$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/Grh3T42zFPLvKzfkYcngZ-Qd_S8.roa File: Grh3T42zFPLvKzfkYcngZ-Qd_S8.roa (raw, json) Hash identifier: sf7q+yCgCGwjhRGFJfXIONwKAbwDT3VBHYqzEKXeIiQ= Subject key identifier: 1A:B8:77:4F:8D:B3:14:F2:EF:2B:37:E4:61:C9:E0:67:E4:1D:FD:2F Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Certificate serial: 0121 Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/Grh3T42zFPLvKzfkYcngZ-Qd_S8.roa Signing time: Wed 09 Oct 2024 00:08:29 +0000 ROA not before: Wed 09 Oct 2024 00:08:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 2914 IP address blocks: 202.160.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Validity Not Before: Oct 9 00:08:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1AB8774F8DB314F2EF2B37E461C9E067E41DFD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dd:a4:93:d5:96:9f:e0:10:7c:55:0e:97:d4: 21:08:a5:ae:a4:6c:31:9d:72:1e:04:52:df:60:51: bb:20:50:5c:d9:17:8d:89:8a:44:7a:7b:b4:5c:53: 95:dd:3d:9e:f3:da:34:ad:42:17:d0:c0:eb:18:93: ff:06:e0:7d:32:10:8b:4b:8a:aa:34:ae:96:a2:ca: 44:2b:dc:93:e8:c9:31:85:84:ba:ad:6d:5d:11:d3: e9:e5:c4:b1:7a:89:c9:df:45:c0:93:c7:a3:54:9d: f0:f1:93:15:cb:fa:1a:8f:b9:ef:9e:6e:e3:8d:c6: b0:50:d1:da:62:01:c8:c8:fd:bc:8c:a1:5d:cd:d6: c9:ba:96:e1:ad:0a:96:e9:91:e9:a8:b8:5b:0e:71: cc:63:82:71:d7:8d:07:a4:88:31:d8:f2:c7:b8:2a: 58:d2:3c:a8:9b:ca:03:fc:78:62:d1:9b:30:9c:1e: 26:17:84:f1:19:c2:8f:35:b8:4e:29:b0:6f:d6:32: 11:5c:43:1c:90:b9:d7:52:53:d2:90:93:79:52:38: 89:d0:e4:07:e7:13:7e:6f:53:f7:64:bb:45:f3:0e: 84:2c:93:5f:57:4f:ee:77:dc:f1:e6:97:42:d7:a0: 79:be:ec:27:28:1a:f1:02:94:00:8f:a7:9d:25:ef: 35:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:77:4F:8D:B3:14:F2:EF:2B:37:E4:61:C9:E0:67:E4:1D:FD:2F X509v3 Authority Key Identifier: keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/Grh3T42zFPLvKzfkYcngZ-Qd_S8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.80.0/21 Signature Algorithm: sha256WithRSAEncryption 01:dc:93:c4:3f:62:72:bf:6a:46:6e:8b:d3:94:12:be:cd:3f: 68:c8:e0:8e:51:98:a0:a7:13:1e:f9:cc:ea:06:1e:8d:6e:01: 97:ff:6d:ed:6e:d2:c6:41:a9:64:18:01:d8:9d:99:5d:d6:cd: c6:76:3d:a5:de:19:7e:e7:ea:cb:ba:14:b6:df:74:98:5b:1b: e1:84:82:a1:e2:7f:07:5c:b9:55:4c:dd:3b:be:b8:c1:90:2f: 5a:88:3e:e5:42:c7:57:4a:5a:be:8d:53:2b:f2:d4:9a:2f:7a: 60:3f:2d:a4:ec:60:e9:c0:06:c0:ea:c7:d2:bb:00:d2:03:68: d7:f7:03:1a:31:0f:66:89:1b:02:3c:62:79:4e:a4:82:91:54: 36:bd:03:69:c6:4b:11:7a:6e:4f:67:d9:a2:f3:b8:0b:fa:57: c6:15:64:8a:eb:d5:31:4c:6b:b0:f0:9e:66:2f:8a:bd:41:14: 6d:4c:c1:c7:19:01:3f:3b:8a:35:d7:f3:73:da:cd:91:53:51: 43:c8:f6:a8:9d:6b:e4:fd:88:3f:ff:66:be:d1:dc:ac:b2:04: 4a:81:57:56:4c:60:cd:d9:2c:04:2f:24:5d:38:d8:05:13:71: 10:3e:37:79:a6:b9:9c:b4:2d:75:ce:cb:ba:42:47:bb:d5:8c: 63:02:41:1e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICASEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNDEwMDkw MDA4MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBQjg3NzRGOERCMzE0 RjJFRjJCMzdFNDYxQzlFMDY3RTQxREZEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH3aST1Zaf4BB8VQ6X1CEIpa6kbDGdch4EUt9gUbsgUFzZF42J ikR6e7RcU5XdPZ7z2jStQhfQwOsYk/8G4H0yEItLiqo0rpaiykQr3JPoyTGFhLqt bV0R0+nlxLF6icnfRcCTx6NUnfDxkxXL+hqPue+ebuONxrBQ0dpiAcjI/byMoV3N 1sm6luGtCpbpkemouFsOccxjgnHXjQekiDHY8se4KljSPKibygP8eGLRmzCcHiYX hPEZwo81uE4psG/WMhFcQxyQuddSU9KQk3lSOInQ5AfnE35vU/dku0XzDoQsk19X T+533PHml0LXoHm+7CcoGvEClACPp50l7zULAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUGrh3T42zFPLvKzfkYcngZ+Qd/S8wHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9 HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL0dyaDNUNDJ6RlBM dkt6ZmtZY25nWi1RZF9TOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPKoFAwDQYJKoZIhvcNAQELBQADggEBAAHck8Q/YnK/akZui9OUEr7NP2jI 4I5RmKCnEx75zOoGHo1uAZf/be1u0sZBqWQYAdidmV3WzcZ2PaXeGX7n6su6FLbf dJhbG+GEgqHifwdcuVVM3Tu+uMGQL1qIPuVCx1dKWr6NUyvy1JovemA/LaTsYOnA BsDqx9K7ANIDaNf3AxoxD2aJGwI8YnlOpIKRVDa9A2nGSxF6bk9n2aLzuAv6V8YV ZIrr1TFMa7DwnmYvir1BFG1MwccZAT87ijXX83PazZFTUUPI9qida+T9iD//Zr7R 3KyyBEqBV1ZMYM3ZLAQvJF042AUTcRA+N3mmuZy0LXXOy7pCR7vVjGMCQR4= -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:18 2024 by rpki-client on console-ams.rpki-client.org