$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/TGyxLiFanI4WKj3NQvaVHsDZqYU.roa File: TGyxLiFanI4WKj3NQvaVHsDZqYU.roa (raw, json) Hash identifier: 4gk3kMMNslq3iXjetLzSTBZQHUCz/M5e2b5CSQIfvoc= Subject key identifier: 4C:6C:B1:2E:21:5A:9C:8E:16:2A:3D:CD:42:F6:95:1E:C0:D9:A9:85 Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25 Certificate serial: 0C32 Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/TGyxLiFanI4WKj3NQvaVHsDZqYU.roa Signing time: Mon 26 Aug 2024 05:12:59 +0000 ROA not before: Mon 26 Aug 2024 05:12:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10135 IP address blocks: 61.64.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25 Validity Not Before: Aug 26 05:12:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4C6CB12E215A9C8E162A3DCD42F6951EC0D9A985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:15:d4:cd:3e:d5:82:ca:f6:43:cd:db:c2: 2f:ab:74:47:88:b0:31:05:ce:22:5e:7c:1c:33:a8: ef:fd:54:8a:f0:11:59:b1:29:e1:f7:72:bd:51:71: 4f:a3:51:b4:d5:fe:cc:7f:c9:ef:0a:57:c9:84:d8: ce:cc:50:5d:d6:62:68:d2:d3:9a:fa:53:e6:ed:f8: a6:27:2f:38:06:a3:27:2a:5a:a6:39:55:ea:7e:79: 7b:11:d7:4c:34:8f:e4:25:d6:42:95:e7:9d:1c:bb: 61:8f:ac:6a:f0:d5:b2:1f:30:78:0b:2b:18:ca:20: 7a:83:9d:ee:25:8f:b7:b4:df:be:e9:9e:e5:ac:00: 66:5c:35:d9:83:90:50:f8:16:14:dd:c4:1f:b8:13: b9:50:c9:99:3e:2d:df:12:84:16:88:65:19:d0:64: 6d:32:74:fa:d0:97:31:7e:28:e1:b1:92:60:cf:c0: 84:c7:0e:89:9c:bc:e4:53:ed:18:31:9e:f5:2f:cc: 6c:fe:b2:5e:b1:1f:0c:40:d0:c4:b5:ee:b3:89:b6: ec:72:55:0e:76:bb:20:5d:07:12:1d:d0:91:06:bd: 1e:81:78:0e:22:af:30:3f:d2:b6:98:64:c3:bd:a5: 6d:a8:c2:3e:6f:fd:c4:eb:14:e8:87:cd:eb:83:03: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6C:B1:2E:21:5A:9C:8E:16:2A:3D:CD:42:F6:95:1E:C0:D9:A9:85 X509v3 Authority Key Identifier: keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/TGyxLiFanI4WKj3NQvaVHsDZqYU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.48.0/20 Signature Algorithm: sha256WithRSAEncryption 32:e9:80:1a:a3:52:5a:b6:07:37:bf:35:97:94:9f:60:2d:15: 1b:1e:c1:cf:88:75:92:50:d8:0d:b5:f9:cd:c6:42:f4:2c:41: 62:8f:54:82:f9:e5:f5:c4:92:d5:7c:f4:39:d2:c0:70:2a:8c: d0:ee:5d:6b:98:48:4b:ac:d9:15:d2:86:aa:40:b9:24:52:fa: ff:2f:4c:ac:5c:48:31:94:27:5e:00:cc:52:4e:1c:94:d3:40: f5:5f:c6:6c:ae:a1:4f:ac:cf:91:7e:4d:12:6e:39:0d:8f:d7: cd:42:f9:c0:43:ab:1a:61:32:d0:2f:ce:5b:12:04:c5:a6:e5: 8e:59:01:37:65:a6:42:27:ba:9f:4b:8b:b0:ff:cb:73:1e:f4: 9d:50:67:c2:b0:a0:fd:f2:8a:bf:77:d8:99:0b:e6:b7:a5:ab: 03:20:3e:80:28:47:95:05:39:4f:3e:3c:cd:22:61:c5:74:5a: bd:01:0d:c2:21:a0:ab:42:ff:c5:fc:79:17:8e:e6:1e:4f:cb: 96:cc:2a:d9:75:09:d1:b2:e5:2a:4c:c3:48:97:b1:aa:aa:1e: 6d:56:20:fe:c0:5d:d0:5b:2a:2a:65:aa:71:f1:0a:aa:db:e4: e3:b1:bb:2d:5a:08:10:7d:7f:de:52:1b:46:82:c5:0c:24:5c: 8c:e3:8d:6d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTUy QjE2MTY0QzM2MTA0MEQ4OEYzMkQzNjUwOTQ0OENGM0JCOUQyNTAeFw0yNDA4MjYw NTEyNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRDNkNCMTJFMjE1QTlD OEUxNjJBM0RDRDQyRjY5NTFFQzBEOUE5ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCehXUzT7Vgsr2Q83bwi+rdEeIsDEFziJefBwzqO/9VIrwEVmx KeH3cr1RcU+jUbTV/sx/ye8KV8mE2M7MUF3WYmjS05r6U+bt+KYnLzgGoycqWqY5 Vep+eXsR10w0j+Ql1kKV550cu2GPrGrw1bIfMHgLKxjKIHqDne4lj7e0377pnuWs AGZcNdmDkFD4FhTdxB+4E7lQyZk+Ld8ShBaIZRnQZG0ydPrQlzF+KOGxkmDPwITH DomcvORT7RgxnvUvzGz+sl6xHwxA0MS17rOJtuxyVQ52uyBdBxId0JEGvR6BeA4i rzA/0raYZMO9pW2owj5v/cTrFOiHzeuDA9Y1AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUTGyxLiFanI4WKj3NQvaVHsDZqYUwHwYDVR0jBBgwFoAUVSsWFkw2EEDYjzLT ZQlEjPO7nSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRUFTUE5F VC9WU3NXRmt3MkVFRFlqekxUWlFsRWpQTzduU1UuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1ZTc1dGa3cyRUVEWWp6TFRaUWxFalBPN25TVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0VBU1BORVQvVEd5eExpRmFuSTRXS2oz TlF2YVZIc0RacVlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BD1AMDANBgkqhkiG9w0BAQsFAAOCAQEAMumAGqNSWrYHN781l5SfYC0VGx7Bz4h1 klDYDbX5zcZC9CxBYo9Ugvnl9cSS1Xz0OdLAcCqM0O5da5hIS6zZFdKGqkC5JFL6 /y9MrFxIMZQnXgDMUk4clNNA9V/GbK6hT6zPkX5NEm45DY/XzUL5wEOrGmEy0C/O WxIExabljlkBN2WmQie6n0uLsP/Lcx70nVBnwrCg/fKKv3fYmQvmt6WrAyA+gChH lQU5Tz48zSJhxXRavQENwiGgq0L/xfx5F47mHk/Llswq2XUJ0bLlKkzDSJexqqoe bVYg/sBd0FsqKmWqcfEKqtvk47G7LVoIEH1/3lIbRoLFDCRcjOONbQ== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:03 2024 by rpki-client on console-ams.rpki-client.org