$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/Gdr3fC1RwUl2PpkXq_OUnPXGS3A.roa File: Gdr3fC1RwUl2PpkXq_OUnPXGS3A.roa (raw, json) Hash identifier: Mssy9kE1k6p5ds97D2SjHse9upZXLnHAD0J8uwBQNh8= Subject key identifier: 19:DA:F7:7C:2D:51:C1:49:76:3E:99:17:AB:F3:94:9C:F5:C6:4B:70 Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439 Certificate serial: 0F4F Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/Gdr3fC1RwUl2PpkXq_OUnPXGS3A.roa Signing time: Mon 26 Aug 2024 05:24:14 +0000 ROA not before: Mon 26 Aug 2024 05:24:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18178 IP address blocks: 103.137.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 20:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3919 (0xf4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439 Validity Not Before: Aug 26 05:24:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=19DAF77C2D51C149763E9917ABF3949CF5C64B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:66:6b:35:db:4e:e1:c1:33:1a:88:84:ef: 45:88:f4:2e:b6:12:58:2b:9e:3f:93:c4:c9:16:b4: f2:c1:e0:a9:a1:01:dc:3b:7e:08:b4:9e:9b:59:9d: c2:c5:88:61:58:5a:a2:3e:1b:9c:b4:5f:1e:02:b5: 8c:0a:f5:1d:e4:e5:a9:27:a2:49:76:b6:b7:10:63: 07:ca:cf:27:4a:b6:1c:9b:41:35:50:20:3a:e2:88: c8:4c:37:0b:cc:83:e7:1b:d1:d6:fb:46:14:8d:0d: bd:49:c5:5e:79:53:e9:d5:e3:66:71:3b:2a:82:49: a9:cd:95:58:af:15:16:43:f1:de:6c:4c:09:ea:ee: 57:71:af:81:66:31:54:02:13:cd:8d:44:2e:51:a1: 83:7e:47:69:8a:d5:71:81:7c:92:8d:79:bd:63:d8: 84:f7:18:63:02:8b:90:a0:df:82:4e:20:2a:17:e6: 30:59:af:3c:a4:84:8d:8a:11:57:d9:4e:04:ed:32: 3d:81:1f:67:18:d8:2e:7a:e8:27:e5:5a:6e:e0:38: 2e:61:e2:1e:0c:d4:a4:03:11:d1:94:48:81:04:e5: 47:5e:db:a8:4e:ec:0f:51:c9:3a:bb:86:ca:35:d4: 0b:ab:96:3b:fc:40:88:09:93:c6:0b:a0:9b:b9:29: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DA:F7:7C:2D:51:C1:49:76:3E:99:17:AB:F3:94:9C:F5:C6:4B:70 X509v3 Authority Key Identifier: keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/Gdr3fC1RwUl2PpkXq_OUnPXGS3A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.62.0/23 Signature Algorithm: sha256WithRSAEncryption 41:01:3b:37:f9:5c:bb:b2:6e:bb:99:51:24:02:74:97:47:f4: 06:64:97:5f:c5:3a:fd:cf:25:70:ca:8f:e6:c9:a6:3e:fa:58: ef:af:d4:bc:5a:a7:22:d9:be:c0:c4:1b:e9:bd:ef:4a:8d:3c: e9:78:80:d8:95:56:e5:3e:ea:9f:3b:34:db:50:b5:bc:6e:47: 56:17:31:50:e1:aa:d6:73:b1:10:7e:3e:19:77:10:fa:f4:57: 73:01:f2:9b:be:9c:71:23:27:ee:01:dd:92:cb:5d:32:0a:05: b7:30:fe:55:f9:25:74:bc:3a:c7:a6:d5:e1:52:14:9f:71:ea: c3:79:cf:e6:d5:f1:11:6e:e2:e3:c3:6c:48:a4:ea:f5:f8:61: fd:1f:0a:3d:d2:c7:b2:35:10:35:73:b6:80:71:68:4c:c8:ec: 63:88:96:1c:d0:9b:db:e0:ed:8b:00:99:2c:12:32:c6:7a:66: cc:14:c4:ae:76:cb:2c:ee:f6:7d:69:56:6c:f8:27:e6:5b:cd: a8:fa:2c:f2:3c:26:07:20:e4:a1:a1:01:5c:c1:c0:86:6f:ed: 57:22:25:98:5c:a7:01:39:8c:34:19:26:d2:89:e5:b5:27:53: 6e:23:47:67:93:ed:a1:0b:03:39:9f:06:90:38:bc:d2:d6:66: 4e:80:df:83 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD08wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzE0 RkFDRkQ0NUMyQzAyNzY4RTgyNzJGNEZCODNGQjJFREFGNzQzOTAeFw0yNDA4MjYw NTI0MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE5REFGNzdDMkQ1MUMx NDk3NjNFOTkxN0FCRjM5NDlDRjVDNjRCNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4kmZrNdtO4cEzGoiE70WI9C62Elgrnj+TxMkWtPLB4KmhAdw7 fgi0nptZncLFiGFYWqI+G5y0Xx4CtYwK9R3k5aknokl2trcQYwfKzydKthybQTVQ IDriiMhMNwvMg+cb0db7RhSNDb1JxV55U+nV42ZxOyqCSanNlVivFRZD8d5sTAnq 7ldxr4FmMVQCE82NRC5RoYN+R2mK1XGBfJKNeb1j2IT3GGMCi5Cg34JOICoX5jBZ rzykhI2KEVfZTgTtMj2BH2cY2C566CflWm7gOC5h4h4M1KQDEdGUSIEE5Ude26hO 7A9RyTq7hso11Aurljv8QIgJk8YLoJu5Kf9TAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUGdr3fC1RwUl2PpkXq/OUnPXGS3AwHwYDVR0jBBgwFoAUwU+s/UXCwCdo6Ccv T7g/su2vdDkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL3dV LXNfVVhDd0NkbzZDY3ZUN2dfc3UydmREay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev d1Utc19VWEN3Q2RvNkNjdlQ3Z19zdTJ2ZERrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL0dkcjNmQzFSd1VsMlBwa1hxX09VblBY R1MzQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniT4wDQYJ KoZIhvcNAQELBQADggEBAEEBOzf5XLuybruZUSQCdJdH9AZkl1/FOv3PJXDKj+bJ pj76WO+v1LxapyLZvsDEG+m970qNPOl4gNiVVuU+6p87NNtQtbxuR1YXMVDhqtZz sRB+Phl3EPr0V3MB8pu+nHEjJ+4B3ZLLXTIKBbcw/lX5JXS8Osem1eFSFJ9x6sN5 z+bV8RFu4uPDbEik6vX4Yf0fCj3Sx7I1EDVztoBxaEzI7GOIlhzQm9vg7YsAmSwS MsZ6ZswUxK52yyzu9n1pVmz4J+Zbzaj6LPI8Jgcg5KGhAVzBwIZv7VciJZhcpwE5 jDQZJtKJ5bUnU24jR2eT7aELAzmfBpA4vNLWZk6A34M= -----END CERTIFICATE-----Generated at Fri Sep 20 17:44:22 2024 by rpki-client on console-fra.rpki-client.org