$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GtzqTz4vr9qJE0Kxj8j_AK2EADc.roa File: GtzqTz4vr9qJE0Kxj8j_AK2EADc.roa (raw, json) Hash identifier: PBA+5CUYUSV8wosic/SIUQgGuOU+35kaeUptcs1t3jE= Subject key identifier: 1A:DC:EA:4F:3E:2F:AF:DA:89:13:42:B1:8F:C8:FF:00:AD:84:00:37 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11EA Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GtzqTz4vr9qJE0Kxj8j_AK2EADc.roa Signing time: Mon 26 Aug 2024 05:18:04 +0000 ROA not before: Mon 26 Aug 2024 05:18:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 220.128.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4586 (0x11ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1ADCEA4F3E2FAFDA891342B18FC8FF00AD840037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:b0:94:2f:a6:a5:8a:50:74:3b:9d:2a:0f: 47:cb:95:af:8d:b9:3b:67:d8:c7:d9:d5:76:87:92: 31:00:3d:17:f8:06:a5:d6:b2:01:68:f7:c9:42:b3: e9:f4:b3:d4:6b:c5:36:af:da:f9:5d:72:3e:e5:1f: a8:03:2b:04:f5:4a:e6:49:cb:ec:05:42:a7:c6:1b: 27:e4:8d:04:2f:4d:a1:5b:09:be:83:df:04:96:89: 70:e1:7a:ca:19:1e:98:27:00:1e:50:1d:5e:ac:f8: f9:4e:34:e3:42:86:1e:5c:35:c5:9e:0c:5b:25:8f: e2:8d:75:a6:86:49:ab:ce:35:32:a8:be:01:1f:1b: 18:21:ac:86:5e:93:a6:05:05:88:73:8e:f7:91:7f: 91:b2:74:f9:72:00:b1:fe:31:27:25:6c:df:b1:0d: 45:5b:79:88:8e:e2:f0:38:d3:09:07:9e:c3:73:e9: 8b:c7:f8:da:b4:a3:15:3f:f5:a2:de:54:22:c2:71: 4e:85:48:a7:96:41:41:09:89:0b:86:ae:3a:56:34: d2:d5:54:89:82:0e:0c:56:7f:98:e0:60:d5:79:34: fe:25:0d:da:01:07:9e:47:b8:4b:88:50:35:5c:ac: 1d:a6:8a:49:e2:6c:b2:1f:7f:2f:99:15:05:90:df: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DC:EA:4F:3E:2F:AF:DA:89:13:42:B1:8F:C8:FF:00:AD:84:00:37 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GtzqTz4vr9qJE0Kxj8j_AK2EADc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.128.0/17 Signature Algorithm: sha256WithRSAEncryption 31:ab:18:a3:88:fa:96:a2:53:ad:d7:b6:63:bd:41:b7:fb:6f: e8:d3:b6:79:2b:5a:2e:54:e3:8f:2d:18:21:49:d2:b5:63:ba: a7:42:81:ed:97:1a:da:60:8f:fd:b5:18:1d:3e:a2:a1:ad:ab: 71:bd:fc:11:f6:af:32:a3:b9:2d:d3:2a:26:2e:b1:48:ca:83: b9:a3:24:ee:43:53:2c:a9:b8:37:ae:d9:8f:8f:5a:97:07:2c: 2f:e7:57:51:c3:37:09:3c:c0:1a:58:9f:17:79:bf:e7:f9:d7: 39:8b:ff:1a:5a:13:08:63:ba:fc:1d:ed:ab:df:7e:03:d9:d5: 89:0b:5f:7b:84:63:a0:d5:e1:15:15:fd:b9:33:66:b4:30:3a: 68:ad:01:61:f3:ad:c9:6c:d7:b2:c0:24:9e:c2:03:6c:65:8f: c8:2d:4d:62:a2:84:02:b0:1d:f7:ea:9b:dd:53:e4:73:c8:b4: d3:2f:2e:fa:5a:8a:fa:40:d7:4d:fe:dc:87:7a:45:52:fd:68: f5:93:53:79:91:99:7d:14:79:62:26:aa:85:92:f2:b3:68:79: 83:b4:d4:0b:37:ab:72:74:e1:62:78:a7:cb:9a:1c:1a:2c:88: 48:2a:ba:a1:35:33:0e:1e:68:b2:7f:51:61:83:89:c9:68:3e: e3:e7:8f:e4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBRENFQTRGM0UyRkFG REE4OTEzNDJCMThGQzhGRjAwQUQ4NDAwMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIerCUL6alilB0O50qD0fLla+NuTtn2MfZ1XaHkjEAPRf4BqXW sgFo98lCs+n0s9RrxTav2vldcj7lH6gDKwT1SuZJy+wFQqfGGyfkjQQvTaFbCb6D 3wSWiXDhesoZHpgnAB5QHV6s+PlONONChh5cNcWeDFslj+KNdaaGSavONTKovgEf GxghrIZek6YFBYhzjveRf5GydPlyALH+MSclbN+xDUVbeYiO4vA40wkHnsNz6YvH +Nq0oxU/9aLeVCLCcU6FSKeWQUEJiQuGrjpWNNLVVImCDgxWf5jgYNV5NP4lDdoB B55HuEuIUDVcrB2miknibLIffy+ZFQWQ3483AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUGtzqTz4vr9qJE0Kxj8j/AK2EADcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9HdHpxVHo0dnI5cUpFMEt4ajhq X0FLMkVBRGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH3ICA MA0GCSqGSIb3DQEBCwUAA4IBAQAxqxijiPqWolOt17ZjvUG3+2/o07Z5K1ouVOOP LRghSdK1Y7qnQoHtlxraYI/9tRgdPqKhratxvfwR9q8yo7kt0yomLrFIyoO5oyTu Q1Msqbg3rtmPj1qXBywv51dRwzcJPMAaWJ8Xeb/n+dc5i/8aWhMIY7r8He2r334D 2dWJC197hGOg1eEVFf25M2a0MDporQFh863JbNeywCSewgNsZY/ILU1iooQCsB33 6pvdU+RzyLTTLy76Wor6QNdN/tyHekVS/Wj1k1N5kZl9FHliJqqFkvKzaHmDtNQL N6tydOFieKfLmhwaLIhIKrqhNTMOHmiyf1Fhg4nJaD7j54/k -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org