$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/GGRUtOMsmpHlwo8ECUNDlfNybTs.roa File: GGRUtOMsmpHlwo8ECUNDlfNybTs.roa (raw, json) Hash identifier: Dyzsop4OBvKWqKpmOGTBWuFfWn4IOgjeq9yLQ/ywrPs= Subject key identifier: 18:64:54:B4:E3:2C:9A:91:E5:C2:8F:04:09:43:43:95:F3:72:6D:3B Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Certificate serial: 0B5B Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/GGRUtOMsmpHlwo8ECUNDlfNybTs.roa Signing time: Fri 01 Sep 2023 08:36:08 +0000 ROA not before: Fri 01 Sep 2023 08:36:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 138915 IP address blocks: 43.224.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 14:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Validity Not Before: Sep 1 08:36:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=186454B4E32C9A91E5C28F0409434395F3726D3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:46:c2:ea:e7:20:83:cf:0c:00:54:1e:94: 8d:cd:59:11:fa:e9:59:94:2b:fd:7a:52:9f:77:4c: ff:f3:65:42:b9:44:0b:89:a8:68:ea:dc:e7:5f:6d: 7c:a9:5b:ec:81:60:5e:20:f0:6e:ee:28:5d:fa:78: 8f:1a:65:5e:8e:b1:3b:44:51:56:d4:ab:f3:56:c3: 89:1e:40:b7:1c:e6:a8:d7:00:2f:23:fd:cc:2e:1b: a1:e2:21:5c:e4:3a:6b:a3:18:59:ea:ed:54:cb:65: 95:75:b1:6a:5d:59:a6:4f:93:9f:64:e6:74:52:c8: 4f:d6:e5:c1:d6:06:c6:b2:5f:5f:35:d9:8a:0e:a3: 21:72:ae:3d:88:0d:ff:67:32:ec:14:b7:44:b6:79: 2c:63:eb:da:4c:7a:1f:f6:0d:bc:6e:25:d3:d0:cb: 76:95:d2:17:f1:8f:b6:18:69:e4:68:0e:3a:d3:33: f3:7e:5b:f3:f0:0d:58:f8:fb:f4:4f:9d:cd:ca:ba: 98:22:72:c2:0e:d0:de:4a:02:a2:fd:ab:5e:69:0e: be:bc:ee:4f:10:84:27:51:10:2e:d6:3d:63:51:31: 92:1a:ca:1b:89:dd:6f:e7:f0:8b:3c:70:88:15:b6: 8f:ae:95:32:af:4e:f2:b4:45:fc:36:31:e1:d2:00: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:64:54:B4:E3:2C:9A:91:E5:C2:8F:04:09:43:43:95:F3:72:6D:3B X509v3 Authority Key Identifier: keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/GGRUtOMsmpHlwo8ECUNDlfNybTs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.224.20.0/24 Signature Algorithm: sha256WithRSAEncryption 66:81:fa:2f:cc:2c:82:39:59:1f:f2:31:47:7b:09:fc:ee:8f: 61:a4:80:0c:ea:e9:cf:ee:5c:36:89:72:6f:ad:af:e3:d1:d6: ba:2b:b9:df:d0:c5:7d:9d:21:e2:82:99:5a:8c:13:47:4a:79: 31:a8:ac:70:9f:d8:6c:e0:b6:4b:c5:c7:60:79:b2:2a:aa:fe: 70:9b:f6:d2:a7:6d:73:2b:e3:ab:a2:5c:34:8a:86:c5:97:6a: a6:38:e8:09:8a:04:b2:c8:aa:09:1e:e1:9d:b6:61:55:77:ac: fc:27:2b:90:cc:5b:35:c3:e6:cc:17:cd:23:47:01:ca:ae:af: 4c:06:fb:ab:7b:fc:4e:3c:be:58:3c:4a:10:fc:38:d6:48:da: 22:3c:f7:4f:af:0f:34:c7:eb:0a:77:66:5e:c7:d3:6b:61:82: 6d:f4:20:cc:52:74:a5:4a:f7:c4:25:72:74:3b:d8:dc:b2:b9: 52:77:00:cc:b6:4b:6f:ec:b2:08:66:5c:0b:d6:31:02:57:78: 4d:8f:1f:b1:1e:41:ce:d5:96:16:dc:1f:81:9d:79:4a:c9:66: 8e:e6:24:26:9b:5e:7f:db:0b:65:73:da:2d:96:d9:6e:7f:39: 8c:6c:67:42:fa:ed:e0:1c:51:34:28:0a:81:bb:45:ab:50:82: 9e:9e:3d:2d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICC1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yMzA5MDEw ODM2MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE4NjQ1NEI0RTMyQzlB OTFFNUMyOEYwNDA5NDM0Mzk1RjM3MjZEM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8OkbC6ucgg88MAFQelI3NWRH66VmUK/16Up93TP/zZUK5RAuJ qGjq3OdfbXypW+yBYF4g8G7uKF36eI8aZV6OsTtEUVbUq/NWw4keQLcc5qjXAC8j /cwuG6HiIVzkOmujGFnq7VTLZZV1sWpdWaZPk59k5nRSyE/W5cHWBsayX1812YoO oyFyrj2IDf9nMuwUt0S2eSxj69pMeh/2DbxuJdPQy3aV0hfxj7YYaeRoDjrTM/N+ W/PwDVj4+/RPnc3KupgicsIO0N5KAqL9q15pDr687k8QhCdREC7WPWNRMZIayhuJ 3W/n8Is8cIgVto+ulTKvTvK0Rfw2MeHSAL/TAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUGGRUtOMsmpHlwo8ECUNDlfNybTswHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9HR1JVdE9Nc21wSGx3bzhFQ1VO RGxmTnliVHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+AU MA0GCSqGSIb3DQEBCwUAA4IBAQBmgfovzCyCOVkf8jFHewn87o9hpIAM6unP7lw2 iXJvra/j0da6K7nf0MV9nSHigplajBNHSnkxqKxwn9hs4LZLxcdgebIqqv5wm/bS p21zK+Orolw0iobFl2qmOOgJigSyyKoJHuGdtmFVd6z8JyuQzFs1w+bMF80jRwHK rq9MBvure/xOPL5YPEoQ/DjWSNoiPPdPrw80x+sKd2Zex9NrYYJt9CDMUnSlSvfE JXJ0O9jcsrlSdwDMtktv7LIIZlwL1jECV3hNjx+xHkHO1ZYW3B+BnXlKyWaO5iQm m15/2wtlc9otltlufzmMbGdC+u3gHFE0KAqBu0WrUIKenj0t -----END CERTIFICATE-----Generated at Thu May 23 23:46:19 2024 by rpki-client on console-fra.rpki-client.org