$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/C1QQG2tRl6tKpJXkbqe8n_1Gsbk.roa File: C1QQG2tRl6tKpJXkbqe8n_1Gsbk.roa (raw, json) Hash identifier: /mFn0Kk6tU0kw6mtSp+yn3A3cc40csb0Fk/WAQB6pOQ= Subject key identifier: 0B:54:10:1B:6B:51:97:AB:4A:A4:95:E4:6E:A7:BC:9F:FD:46:B1:B9 Certificate issuer: /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762 Certificate serial: 030F Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/C1QQG2tRl6tKpJXkbqe8n_1Gsbk.roa Signing time: Mon 26 Aug 2024 05:17:06 +0000 ROA not before: Mon 26 Aug 2024 05:17:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7483 IP address blocks: 103.170.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762 Validity Not Before: Aug 26 05:17:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0B54101B6B5197AB4AA495E46EA7BC9FFD46B1B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:d9:58:8b:fd:09:94:db:04:43:1f:06:fa: c7:52:9b:87:bd:16:ef:f5:2b:c6:84:c6:5f:7d:78: a6:20:24:cf:a3:67:8b:da:40:84:88:0d:30:9e:ec: 9a:71:b2:89:c4:ca:9c:f1:69:31:e0:cc:40:ef:29: 4c:83:52:1e:23:2b:68:1a:3b:41:06:b8:a6:f3:17: da:28:e8:03:b8:97:d3:d5:d7:87:b4:cf:0c:4e:74: 83:6b:45:79:6e:a4:ec:67:bf:45:28:cf:31:9f:19: a3:81:5a:38:51:67:89:c8:ff:c9:12:e0:98:d4:74: 9d:85:e5:f4:1d:d2:28:53:c9:a1:49:10:c0:94:d7: 94:23:f2:5f:d8:47:4c:ff:14:ee:4c:89:c3:06:16: 63:29:c6:9a:7d:37:d9:6f:be:67:07:63:44:98:7d: a6:cd:d3:4c:8d:5d:c7:99:eb:27:54:a0:db:79:76: 15:ec:9d:be:41:08:ae:fe:50:43:33:5b:9b:ef:15: 82:eb:c2:0c:e5:1f:c5:b0:7e:2c:6d:3e:76:64:06: cc:12:76:4b:23:53:8c:fa:07:1c:c0:4e:3d:55:1e: a3:8d:c9:d8:cb:c8:8f:85:4e:f7:a6:b3:39:60:a4: e4:cb:eb:6a:35:8b:20:11:03:1a:df:a8:0f:b1:e7: 92:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:54:10:1B:6B:51:97:AB:4A:A4:95:E4:6E:A7:BC:9F:FD:46:B1:B9 X509v3 Authority Key Identifier: keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/C1QQG2tRl6tKpJXkbqe8n_1Gsbk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.170.14.0/24 Signature Algorithm: sha256WithRSAEncryption 18:49:04:f3:84:c9:60:e1:10:e5:bd:00:e3:8a:9c:a3:ac:72: ab:07:b3:a3:7a:26:b5:22:65:d4:92:d4:4f:80:5d:f3:c4:1d: 3c:60:c5:90:ca:74:34:f1:ab:f6:b0:17:82:53:88:d7:41:d6: be:8d:e8:9f:0d:03:4a:e6:cb:11:d6:77:ce:f0:9c:bc:bc:4a: c2:83:ba:a3:eb:12:2e:77:e1:f7:57:b4:1f:67:51:2e:ce:fb: 63:ce:93:f0:ed:51:84:81:de:8b:5d:94:ee:48:07:eb:4e:97: db:1e:66:e7:00:f8:35:96:2c:19:b7:30:af:49:7f:e4:f1:7d: 4e:3e:6a:90:9e:c5:d6:5b:2e:e9:8b:c6:7a:ad:81:fd:19:5e: 3b:bb:1b:ab:51:6d:c3:f5:75:96:2b:34:38:24:55:a3:bc:91: 37:6b:1f:24:ec:44:bf:0a:f6:84:ff:4e:a3:c7:fa:7b:ce:35: c9:41:7c:32:18:69:c5:b5:ce:d7:ec:9b:c9:fa:de:d9:25:3c: 1f:64:7f:b0:26:c5:1e:53:ef:aa:f6:bb:31:e7:ce:b6:3f:60: 4d:07:e5:d8:f6:ba:f8:12:06:6e:0b:4a:2c:43:3a:42:d6:f8: b5:38:50:48:eb:da:2b:27:32:40:6f:7d:0f:2e:f6:cb:76:01: d0:dc:75:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjZC NjlFNUIxNzhCOEM5NDQ0QzRENjRBNjk2M0IwQkM5RkEzNTc2MjAeFw0yNDA4MjYw NTE3MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCNTQxMDFCNkI1MTk3 QUI0QUE0OTVFNDZFQTdCQzlGRkQ0NkIxQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcbdlYi/0JlNsEQx8G+sdSm4e9Fu/1K8aExl99eKYgJM+jZ4va QISIDTCe7JpxsonEypzxaTHgzEDvKUyDUh4jK2gaO0EGuKbzF9oo6AO4l9PV14e0 zwxOdINrRXlupOxnv0UozzGfGaOBWjhRZ4nI/8kS4JjUdJ2F5fQd0ihTyaFJEMCU 15Qj8l/YR0z/FO5MicMGFmMpxpp9N9lvvmcHY0SYfabN00yNXceZ6ydUoNt5dhXs nb5BCK7+UEMzW5vvFYLrwgzlH8WwfixtPnZkBswSdksjU4z6BxzATj1VHqONydjL yI+FTvemszlgpOTL62o1iyARAxrfqA+x55K7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC1QQG2tRl6tKpJXkbqe8n/1GsbkwHwYDVR0jBBgwFoAUZraeWxeLjJRExNZK aWOwvJ+jV2IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09FQVNZ L1pyYWVXeGVMakpSRXhOWkthV093dkotalYySS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvWnJhZVd4ZUxqSlJFeE5aS2FXT3d2Si1qVjJJLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09FQVNZL0MxUVFHMnRSbDZ0S3BKWGti cWU4bl8xR3Niay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn qg4wDQYJKoZIhvcNAQELBQADggEBABhJBPOEyWDhEOW9AOOKnKOscqsHs6N6JrUi ZdSS1E+AXfPEHTxgxZDKdDTxq/awF4JTiNdB1r6N6J8NA0rmyxHWd87wnLy8SsKD uqPrEi534fdXtB9nUS7O+2POk/DtUYSB3otdlO5IB+tOl9seZucA+DWWLBm3MK9J f+TxfU4+apCexdZbLumLxnqtgf0ZXju7G6tRbcP1dZYrNDgkVaO8kTdrHyTsRL8K 9oT/TqPH+nvONclBfDIYacW1ztfsm8n63tklPB9kf7AmxR5T76r2uzHnzrY/YE0H 5dj2uvgSBm4LSixDOkLW+LU4UEjr2isnMkBvfQ8u9st2AdDcdT4= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:38 2024 by rpki-client on console-fra.rpki-client.org