$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/G4OB_kGikFOHl_0IlFILLrXL-Qs.roa File: G4OB_kGikFOHl_0IlFILLrXL-Qs.roa (raw, json) Hash identifier: z5icdzIEz6tC00jawFG6cEZzPYlBUM3/Xpf5corBa8w= Subject key identifier: 1B:83:81:FE:41:A2:90:53:87:97:FD:08:94:52:0B:2E:B5:CB:F9:0B Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FEC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/G4OB_kGikFOHl_0IlFILLrXL-Qs.roa Signing time: Mon 26 Aug 2024 05:15:53 +0000 ROA not before: Mon 26 Aug 2024 05:15:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 219.91.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4076 (0xfec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1B8381FE41A290538797FD0894520B2EB5CBF90B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:0e:53:8b:d6:19:f7:44:f4:f0:bf:b9:a8: c0:f8:ff:2c:a7:dd:44:7c:44:5d:58:df:18:06:ae: 24:f7:db:40:8c:cb:4a:b7:07:27:2e:10:50:60:3a: 23:e5:32:e5:f8:fe:3c:7e:ca:87:3a:cf:af:64:96: 3e:23:38:22:b1:3d:d0:2b:29:a7:ba:af:b4:97:67: 1b:e7:de:9f:88:24:0c:58:8b:a7:17:3f:39:a4:cb: 42:af:ff:46:9b:e0:a9:9a:03:ec:b7:d9:5d:80:5f: 85:3b:eb:c5:2a:44:d9:7a:4d:d1:48:1f:d2:c2:78: 89:12:77:e5:3d:24:f1:41:5d:f7:95:8a:5c:ab:1b: ea:da:72:c1:2c:9d:d4:7b:cc:af:4f:e4:a4:9e:57: fe:cf:26:51:fb:a6:11:5b:89:d6:f3:f9:6d:b4:4c: e6:6d:47:3a:65:dd:cf:16:5f:93:94:e5:2c:6b:ba: 9b:30:10:af:fd:2a:3a:3f:ba:0b:af:8a:ec:80:74: bc:96:82:b2:06:1d:42:25:39:d2:3e:d1:69:25:5c: 63:12:4e:4c:c4:6c:34:f1:65:61:85:bb:68:93:a0: ec:24:33:25:93:37:0d:a1:21:79:38:4c:1a:ad:5e: 60:36:4e:62:fd:3f:ba:43:5e:19:dd:7d:9a:3d:16: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:83:81:FE:41:A2:90:53:87:97:FD:08:94:52:0B:2E:B5:CB:F9:0B X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/G4OB_kGikFOHl_0IlFILLrXL-Qs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.64.0/22 Signature Algorithm: sha256WithRSAEncryption 19:3e:8f:a2:aa:3a:90:11:1b:68:47:7f:20:7f:5d:49:9b:d8: 26:91:e8:3d:48:69:f2:12:c6:0d:3b:05:a8:ed:ca:f8:fe:1c: ab:40:2a:46:f9:7a:1c:59:82:27:ae:79:65:d9:b8:80:92:ce: df:5b:6a:ff:01:77:e8:41:c5:9e:70:b5:1b:6e:48:71:dd:9d: 01:79:bc:39:2d:bb:68:30:5c:bb:bf:02:a0:9a:44:a0:f5:b9: fd:47:06:85:6a:87:13:c3:0b:e4:6b:fd:50:4f:7b:55:6b:21: d0:ec:8e:0f:3b:9d:8b:d5:dc:54:e1:9f:81:e6:44:2f:72:b4: ea:9b:dd:f2:c5:50:d4:c6:bc:37:9c:29:2b:80:06:16:fd:97: 9e:b4:1d:50:c4:3f:71:7b:21:bd:7e:ca:3f:78:d4:28:28:93: f0:c9:71:3b:18:72:32:c2:72:06:6f:24:03:d4:f6:3c:93:93: 90:76:80:d7:f2:6d:cd:74:0b:43:2c:25:b1:f1:bb:fe:70:01: 08:15:8e:33:7c:38:74:b5:b1:94:1b:4d:6d:ac:06:75:21:2f: e2:2c:5b:ce:a2:7e:e7:b0:f0:97:9a:16:94:18:45:f6:06:ca: 6c:56:e7:ef:c8:38:57:98:eb:b6:12:6e:6b:2c:21:63:c7:1f: 65:8f:dd:5d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD+wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCODM4MUZFNDFBMjkw NTM4Nzk3RkQwODk0NTIwQjJFQjVDQkY5MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxNw5Ti9YZ90T08L+5qMD4/yyn3UR8RF1Y3xgGriT320CMy0q3 BycuEFBgOiPlMuX4/jx+yoc6z69klj4jOCKxPdArKae6r7SXZxvn3p+IJAxYi6cX Pzmky0Kv/0ab4KmaA+y32V2AX4U768UqRNl6TdFIH9LCeIkSd+U9JPFBXfeVilyr G+racsEsndR7zK9P5KSeV/7PJlH7phFbidbz+W20TOZtRzpl3c8WX5OU5Sxrupsw EK/9Kjo/uguviuyAdLyWgrIGHUIlOdI+0WklXGMSTkzEbDTxZWGFu2iToOwkMyWT Nw2hIXk4TBqtXmA2TmL9P7pDXhndfZo9Fr/vAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUG4OB/kGikFOHl/0IlFILLrXL+QswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0c0T0Jfa0dpa0ZPSGxfMElsRklMTHJY TC1Rcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALbW0AwDQYJ KoZIhvcNAQELBQADggEBABk+j6KqOpARG2hHfyB/XUmb2CaR6D1IafISxg07Bajt yvj+HKtAKkb5ehxZgieueWXZuICSzt9bav8Bd+hBxZ5wtRtuSHHdnQF5vDktu2gw XLu/AqCaRKD1uf1HBoVqhxPDC+Rr/VBPe1VrIdDsjg87nYvV3FThn4HmRC9ytOqb 3fLFUNTGvDecKSuABhb9l560HVDEP3F7Ib1+yj941Cgok/DJcTsYcjLCcgZvJAPU 9jyTk5B2gNfybc10C0MsJbHxu/5wAQgVjjN8OHS1sZQbTW2sBnUhL+IsW86ifuew 8JeaFpQYRfYGymxW5+/IOFeY67YSbmssIWPHH2WP3V0= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org