$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/gmqhp7x37gyubgp2ojKinidfCxc.roa File: gmqhp7x37gyubgp2ojKinidfCxc.roa (raw, json) Hash identifier: PqYbh6XvbdKd6EFCKk9vqMMjRCohBopfQuHTYQnqAV8= Subject key identifier: 82:6A:A1:A7:BC:77:EE:0C:AE:6E:0A:76:A2:32:A2:9E:27:5F:0B:17 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1075 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gmqhp7x37gyubgp2ojKinidfCxc.roa Signing time: Mon 26 Aug 2024 05:16:26 +0000 ROA not before: Mon 26 Aug 2024 05:16:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 211.77.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4213 (0x1075) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=826AA1A7BC77EE0CAE6E0A76A232A29E275F0B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:27:81:f5:89:f1:7c:30:58:78:59:23:69: be:9b:19:be:f1:83:5e:ff:60:df:f0:69:77:87:87: 19:d5:b9:5d:f5:0f:bf:dc:f7:6a:ec:b2:6f:75:fe: fe:54:c4:19:6a:6d:65:c7:c2:29:4b:4e:24:80:37: cd:90:55:cd:e3:61:ab:40:5a:66:c2:c4:65:8f:55: 49:af:7e:5b:f7:32:4a:36:b2:53:6b:ba:65:e5:0a: 24:c9:fe:e6:08:2d:7f:fc:2f:f2:9f:73:48:39:c1: ff:a1:8e:5f:11:5a:3b:54:b8:a4:b7:19:32:7a:51: 30:c2:b2:10:e2:25:ca:3d:8e:b5:8e:b9:f3:79:7b: dc:b1:70:61:1b:85:5b:b8:00:73:8c:d8:fd:56:5d: 37:04:85:f1:c5:33:cb:01:6f:4d:e0:71:8e:85:77: ee:2f:27:83:99:93:50:56:0a:0c:60:14:19:e6:14: 50:38:c1:91:25:22:3e:c8:3c:97:5d:cc:2c:cf:26: 0f:22:f1:f2:a5:b2:8d:d1:1c:e5:51:dd:99:13:21: 2b:60:99:06:fc:28:d8:ae:f6:86:90:d6:4b:b3:03: 10:85:7a:5c:77:e7:58:46:2f:37:17:06:27:24:6b: 7c:a5:d3:9f:a9:60:a3:a2:da:af:d9:56:f0:f9:54: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6A:A1:A7:BC:77:EE:0C:AE:6E:0A:76:A2:32:A2:9E:27:5F:0B:17 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gmqhp7x37gyubgp2ojKinidfCxc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.77.64.0/18 Signature Algorithm: sha256WithRSAEncryption 1a:12:47:aa:7c:38:fa:c7:3e:32:cc:14:73:84:c5:f7:df:00: bb:0f:35:9a:e8:93:01:1d:8d:31:61:34:80:f6:80:42:6a:d4: b3:67:ff:7f:6b:57:9b:76:61:0b:32:74:15:30:85:3d:84:48: 38:09:cb:ee:61:a6:28:88:7d:14:61:6e:7e:5f:49:6f:fd:e7: 35:e7:9d:73:05:68:4a:9b:f6:eb:f6:fc:d4:e4:2d:de:20:8c: 99:c6:f4:0c:c2:5d:23:0d:64:e7:e7:f6:5a:d9:22:63:57:b5: 5d:09:95:ef:dd:3d:c6:f5:b4:5b:ea:32:cb:b4:ff:07:e4:25: db:f4:a0:76:57:ac:85:34:05:6a:f5:8d:26:b0:1c:41:50:29: 24:3d:ea:58:f0:dc:39:d0:7d:e9:45:4a:5a:6f:d4:f4:0a:94: 35:80:55:34:8f:19:64:29:35:ed:48:83:e3:f2:c2:52:35:24: 50:26:22:ee:7c:e2:d0:21:a5:95:18:a3:8f:47:65:68:ad:f6: f3:09:7c:6a:e6:ad:00:a5:fc:b1:4d:cd:03:e9:e2:2b:1b:63: 84:1f:9c:a1:26:df:79:c7:90:7d:e5:80:be:aa:5c:2e:80:85: ed:10:66:7b:f9:98:e6:63:1c:51:11:66:3e:85:c9:0f:6a:e1: 0d:e3:cd:2d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgyNkFBMUE3QkM3N0VF MENBRTZFMEE3NkEyMzJBMjlFMjc1RjBCMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCQCeB9YnxfDBYeFkjab6bGb7xg17/YN/waXeHhxnVuV31D7/c 92rssm91/v5UxBlqbWXHwilLTiSAN82QVc3jYatAWmbCxGWPVUmvflv3Mko2slNr umXlCiTJ/uYILX/8L/Kfc0g5wf+hjl8RWjtUuKS3GTJ6UTDCshDiJco9jrWOufN5 e9yxcGEbhVu4AHOM2P1WXTcEhfHFM8sBb03gcY6Fd+4vJ4OZk1BWCgxgFBnmFFA4 wZElIj7IPJddzCzPJg8i8fKlso3RHOVR3ZkTIStgmQb8KNiu9oaQ1kuzAxCFelx3 51hGLzcXBicka3yl05+pYKOi2q/ZVvD5VKnXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUgmqhp7x37gyubgp2ojKinidfCxcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2dtcWhwN3gzN2d5dWJncDJvaktpbmlk ZkN4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbTTUAwDQYJ KoZIhvcNAQELBQADggEBABoSR6p8OPrHPjLMFHOExfffALsPNZrokwEdjTFhNID2 gEJq1LNn/39rV5t2YQsydBUwhT2ESDgJy+5hpiiIfRRhbn5fSW/95zXnnXMFaEqb 9uv2/NTkLd4gjJnG9AzCXSMNZOfn9lrZImNXtV0Jle/dPcb1tFvqMsu0/wfkJdv0 oHZXrIU0BWr1jSawHEFQKSQ96ljw3DnQfelFSlpv1PQKlDWAVTSPGWQpNe1Ig+Py wlI1JFAmIu584tAhpZUYo49HZWit9vMJfGrmrQCl/LFNzQPp4isbY4QfnKEm33nH kH3lgL6qXC6Ahe0QZnv5mOZjHFERZj6FyQ9q4Q3jzS0= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org