:0a:ae:d5:4f:4c:94:24:9f:7b:6e:ee:b9: 2d:28:64:ce:76:3c:89:c4:20:2c:d0:12:29:b9:44:0c:a6:f4: 84:18:63:d6:45:f6:21:99:0d:3e:8d:a6:31:34:9b:42:a9:d0: df:e1:48:8f:8a:09:ca:33:ac:d0:e0:ca:47:d5:b0:78:59:6d: 67:fd:9a:c9:2f:33:0a:76:d0:84:fb:a8:3a:01:bb:2c:4c:5f: a0:65:70:a4:91:96:81:4b:e1:82:fc:48:db:8c:0d:a8:5e:e2: 73:b7:62:f4:87:d5:96:12:2a:53:6c:83:37:e4:4e:c7:79:0f: 28:9c:b4:a1:b3:e7:9d:a4:c6:6f:31:14:43:7e:4c:ca:fc:ee: 88:5a:1b:3e:b0:f4:34:5d:29:c3:bc:03:c4:ec:c2:50:61:69: 66:f2:9d:dc:3f:15:44:bc:e3:8b:af:b3:80:d5:62:48:cf:65: e7:87:68:89:0b:14:24:f6:b7:e5:66:43:28:53:4d:95:e3:22: 52:c8:b0:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUQ5 MkJFMEFDRjk4ODdCMUE4MTkyODc1Q0ZFNzMyMjM4REUzMjJBOTAeFw0yNDA4MjYw NTMyMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBMEM0QUYwQ0ExQjY5 MTc3ODUwQzQwODE1QjdDNDhCODE4QUJGREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEl0mkM7tX4EJ8FU/9UGhQJejNk9B0CgXEyfS1plg3upG9czcP GPL3caWDwU/8/iL54AhMmCl3wF/P7gA2hY04yIPLui25fSI/oegXGmdoMGHGAvuE ANlq7Jlu67TEBIIipNRFikcVeXDQLyh1gAYyNDOdfcJmM42TS9ogQny85btr29UU uKQmKtR7d6nCLsD/xYPHV6lj+rvu4LDrGrd/dAakLzezxt1w7oI9WEDFufdPOe7b 2lelNOHOLjIgJrfrVGEo+/JnKMlYdC5ELp3Cda75oQCvL1ZoFphrZfuLpsN4oJsS zIJzJt26nztAb2KCWUEB5zzjkIRxglcYaqsBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKgxK8MobaRd4UMQIFbfEi4GKv94wHwYDVR0jBBgwFoAUHZK+Cs+Yh7GoGSh1 z+cyI43jIqkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RV L0haSy1Dcy1ZaDdHb0dTaDF6LWN5STQzaklxay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSFpLLUNzLVloN0dvR1NoMXotY3lJNDNqSXFrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RVL0tneEs4TW9iYVJkNFVNUUlG YmZFaTRHS3Y5NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATT TPAwDQYJKoZIhvcNAQELBQADggEBAKg0oEAtcxc9jCT0A743znnFsPzXb0D4YWqJ I+99rguWmYHqGiq1xTk4PwPnR1Lxs8xEE21vIzImCBlOgwqu1U9MlCSfe27uuS0o ZM52PInEICzQEim5RAym9IQYY9ZF9iGZDT6NpjE0m0Kp0N/hSI+KCcozrNDgykfV sHhZbWf9mskvMwp20IT7qDoBuyxMX6BlcKSRloFL4YL8SNuMDahe4nO3YvSH1ZYS KlNsgzfkTsd5DyictKGz552kxm8xFEN+TMr87ohaGz6w9DRdKcO8A8TswlBhaWby ndw/FUS844uvs4DVYkjPZeeHaIkLFCT2t+VmQyhTTZXjIlLIsKo= -----END CERTIFICATE-----Generated at Sat Sep 21 06:24:11 2024 by rpki-client on console-fra.rpki-client.org