$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/_2vIemZzOIByjTe2vw0NAKSKri4.roa File: _2vIemZzOIByjTe2vw0NAKSKri4.roa (raw, json) Hash identifier: Z5D9v/Aqnia/S+weybVemXUOikWamMtT1bsfSCTF0LM= Subject key identifier: FF:6B:C8:7A:66:73:38:80:72:8D:37:B6:BF:0D:0D:00:A4:8A:AE:2E Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0C99 Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/_2vIemZzOIByjTe2vw0NAKSKri4.roa Signing time: Mon 26 Aug 2024 05:17:13 +0000 ROA not before: Mon 26 Aug 2024 05:17:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4782 IP address blocks: 61.60.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Aug 26 05:17:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FF6BC87A66733880728D37B6BF0D0D00A48AAE2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:fe:35:5b:4a:1f:05:0b:97:9a:fa:b5:76: c4:0a:3c:fc:d0:04:4a:fe:17:16:45:c0:73:ea:11: 0b:58:5f:3b:dd:35:f4:90:38:27:49:e2:5f:f1:f8: c2:d8:83:cb:94:b1:b3:2d:89:e2:3f:cd:d8:10:72: 5c:64:a0:0e:21:42:6c:77:d8:47:35:0c:07:3f:a2: 87:8a:1e:4b:70:fd:ad:d6:4b:c5:d8:20:63:8f:44: 48:3f:ea:9f:f9:16:c6:47:e2:60:2d:a2:91:b8:e9: 82:c2:27:d5:ca:e6:00:96:2b:e5:1c:6a:25:9f:57: fc:31:ec:c3:d8:92:ad:32:17:ea:ba:a1:a7:83:50: ea:a0:33:58:98:42:aa:1b:c0:1c:60:8e:bb:2d:ea: 1d:82:8e:9c:66:a7:fe:db:36:93:75:9d:25:63:b4: c9:83:7d:25:94:fd:1d:96:35:e0:79:a8:e9:14:6f: 90:a3:d1:c6:42:ed:d5:eb:b9:89:19:31:72:f0:a7: dc:2b:db:54:7d:30:65:98:03:eb:de:59:f3:49:c3: 52:b2:c8:a9:77:2f:2e:b3:52:ce:4c:ca:b4:18:dd: f4:5a:b9:f0:92:d1:70:93:6b:be:57:4a:d5:dc:08: f0:dc:a8:7c:24:9c:7f:e8:8c:65:ef:26:f7:4c:6c: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6B:C8:7A:66:73:38:80:72:8D:37:B6:BF:0D:0D:00:A4:8A:AE:2E X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/_2vIemZzOIByjTe2vw0NAKSKri4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4d:5f:a6:f8:1f:36:7e:f8:6d:19:54:6d:03:7e:0d:c4:3f:14: 9c:0b:4c:d0:82:26:f2:1a:01:d0:5d:ce:32:1b:43:c1:8f:d1: 36:41:80:4d:fa:2c:ff:67:e0:b1:34:13:57:e0:ae:3c:8d:f2: 8d:ad:b7:46:ae:65:6c:47:76:f8:ec:13:d8:86:db:09:17:df: 1d:37:1e:2d:c2:73:d7:17:58:56:24:96:88:4b:fb:72:10:3f: 6b:c0:0b:a7:dc:d0:35:bd:20:63:c2:aa:92:e5:72:90:88:36: 42:7a:36:62:2c:9d:1d:4d:d9:11:48:77:b1:34:0d:de:e3:d6: 40:03:57:a6:80:0a:39:db:ec:59:85:00:07:15:08:de:0a:57: 58:61:df:ad:98:d4:fd:50:13:71:04:36:0b:f6:43:f8:40:80: e0:cc:e6:53:18:61:da:28:46:87:ed:c1:b8:92:55:9b:c7:22: 98:95:5e:af:5c:da:ff:3c:ca:2d:21:ce:c9:22:de:c7:89:0e: 96:61:80:a0:13:14:92:3b:4e:f2:c1:94:6e:46:62:37:ec:37: 60:3b:d7:c9:c0:6d:0c:ed:ca:17:10:5a:f2:6b:de:ed:85:43: c4:dc:30:22:76:6b:1e:f6:72:90:c1:30:e8:ce:d3:2a:74:6f: dc:cf:d3:14 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNDA4MjYw NTE3MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGNkJDODdBNjY3MzM4 ODA3MjhEMzdCNkJGMEQwRDAwQTQ4QUFFMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu4f41W0ofBQuXmvq1dsQKPPzQBEr+FxZFwHPqEQtYXzvdNfSQ OCdJ4l/x+MLYg8uUsbMtieI/zdgQclxkoA4hQmx32Ec1DAc/ooeKHktw/a3WS8XY IGOPREg/6p/5FsZH4mAtopG46YLCJ9XK5gCWK+UcaiWfV/wx7MPYkq0yF+q6oaeD UOqgM1iYQqobwBxgjrst6h2Cjpxmp/7bNpN1nSVjtMmDfSWU/R2WNeB5qOkUb5Cj 0cZC7dXruYkZMXLwp9wr21R9MGWYA+veWfNJw1KyyKl3Ly6zUs5MyrQY3fRaufCS 0XCTa75XStXcCPDcqHwknH/ojGXvJvdMbJ3/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU/2vIemZzOIByjTe2vw0NAKSKri4wHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL18ydkllbVp6T0lCeWpUZTJ2dzBOQUtT S3JpNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc9PAAwDQYJ KoZIhvcNAQELBQADggEBAE1fpvgfNn74bRlUbQN+DcQ/FJwLTNCCJvIaAdBdzjIb Q8GP0TZBgE36LP9n4LE0E1fgrjyN8o2tt0auZWxHdvjsE9iG2wkX3x03Hi3Cc9cX WFYklohL+3IQP2vAC6fc0DW9IGPCqpLlcpCINkJ6NmIsnR1N2RFId7E0Dd7j1kAD V6aACjnb7FmFAAcVCN4KV1hh362Y1P1QE3EENgv2Q/hAgODM5lMYYdooRoftwbiS VZvHIpiVXq9c2v88yi0hzski3seJDpZhgKATFJI7TvLBlG5GYjfsN2A718nAbQzt yhcQWvJr3u2FQ8TcMCJ2ax72cpDBMOjO0yp0b9zP0xQ= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org