$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/GDBlaIVU81HsutM3S94EGYXc0e4.roa File: GDBlaIVU81HsutM3S94EGYXc0e4.roa (raw, json) Hash identifier: v694n1H8lmMweS6xaELimPeEwNdmJmJeSO45xF4D9TQ= Subject key identifier: 18:30:65:68:85:54:F3:51:EC:BA:D3:37:4B:DE:04:19:85:DC:D1:EE Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0D51 Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/GDBlaIVU81HsutM3S94EGYXc0e4.roa Signing time: Mon 10 Feb 2025 14:12:15 +0000 ROA not before: Mon 10 Feb 2025 14:12:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 61.60.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3409 (0xd51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Feb 10 14:12:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=183065688554F351ECBAD3374BDE041985DCD1EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:70:52:10:8d:29:e2:e6:d8:16:31:a2:c8:0d: cc:07:3a:28:40:05:03:17:fe:37:c2:71:b3:64:93: dc:a3:b9:79:74:21:b3:e9:08:1d:3a:8e:a7:c5:95: 6f:08:61:42:86:72:0c:ea:80:cc:53:09:51:ce:5e: 3f:4c:13:b5:76:7d:a8:4a:95:e0:80:f1:e8:dc:c4: da:76:b8:02:de:f7:20:f1:0a:37:87:e9:7f:6b:bf: fb:3f:d4:e8:3b:07:88:62:3b:a5:a6:49:36:5c:4f: d8:a1:a0:5b:d0:e7:ac:04:10:cc:58:36:a3:03:59: d4:77:81:54:bd:3f:87:e3:89:39:63:15:a2:7a:3f: 3f:e9:bc:e4:4e:29:47:5d:e3:1e:cf:22:71:a8:21: d5:e9:4e:d7:00:10:c5:16:bc:b1:10:a7:98:a7:92: af:b6:72:44:96:5e:6f:4d:b0:e1:f2:22:36:2c:06: ed:d5:d2:c3:3c:0c:81:88:44:fb:0c:95:44:cb:69: be:08:b1:9f:f1:e6:55:1d:ae:52:9e:17:4f:56:ef: 3d:0b:d8:1e:a9:b7:c2:3a:d9:e7:27:87:db:9a:53: 70:09:5c:0b:44:4c:98:89:57:d6:e4:19:b0:07:29: f7:9e:9e:c9:56:a8:32:a8:4f:28:89:1a:23:7e:6f: 2c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:30:65:68:85:54:F3:51:EC:BA:D3:37:4B:DE:04:19:85:DC:D1:EE X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/GDBlaIVU81HsutM3S94EGYXc0e4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.192.0/20 Signature Algorithm: sha256WithRSAEncryption 32:94:b3:14:13:eb:5e:85:57:91:64:6f:22:fd:3c:e6:0c:aa: 77:89:87:33:02:08:5c:5d:50:ae:32:38:4d:97:6c:c1:9c:e1: 62:af:bb:1d:94:c4:59:c7:31:af:de:94:cb:9c:00:58:eb:78: b6:89:8c:3b:65:d8:e4:52:9c:2d:05:32:27:bf:5f:1e:cd:53: d0:1e:26:1c:a9:ea:73:f4:93:57:10:4a:45:4c:fe:b7:14:81: b7:37:71:38:e9:cc:6d:e4:8a:0c:9c:da:72:a4:97:82:7b:91: 3c:d5:76:0c:1b:77:6f:63:94:ac:1b:a9:4e:4e:38:f3:39:a0: f2:2f:a3:d4:4f:d5:d6:3f:27:96:ae:f4:e8:58:f7:9d:c5:b9: bb:29:1b:c2:db:38:93:3f:93:0a:67:95:b8:32:ef:9d:03:8a: 6c:bf:76:e7:5e:31:d0:8a:68:34:f4:f8:d1:83:da:2b:db:24: 19:25:f2:6a:b1:4d:72:83:2b:3f:8d:83:dc:2f:83:a3:33:2a: 72:51:a4:ae:98:eb:c0:68:5b:ec:38:a9:4f:e9:e3:e8:54:2c: cd:79:37:31:4c:dd:23:14:d7:91:e1:07:59:b0:22:d6:85:01: 77:1a:7b:29:5a:a6:c2:15:54:48:9b:c8:25:9f:1b:26:a2:23: cf:35:73:0b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTAyMTAx NDEyMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4MzA2NTY4ODU1NEYz NTFFQ0JBRDMzNzRCREUwNDE5ODVEQ0QxRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwcFIQjSni5tgWMaLIDcwHOihABQMX/jfCcbNkk9yjuXl0IbPp CB06jqfFlW8IYUKGcgzqgMxTCVHOXj9ME7V2fahKleCA8ejcxNp2uALe9yDxCjeH 6X9rv/s/1Og7B4hiO6WmSTZcT9ihoFvQ56wEEMxYNqMDWdR3gVS9P4fjiTljFaJ6 Pz/pvOROKUdd4x7PInGoIdXpTtcAEMUWvLEQp5inkq+2ckSWXm9NsOHyIjYsBu3V 0sM8DIGIRPsMlUTLab4IsZ/x5lUdrlKeF09W7z0L2B6pt8I62ecnh9uaU3AJXAtE TJiJV9bkGbAHKfeenslWqDKoTyiJGiN+byy5AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUGDBlaIVU81HsutM3S94EGYXc0e4wHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9HREJsYUlWVTgxSHN1dE0zUzk0 RUdZWGMwZTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTzA MA0GCSqGSIb3DQEBCwUAA4IBAQAylLMUE+tehVeRZG8i/TzmDKp3iYczAghcXVCu MjhNl2zBnOFir7sdlMRZxzGv3pTLnABY63i2iYw7ZdjkUpwtBTInv18ezVPQHiYc qepz9JNXEEpFTP63FIG3N3E46cxt5IoMnNpypJeCe5E81XYMG3dvY5SsG6lOTjjz OaDyL6PUT9XWPyeWrvToWPedxbm7KRvC2ziTP5MKZ5W4Mu+dA4psv3bnXjHQimg0 9PjRg9or2yQZJfJqsU1ygys/jYPcL4OjMypyUaSumOvAaFvsOKlP6ePoVCzNeTcx TN0jFNeR4QdZsCLWhQF3GnspWqbCFVRIm8glnxsmoiPPNXML -----END CERTIFICATE-----Generated at Mon Apr 7 15:06:21 2025 by rpki-client