$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTT/lIaJa9ePL5b6QFntAseFzA6yCtE.roa File: lIaJa9ePL5b6QFntAseFzA6yCtE.roa (raw, json) Hash identifier: XVVKVLHNoVzZrCp6DNo1wr7d24McfMvbFNjyrfz3Vfo= Subject key identifier: 94:86:89:6B:D7:8F:2F:96:FA:40:59:ED:02:C7:85:CC:0E:B2:0A:D1 Certificate issuer: /CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A Certificate serial: 0C1A Authority key identifier: B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/lIaJa9ePL5b6QFntAseFzA6yCtE.roa Signing time: Mon 26 Aug 2024 05:17:22 +0000 ROA not before: Mon 26 Aug 2024 05:17:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9416 IP address blocks: 203.118.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A Validity Not Before: Aug 26 05:17:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9486896BD78F2F96FA4059ED02C785CC0EB20AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:63:c3:77:55:9e:6b:4d:65:a5:b6:99:02:c9: af:ea:45:83:85:1f:b9:bc:ed:21:95:d0:71:2e:84: 59:ee:98:20:ec:4a:21:11:2e:e9:b6:b6:8a:c3:05: 07:1f:32:b7:79:4d:ab:7a:59:47:83:70:1d:98:48: 47:5c:f7:7e:65:57:cc:d4:ef:89:a7:a0:8b:7f:f5: 25:a1:bc:12:e8:e9:26:4b:06:56:a0:d2:1a:26:24: 46:88:c6:9f:bb:8c:14:5d:28:02:bf:3e:7e:fd:5a: 3c:9e:4b:0e:a4:10:24:f0:8b:00:7c:68:6f:01:55: d1:ed:f7:a1:fb:b9:cb:4a:79:70:71:3b:65:30:8f: a0:17:08:65:84:07:43:0d:06:e0:6d:e1:a7:86:fc: e4:be:ac:70:4a:03:11:b3:40:ee:a5:68:8d:60:0c: 35:59:d2:6f:98:b3:af:bd:6d:d2:f1:06:e2:2f:74: 71:4d:db:ba:b1:6c:3d:3b:f2:47:be:e5:14:99:0d: 4d:03:ea:d9:27:23:88:b4:c4:3c:d3:a5:87:b9:9d: 96:a6:73:63:43:e2:96:ce:07:eb:f8:e1:3a:af:19: a0:d8:60:d9:c0:93:b5:49:70:76:5d:ec:1c:2a:07: c3:11:bd:7a:a6:d4:a5:8e:cb:95:4a:47:88:de:c9: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:86:89:6B:D7:8F:2F:96:FA:40:59:ED:02:C7:85:CC:0E:B2:0A:D1 X509v3 Authority Key Identifier: keyid:B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/lIaJa9ePL5b6QFntAseFzA6yCtE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.118.224.0/20 Signature Algorithm: sha256WithRSAEncryption 63:ca:aa:95:0a:79:fb:fb:dc:2b:ba:f3:e2:7d:0b:f3:c6:2c: 4e:16:7e:69:9c:40:9b:93:7f:d4:ae:c9:79:93:77:22:1f:7b: 2f:28:47:72:5d:66:8e:a0:91:3c:33:c2:3c:6f:a9:ae:ce:d8: b3:5a:b3:69:b1:86:7f:da:43:a4:84:ff:da:48:a9:02:a2:43: 5e:55:1b:1f:38:27:05:66:4f:89:30:93:f5:50:4e:9e:5f:78: 17:0b:0d:6f:05:88:9d:3a:a6:52:6f:44:b2:f4:02:36:41:82: a0:b4:73:94:e3:0d:4f:ab:4f:7b:8e:eb:46:9c:c3:c8:33:54: 46:ad:bd:f4:c1:4a:ec:aa:d6:a5:6e:f2:5e:fc:04:72:80:f3: 69:64:f0:2c:d1:12:b7:d6:9f:7e:f4:c6:43:e9:fa:e9:20:06: b9:13:60:3c:6d:77:69:f2:0a:c9:a4:c5:8d:30:24:a6:50:44: ee:0e:b9:7a:9f:90:db:42:ab:8b:91:21:3a:53:cb:a8:aa:04: 6e:75:01:d5:ed:b3:42:67:e1:40:4f:46:8d:29:a0:fb:17:7f: b6:8e:34:e4:71:d4:45:99:74:fb:e0:c2:e4:e6:09:f4:1a:3a: aa:e5:ba:4a:8d:93:f6:75:9c:92:b8:a4:1d:9a:c9:94:dc:7e: b9:09:1a:31 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRF QzYxRUQ3RThDNjRGMjEwMzE3RENDN0U4MDhBOUMxOTJEODg0QTAeFw0yNDA4MjYw NTE3MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0ODY4OTZCRDc4RjJG OTZGQTQwNTlFRDAyQzc4NUNDMEVCMjBBRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7Y8N3VZ5rTWWltpkCya/qRYOFH7m87SGV0HEuhFnumCDsSiER Lum2torDBQcfMrd5Tat6WUeDcB2YSEdc935lV8zU74mnoIt/9SWhvBLo6SZLBlag 0homJEaIxp+7jBRdKAK/Pn79WjyeSw6kECTwiwB8aG8BVdHt96H7uctKeXBxO2Uw j6AXCGWEB0MNBuBt4aeG/OS+rHBKAxGzQO6laI1gDDVZ0m+Ys6+9bdLxBuIvdHFN 27qxbD078ke+5RSZDU0D6tknI4i0xDzTpYe5nZamc2ND4pbOB+v44TqvGaDYYNnA k7VJcHZd7BwqB8MRvXqm1KWOy5VKR4jeyUhHAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUlIaJa9ePL5b6QFntAseFzA6yCtEwHwYDVR0jBBgwFoAUtOxh7X6MZPIQMX3M foCKnBktiEowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1RUL3RP eGg3WDZNWlBJUU1YM01mb0NLbkJrdGlFby5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev dE94aDdYNk1aUElRTVgzTWZvQ0tuQmt0aUVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1RUL2xJYUphOWVQTDViNlFGbnRBc2VGekE2 eUN0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLduAwDQYJ KoZIhvcNAQELBQADggEBAGPKqpUKefv73Cu68+J9C/PGLE4WfmmcQJuTf9SuyXmT dyIfey8oR3JdZo6gkTwzwjxvqa7O2LNas2mxhn/aQ6SE/9pIqQKiQ15VGx84JwVm T4kwk/VQTp5feBcLDW8FiJ06plJvRLL0AjZBgqC0c5TjDU+rT3uO60acw8gzVEat vfTBSuyq1qVu8l78BHKA82lk8CzRErfWn370xkPp+ukgBrkTYDxtd2nyCsmkxY0w JKZQRO4OuXqfkNtCq4uRITpTy6iqBG51AdXts0Jn4UBPRo0poPsXf7aONORx1EWZ dPvgwuTmCfQaOqrlukqNk/Z1nJK4pB2ayZTcfrkJGjE= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org