$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/G2fdxGVhIr6QA0HlXn9oKUV82II.roa File: G2fdxGVhIr6QA0HlXn9oKUV82II.roa (raw, json) Hash identifier: Twy0y0p4DEdyUHGG//2us8okrqJZD3urKpgIeCe+/2U= Subject key identifier: 1B:67:DD:C4:65:61:22:BE:90:03:41:E5:5E:7F:68:29:45:7C:D8:82 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0E1A Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/G2fdxGVhIr6QA0HlXn9oKUV82II.roa Signing time: Mon 26 Aug 2024 05:25:03 +0000 ROA not before: Mon 26 Aug 2024 05:25:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38843 IP address blocks: 124.150.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3610 (0xe1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 26 05:25:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1B67DDC4656122BE900341E55E7F6829457CD882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:33:44:27:a0:86:2a:5f:65:24:62:90:d7: 90:47:96:ee:a7:e1:8d:76:dd:73:70:a2:3d:f6:44: 8f:e0:68:e1:42:ad:c6:4d:ad:d1:cc:aa:f5:fd:f2: 92:53:e8:92:74:83:06:0d:16:11:fa:62:a8:8d:6a: 16:3f:1e:78:35:e6:ce:a0:6a:65:09:d1:bc:43:e9: 30:eb:fe:b0:5b:c1:29:00:3d:ed:0d:78:59:c5:5d: d3:68:3b:82:fb:02:4f:59:5c:aa:c1:01:d9:71:19: 23:1f:8c:d9:a9:44:66:82:ed:e2:2e:6d:5f:1b:c4: 8a:6b:0e:2f:f7:91:e5:59:61:70:b2:97:55:a4:5d: 36:18:cf:66:2d:8d:a1:e4:46:0a:1b:28:0d:a3:03: a5:f8:46:f3:54:67:ed:e1:cd:6f:31:a2:0f:ee:38: 8c:88:d1:00:d7:8b:d2:10:0e:3e:f2:8c:60:ff:ea: 20:11:11:df:f2:a5:10:68:99:32:65:9b:13:58:93: e8:00:3a:81:11:ef:66:ef:ea:c9:96:cf:05:cb:53: 35:8a:3e:5f:87:85:5a:c8:ec:50:53:af:32:33:60: e8:2e:7e:b5:2f:b9:60:11:b7:d2:39:ff:59:77:37: 7d:05:04:2d:2c:a9:56:26:16:89:14:29:35:a0:89: 29:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:67:DD:C4:65:61:22:BE:90:03:41:E5:5E:7F:68:29:45:7C:D8:82 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/G2fdxGVhIr6QA0HlXn9oKUV82II.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.130.0/24 Signature Algorithm: sha256WithRSAEncryption 13:39:92:87:6d:cd:f9:e4:6d:36:6c:64:a0:64:7b:62:9b:ee: e7:64:94:10:94:4a:21:94:8b:50:b6:d3:3b:3e:a4:e7:92:a7: 1f:59:24:ff:be:a9:9d:23:55:78:fe:fc:5a:53:94:ac:ae:51: d5:55:68:d8:59:44:50:aa:6f:9b:8a:09:ce:fa:16:f2:47:d7: 38:3f:09:b1:26:89:fe:2c:8c:c7:de:bf:25:b9:1e:64:c6:f9: 94:5d:45:e8:f6:7a:3f:16:ba:9e:87:46:90:17:48:61:13:97: 21:97:49:ef:7c:dc:1a:33:a6:1e:15:ed:86:2b:51:5b:6e:21: 50:12:aa:73:36:7a:7d:1d:be:0c:b2:db:0a:8e:a0:c1:ec:fb: 2c:5a:c2:b3:55:c8:b9:21:e2:1e:2c:f0:0d:34:db:8c:bf:41: fb:e4:7f:2f:16:a8:9a:32:fa:c5:c2:51:f4:46:8d:cf:b5:89: a9:f0:df:25:d8:0c:b9:6c:32:c4:89:ec:46:58:aa:3f:72:47: e6:c9:4a:e8:d4:fd:5c:fb:ee:47:af:ad:97:70:f3:7c:c8:ef: a9:23:ef:63:d5:8c:fe:aa:f8:29:57:7a:05:7d:3f:7d:b0:71: 2a:8a:c4:fb:4b:4e:a2:ed:26:29:e6:2b:f6:ca:32:95:48:4a: ed:a7:b1:46 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNDA4MjYw NTI1MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCNjdEREM0NjU2MTIy QkU5MDAzNDFFNTVFN0Y2ODI5NDU3Q0Q4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSdzNEJ6CGKl9lJGKQ15BHlu6n4Y123XNwoj32RI/gaOFCrcZN rdHMqvX98pJT6JJ0gwYNFhH6YqiNahY/Hng15s6gamUJ0bxD6TDr/rBbwSkAPe0N eFnFXdNoO4L7Ak9ZXKrBAdlxGSMfjNmpRGaC7eIubV8bxIprDi/3keVZYXCyl1Wk XTYYz2YtjaHkRgobKA2jA6X4RvNUZ+3hzW8xog/uOIyI0QDXi9IQDj7yjGD/6iAR Ed/ypRBomTJlmxNYk+gAOoER72bv6smWzwXLUzWKPl+HhVrI7FBTrzIzYOgufrUv uWARt9I5/1l3N30FBC0sqVYmFokUKTWgiSk5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUG2fdxGVhIr6QA0HlXn9oKUV82IIwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vRzJmZHhHVmhJcjZRQTBIbFhuOW9L VVY4MklJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHyWgjAN BgkqhkiG9w0BAQsFAAOCAQEAEzmSh23N+eRtNmxkoGR7Ypvu52SUEJRKIZSLULbT Oz6k55KnH1kk/76pnSNVeP78WlOUrK5R1VVo2FlEUKpvm4oJzvoW8kfXOD8JsSaJ /iyMx96/JbkeZMb5lF1F6PZ6Pxa6nodGkBdIYROXIZdJ73zcGjOmHhXthitRW24h UBKqczZ6fR2+DLLbCo6gwez7LFrCs1XIuSHiHizwDTTbjL9B++R/LxaomjL6xcJR 9EaNz7WJqfDfJdgMuWwyxInsRliqP3JH5slK6NT9XPvuR6+tl3DzfMjvqSPvY9WM /qr4KVd6BX0/fbBxKorE+0tOou0mKeYr9soylUhK7aexRg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org