$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/GsuMuycVVSp9CIuFuH_tMQgjXdU.roa File: GsuMuycVVSp9CIuFuH_tMQgjXdU.roa (raw, json) Hash identifier: u1lj38SxCggSMSIEG+lnmAHnd1zuUGzWTnLN5gZ7fgQ= Subject key identifier: 1A:CB:8C:BB:27:15:55:2A:7D:08:8B:85:B8:7F:ED:31:08:23:5D:D5 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0D7D Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/GsuMuycVVSp9CIuFuH_tMQgjXdU.roa Signing time: Mon 26 Aug 2024 05:35:00 +0000 ROA not before: Mon 26 Aug 2024 05:35:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 121.50.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3453 (0xd7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 26 05:35:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1ACB8CBB2715552A7D088B85B87FED3108235DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:e0:9f:96:bf:43:3f:60:75:7f:e2:d8:dc: a9:d4:f8:92:0d:9a:89:ec:f7:c4:2e:00:e1:4d:37: 4d:16:ba:60:2a:1d:93:ac:03:17:96:20:c8:54:99: ac:76:10:c6:8e:be:21:f7:fc:3b:32:b8:71:b8:86: 3c:2a:6d:94:85:4a:bc:59:11:1e:f3:a0:89:f6:39: 5c:a4:ce:b8:65:bc:e7:9c:e9:0b:3f:f0:87:22:75: c0:84:13:d5:3e:d2:41:0d:4d:36:8a:01:b2:bb:4d: cf:b4:be:f1:04:87:e0:6d:d8:e0:66:6b:b9:ab:23: 9b:3f:23:89:34:e9:2c:1e:38:af:58:90:c9:91:47: 3b:16:26:f8:a9:51:99:67:b2:27:6e:c5:79:2c:fd: cb:08:b3:14:a4:17:98:73:c9:70:6e:a4:d0:70:73: 27:4f:91:69:7e:4a:8f:13:ef:4d:81:29:31:77:ca: c9:fb:9b:c1:da:cc:85:2c:a9:a5:de:45:d1:e6:b2: a4:aa:f4:19:3a:32:67:a5:37:0a:06:44:c5:0e:28: 8a:d2:bf:ba:20:a2:8e:60:76:d0:6e:f5:4c:b7:8a: 31:f8:af:91:93:ea:6d:4c:dd:a9:66:89:5f:55:9b: ca:51:35:9c:94:f0:f7:d5:58:e7:7c:c6:85:1a:c1: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CB:8C:BB:27:15:55:2A:7D:08:8B:85:B8:7F:ED:31:08:23:5D:D5 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/GsuMuycVVSp9CIuFuH_tMQgjXdU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.144.0/24 Signature Algorithm: sha256WithRSAEncryption 87:9b:ce:5a:d6:97:d4:54:a2:84:a6:56:89:0e:86:9c:9c:31: 2d:4e:f2:10:8b:d5:73:c3:21:a7:bb:8a:a3:38:8b:0b:a4:dc: 64:75:3a:29:ec:4f:b9:5e:ef:62:89:89:ce:02:a0:b3:21:01: 16:df:c3:0b:42:51:6d:04:5b:3f:c8:9c:df:a0:92:27:ab:ec: 8a:e9:db:6f:0b:af:39:1a:0d:5a:4b:c7:26:12:97:9e:c7:0f: 1b:f8:3f:ab:47:ee:0b:c6:1d:06:ec:5d:b6:d6:23:51:f5:a2: 22:a5:7b:53:1a:25:5d:33:ca:61:d7:34:7a:60:ec:d4:ba:cf: 51:77:7e:a9:fd:4d:96:c3:9d:53:7f:35:6b:e6:05:8a:06:e4: cb:ad:4c:bc:8c:98:10:56:96:bb:a6:d9:c3:87:f5:6f:19:42: c6:04:eb:c4:e8:ce:f1:f6:19:0e:85:96:59:71:b4:1b:12:ee: cd:46:48:71:ea:72:b2:88:75:66:19:c3:77:5e:6b:6b:92:e0: 5a:84:fe:5e:fd:53:2b:08:ba:ea:ec:76:c2:55:97:b3:e4:b7: af:ea:18:82:d1:95:3f:c6:ad:91:10:cd:c1:19:2f:2b:52:de: 3b:9f:34:24:29:87:a1:26:3b:f3:67:30:75:cc:ca:d5:ed:4f: e9:4e:92:94 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNDA4MjYw NTM1MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBQ0I4Q0JCMjcxNTU1 MkE3RDA4OEI4NUI4N0ZFRDMxMDgyMzVERDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIS+Cflr9DP2B1f+LY3KnU+JINmons98QuAOFNN00WumAqHZOs AxeWIMhUmax2EMaOviH3/DsyuHG4hjwqbZSFSrxZER7zoIn2OVykzrhlvOec6Qs/ 8IcidcCEE9U+0kENTTaKAbK7Tc+0vvEEh+Bt2OBma7mrI5s/I4k06SweOK9YkMmR RzsWJvipUZlnsiduxXks/csIsxSkF5hzyXBupNBwcydPkWl+So8T702BKTF3ysn7 m8HazIUsqaXeRdHmsqSq9Bk6MmelNwoGRMUOKIrSv7ogoo5gdtBu9Uy3ijH4r5GT 6m1M3almiV9Vm8pRNZyU8PfVWOd8xoUawYVHAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUGsuMuycVVSp9CIuFuH/tMQgjXdUwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL0dzdU11eWNWVlNw OUNJdUZ1SF90TVFnalhkVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB5MpAwDQYJKoZIhvcNAQELBQADggEBAIebzlrWl9RUooSmVokOhpycMS1O 8hCL1XPDIae7iqM4iwuk3GR1OinsT7le72KJic4CoLMhARbfwwtCUW0EWz/InN+g kier7Irp228LrzkaDVpLxyYSl57HDxv4P6tH7gvGHQbsXbbWI1H1oiKle1MaJV0z ymHXNHpg7NS6z1F3fqn9TZbDnVN/NWvmBYoG5MutTLyMmBBWlrum2cOH9W8ZQsYE 68TozvH2GQ6FlllxtBsS7s1GSHHqcrKIdWYZw3dea2uS4FqE/l79UysIuursdsJV l7Pkt6/qGILRlT/GrZEQzcEZLytS3jufNCQph6EmO/NnMHXMytXtT+lOkpQ= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:27 2024 by rpki-client on console-ams.rpki-client.org