$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/GCDUWO21ZYoMbYJMdtAb2r0BSR8.roa File: GCDUWO21ZYoMbYJMdtAb2r0BSR8.roa (raw, json) Hash identifier: kaMXjS/SRaOVi0C/92360sHRBoapwnNHrQor4AqwrkU= Subject key identifier: 18:20:D4:58:ED:B5:65:8A:0C:6D:82:4C:76:D0:1B:DA:BD:01:49:1F Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C16 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/GCDUWO21ZYoMbYJMdtAb2r0BSR8.roa Signing time: Fri 01 Sep 2023 09:13:57 +0000 ROA not before: Fri 01 Sep 2023 09:13:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 61.61.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3094 (0xc16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:13:57 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1820D458EDB5658A0C6D824C76D01BDABD01491F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:17:fc:20:67:92:f4:56:8a:b8:7c:d6:f7: e6:c7:a8:a9:e6:6b:81:89:ab:8a:0b:32:0a:9b:4e: ad:44:05:22:3b:18:bf:98:f1:85:eb:e1:de:dd:72: 18:8f:11:a5:81:e8:b3:9f:2a:c6:39:c6:0e:c6:cb: 82:d8:d6:a7:91:c1:ac:a0:73:b8:7d:9f:1a:ea:fa: d4:2d:94:19:2a:34:39:d1:b4:c6:88:67:75:81:18: 1c:41:32:10:49:d4:89:d5:8b:f8:a7:ec:18:a9:43: 0b:06:82:6f:da:f7:91:28:43:1e:a8:d0:e0:47:c5: d6:a1:e4:70:bb:de:3c:ad:90:19:b3:31:47:05:19: 37:23:b7:bf:2d:eb:42:ac:ef:91:7b:c1:89:78:a0: a5:eb:88:8a:1b:17:f9:05:92:69:6f:f6:98:d4:b0: 99:cc:2b:0a:15:f4:c8:af:75:5e:6f:ec:9f:67:75: 88:66:52:7b:ab:a5:2e:a4:bf:39:18:78:79:d4:9a: 59:cb:35:3d:48:ee:ef:20:db:24:32:bc:af:c9:3f: e2:86:4a:42:28:3a:e9:20:38:c3:0b:c4:f1:4d:95: 6b:cb:2e:fb:18:f9:aa:31:b1:07:25:f0:35:0a:2c: a8:1e:2e:da:e4:44:d0:9e:ec:a2:43:02:40:8b:44: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:20:D4:58:ED:B5:65:8A:0C:6D:82:4C:76:D0:1B:DA:BD:01:49:1F X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/GCDUWO21ZYoMbYJMdtAb2r0BSR8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.48.0/24 Signature Algorithm: sha256WithRSAEncryption 68:c4:61:62:b8:f8:ff:74:fe:ff:75:7e:08:71:98:a4:e8:16: c1:a2:f0:c3:d4:88:78:4c:36:d8:a9:ea:9f:0e:80:ef:0f:3d: e8:3b:f6:27:3a:e1:24:ea:0c:1f:49:53:52:f3:87:ee:31:54: e2:22:05:41:be:ac:40:f2:b3:d4:8c:d1:39:92:ae:67:5e:af: 09:b4:48:ea:f8:46:c8:01:5d:70:5e:d1:9b:cd:4e:c6:0d:6f: ce:f6:c1:41:92:93:38:1c:09:21:45:16:32:87:3e:47:1c:68: 5c:f2:4a:21:16:51:10:39:b8:d4:5f:12:1f:b4:5a:18:6b:9f: fe:83:66:cf:e3:22:c6:e6:04:a3:19:77:53:64:33:31:71:75: 43:6c:00:3b:63:e9:2f:31:5b:e4:5c:04:fd:33:a2:c8:36:fa: 46:a3:95:35:de:0e:3d:2f:c4:b2:48:4e:b3:9e:fa:66:e6:44: ad:03:8d:1f:66:32:79:5b:d9:d0:6f:8a:93:af:fb:db:f1:1f: de:0f:61:83:6f:3d:bc:e5:0e:56:30:dd:62:d3:a7:4c:7e:c1: df:4e:67:07:70:42:61:3a:e4:58:47:14:7a:81:84:7f:79:c1: 74:f7:bc:97:a5:01:cc:52:8b:c7:09:7f:03:87:d9:51:96:c8: 90:ee:8c:5b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDBYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTEzNTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE4MjBENDU4RURCNTY1 OEEwQzZEODI0Qzc2RDAxQkRBQkQwMTQ5MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnThf8IGeS9FaKuHzW9+bHqKnma4GJq4oLMgqbTq1EBSI7GL+Y 8YXr4d7dchiPEaWB6LOfKsY5xg7Gy4LY1qeRwaygc7h9nxrq+tQtlBkqNDnRtMaI Z3WBGBxBMhBJ1InVi/in7BipQwsGgm/a95EoQx6o0OBHxdah5HC73jytkBmzMUcF GTcjt78t60Ks75F7wYl4oKXriIobF/kFkmlv9pjUsJnMKwoV9MivdV5v7J9ndYhm UnurpS6kvzkYeHnUmlnLNT1I7u8g2yQyvK/JP+KGSkIoOukgOMMLxPFNlWvLLvsY +aoxsQcl8DUKLKgeLtrkRNCe7KJDAkCLRBdzAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUGCDUWO21ZYoMbYJMdtAb2r0BSR8wHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0dDRFVXTzIxWllvTWJZSk1kdEFiMnIw QlNSOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9PTAwDQYJ KoZIhvcNAQELBQADggEBAGjEYWK4+P90/v91fghxmKToFsGi8MPUiHhMNtip6p8O gO8PPeg79ic64STqDB9JU1Lzh+4xVOIiBUG+rEDys9SM0TmSrmderwm0SOr4RsgB XXBe0ZvNTsYNb872wUGSkzgcCSFFFjKHPkccaFzySiEWURA5uNRfEh+0Whhrn/6D Zs/jIsbmBKMZd1NkMzFxdUNsADtj6S8xW+RcBP0zosg2+kajlTXeDj0vxLJITrOe +mbmRK0DjR9mMnlb2dBvipOv+9vxH94PYYNvPbzlDlYw3WLTp0x+wd9OZwdwQmE6 5FhHFHqBhH95wXT3vJelAcxSi8cJfwOH2VGWyJDujFs= -----END CERTIFICATE-----Generated at Fri May 31 23:15:51 2024 by rpki-client on console-ams.rpki-client.org