$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSNET/GyG_xsqaj6m34OnltZPxjeAt6Xk.roa File: GyG_xsqaj6m34OnltZPxjeAt6Xk.roa (raw, json) Hash identifier: qg256P8tuL3sMze/FFF+gVY0tplZ8GMV9F3tLSsLzZ8= Subject key identifier: 1B:21:BF:C6:CA:9A:8F:A9:B7:E0:E9:E5:B5:93:F1:8D:E0:2D:E9:79 Certificate issuer: /CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F Certificate serial: 0B21 Authority key identifier: 4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/GyG_xsqaj6m34OnltZPxjeAt6Xk.roa Signing time: Fri 01 Sep 2023 08:55:02 +0000 ROA not before: Fri 01 Sep 2023 08:55:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38837 IP address blocks: 211.78.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2849 (0xb21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F Validity Not Before: Sep 1 08:55:02 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1B21BFC6CA9A8FA9B7E0E9E5B593F18DE02DE979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:3d:ec:05:e2:73:b4:60:fa:fd:72:7e:fa: 7c:82:3f:a5:90:72:e4:76:48:7f:c2:b2:c4:c8:04: dc:cc:4a:f1:bf:2f:a1:76:60:21:3a:89:e8:fd:57: 37:a6:e4:65:93:ee:9d:44:e4:98:7c:87:79:f1:1c: 89:ff:fc:f3:d3:1e:8a:4e:4c:e5:16:ee:bd:38:9b: de:28:94:c0:78:b1:b0:75:68:6d:ea:64:42:44:9b: d6:08:82:2a:7c:07:0e:32:38:5a:c3:aa:1c:3e:5d: 63:55:4c:f3:84:26:91:9a:ce:b4:30:14:ad:2c:83: f9:2e:2f:98:20:b8:52:4a:1a:3b:98:3e:e6:4b:f5: 85:ec:3e:d6:48:e0:f4:4b:e5:34:4c:ed:4c:a5:f5: 0d:00:ad:59:93:7e:8c:98:61:6a:e8:44:e3:cd:3c: f3:8e:73:b2:7c:13:51:68:ec:4e:61:20:c4:96:8e: 63:74:0b:77:8c:34:1c:18:5d:ed:4a:10:91:e7:ef: b9:d8:9b:0c:77:f1:dc:db:be:82:e5:69:7b:00:87: 9b:e8:3e:9a:bb:07:61:64:54:f8:1a:e7:c4:cd:d7: 3c:80:da:ae:e2:26:34:97:a7:5e:23:ab:46:5b:07: ab:7f:3f:79:89:55:e1:68:2b:13:b9:96:3f:c9:05: 25:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:21:BF:C6:CA:9A:8F:A9:B7:E0:E9:E5:B5:93:F1:8D:E0:2D:E9:79 X509v3 Authority Key Identifier: keyid:4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/GyG_xsqaj6m34OnltZPxjeAt6Xk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.64.0/20 Signature Algorithm: sha256WithRSAEncryption ae:dc:e0:20:51:94:27:32:d8:32:3d:74:20:4a:b1:b1:c7:09: db:aa:cc:29:29:4a:a9:7d:06:cb:1f:99:0c:df:64:91:73:16: 0f:3c:ab:90:98:9c:57:f5:7a:aa:f3:53:a4:d3:9f:1c:62:07: bf:ff:42:f4:f9:ba:e3:c1:f6:94:1b:9b:2f:c1:76:21:62:2a: 32:f2:f2:75:79:a5:e9:1f:f2:59:9c:e4:c9:59:20:bc:c0:2d: e3:65:93:eb:6a:7e:b6:82:3e:9a:19:b8:85:4e:fe:b8:25:cf: 67:9a:b4:76:a1:94:80:9b:1f:ff:e2:a4:5a:5d:a8:5b:4d:a4: 68:db:96:bb:6f:5a:57:dc:59:c1:0b:b2:b5:51:b8:74:9b:c9: ff:2f:ea:3d:2c:ff:c2:62:fd:d3:9b:59:45:d7:d9:97:00:9f: 16:e0:f1:01:8d:c3:bd:bb:bd:5e:6a:0d:55:58:e3:9f:fd:ba: c6:bd:7f:a4:6c:4e:ef:a2:ea:c6:96:df:fc:ff:f7:e3:54:39: e5:4b:e9:3a:cc:98:cd:85:48:1d:75:6a:8d:e3:1f:c2:c9:ca: 7e:31:60:ed:61:24:27:94:a4:49:81:e5:d9:42:6e:c4:a4:0b: 4a:22:52:82:04:7e:f7:97:29:08:dd:09:98:6f:b3:5c:2f:3e: 90:f2:7c:73 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEM0 N0RGNzQ4RUMwRkYxNjkxMjI4M0NFQzEwRUMxMEVEMzJEMjQ0RjAeFw0yMzA5MDEw ODU1MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFCMjFCRkM2Q0E5QThG QTlCN0UwRTlFNUI1OTNGMThERTAyREU5NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs6z3sBeJztGD6/XJ++nyCP6WQcuR2SH/CssTIBNzMSvG/L6F2 YCE6iej9Vzem5GWT7p1E5Jh8h3nxHIn//PPTHopOTOUW7r04m94olMB4sbB1aG3q ZEJEm9YIgip8Bw4yOFrDqhw+XWNVTPOEJpGazrQwFK0sg/kuL5gguFJKGjuYPuZL 9YXsPtZI4PRL5TRM7Uyl9Q0ArVmTfoyYYWroROPNPPOOc7J8E1Fo7E5hIMSWjmN0 C3eMNBwYXe1KEJHn77nYmwx38dzbvoLlaXsAh5voPpq7B2FkVPga58TN1zyA2q7i JjSXp14jq0ZbB6t/P3mJVeFoKxO5lj/JBSXLAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUGyG/xsqaj6m34OnltZPxjeAt6XkwHwYDVR0jBBgwFoAUTEffdI7A/xaRIoPO wQ7BDtMtJE8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NORVQv VEVmZmRJN0FfeGFSSW9QT3dRN0JEdE10SkU4LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9URWZmZEk3QV94YVJJb1BPd1E3QkR0TXRKRTguY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HU05FVC9HeUdfeHNxYWo2bTM0T25sdFpQ eGplQXQ2WGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE005A MA0GCSqGSIb3DQEBCwUAA4IBAQCu3OAgUZQnMtgyPXQgSrGxxwnbqswpKUqpfQbL H5kM32SRcxYPPKuQmJxX9Xqq81Ok058cYge//0L0+brjwfaUG5svwXYhYioy8vJ1 eaXpH/JZnOTJWSC8wC3jZZPran62gj6aGbiFTv64Jc9nmrR2oZSAmx//4qRaXahb TaRo25a7b1pX3FnBC7K1Ubh0m8n/L+o9LP/CYv3Tm1lF19mXAJ8W4PEBjcO9u71e ag1VWOOf/brGvX+kbE7vourGlt/8//fjVDnlS+k6zJjNhUgddWqN4x/Cycp+MWDt YSQnlKRJgeXZQm7EpAtKIlKCBH73lykI3QmYb7NcLz6Q8nxz -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org