$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/oOYVNlQRyjcUm6uC8HrX-1Jix0M.roa File: oOYVNlQRyjcUm6uC8HrX-1Jix0M.roa (raw, json) Hash identifier: yd+LZjsIUynr6TiSlNCjz+/LVm3MUBwh+KE4Xo/zwSg= Subject key identifier: A0:E6:15:36:54:11:CA:37:14:9B:AB:82:F0:7A:D7:FB:52:62:C7:43 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0E62 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/oOYVNlQRyjcUm6uC8HrX-1Jix0M.roa Signing time: Mon 10 Feb 2025 14:03:28 +0000 ROA not before: Mon 10 Feb 2025 14:03:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 27.147.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3682 (0xe62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Feb 10 14:03:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A0E615365411CA37149BAB82F07AD7FB5262C743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:ef:ff:1f:af:20:09:b7:da:df:20:19:a0: 54:12:be:c1:00:c0:8b:1e:ae:8b:19:dd:9a:e6:f0: f0:22:fa:d0:d1:5b:11:c8:01:e2:f6:ef:e0:5e:ba: be:ff:ad:e5:80:fd:2a:35:82:5b:f6:67:49:4c:32: 6f:5b:33:d9:c7:75:8c:4c:4d:86:ab:aa:21:a5:80: a4:da:e8:c7:3c:0b:99:40:aa:78:af:91:f2:3d:e9: 0c:c9:46:63:ad:ed:95:a9:65:36:50:c1:1a:d9:8f: ac:ea:14:b5:50:a4:34:10:27:d0:9d:34:2b:a9:6e: 53:36:82:20:44:cb:5d:5e:50:e7:87:3b:56:a4:6d: f5:f5:81:b4:fe:6a:e2:d3:be:57:00:55:f2:53:da: 6c:3f:0e:5e:1e:12:9f:af:bb:61:00:d6:f3:9f:6a: e7:3b:77:a3:15:e8:f2:c7:2c:03:75:74:cf:8d:55: bd:90:43:d2:4e:6b:9a:ba:f1:82:e6:5a:61:f5:63: f6:34:c4:77:4d:8b:8a:e7:6f:b4:c5:09:51:45:41: 54:c2:83:17:10:84:70:f8:11:91:8a:a9:6e:e3:b9: 5f:17:8c:d9:3c:fb:17:75:30:c7:12:93:64:de:67: 69:96:4c:12:bf:2e:6f:e1:87:c3:85:b6:1a:57:e6: a0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E6:15:36:54:11:CA:37:14:9B:AB:82:F0:7A:D7:FB:52:62:C7:43 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/oOYVNlQRyjcUm6uC8HrX-1Jix0M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.48.0/21 Signature Algorithm: sha256WithRSAEncryption 17:79:ae:ac:d8:0f:85:2e:46:15:39:2b:07:3a:a2:83:50:69: 5b:77:14:89:00:d7:ec:0e:e1:65:80:e7:e6:72:8b:06:60:1a: c4:40:05:98:e5:9f:87:61:c0:95:09:5f:9f:a6:06:7b:d8:b2: 74:6a:97:8d:6a:d5:0f:a8:be:c5:97:14:97:1a:e9:d9:c0:de: c5:f1:97:16:2e:8c:e4:e5:bb:e9:78:54:8b:46:0c:6e:f7:7d: c0:17:a0:81:e1:c2:f6:61:31:fc:b0:e4:74:70:48:50:bd:37: 12:42:5c:d3:db:d4:37:c7:a8:86:9b:9e:6a:c1:f7:29:fc:69: 22:d9:82:2f:57:97:a3:51:e2:bc:59:36:58:29:7b:e2:31:8f: ec:0b:5f:28:98:53:b5:d0:57:64:3f:f5:55:8f:aa:f0:8f:fb: 8c:7a:c1:78:94:a6:20:fa:7a:dc:36:ce:78:e3:e6:e5:6a:d2: ed:ce:83:9d:df:ae:5e:2e:02:d3:1a:cd:c7:ff:3e:47:0d:fc: 55:a7:84:48:39:a3:19:d9:6c:01:1c:d9:c0:8f:c5:53:21:8d: 4c:24:7e:12:77:1e:3f:bf:b9:00:44:48:48:42:db:49:e3:83: f6:d5:47:3d:6b:66:46:b1:80:44:53:72:a4:d1:03:c7:02:ba: 5e:2a:b9:5c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTAyMTAx NDAzMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwRTYxNTM2NTQxMUNB MzcxNDlCQUI4MkYwN0FEN0ZCNTI2MkM3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI9e//H68gCbfa3yAZoFQSvsEAwIserosZ3Zrm8PAi+tDRWxHI AeL27+Beur7/reWA/So1glv2Z0lMMm9bM9nHdYxMTYarqiGlgKTa6Mc8C5lAqniv kfI96QzJRmOt7ZWpZTZQwRrZj6zqFLVQpDQQJ9CdNCupblM2giBEy11eUOeHO1ak bfX1gbT+auLTvlcAVfJT2mw/Dl4eEp+vu2EA1vOfauc7d6MV6PLHLAN1dM+NVb2Q Q9JOa5q68YLmWmH1Y/Y0xHdNi4rnb7TFCVFFQVTCgxcQhHD4EZGKqW7juV8XjNk8 +xd1MMcSk2TeZ2mWTBK/Lm/hh8OFthpX5qALAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUoOYVNlQRyjcUm6uC8HrX+1Jix0MwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9vT1lWTmxRUnlqY1VtNnVDOEhy WC0xSml4ME0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5Mw MA0GCSqGSIb3DQEBCwUAA4IBAQAXea6s2A+FLkYVOSsHOqKDUGlbdxSJANfsDuFl gOfmcosGYBrEQAWY5Z+HYcCVCV+fpgZ72LJ0apeNatUPqL7FlxSXGunZwN7F8ZcW Lozk5bvpeFSLRgxu933AF6CB4cL2YTH8sOR0cEhQvTcSQlzT29Q3x6iGm55qwfcp /Gki2YIvV5ejUeK8WTZYKXviMY/sC18omFO10FdkP/VVj6rwj/uMesF4lKYg+nrc Ns544+blatLtzoOd365eLgLTGs3H/z5HDfxVp4RIOaMZ2WwBHNnAj8VTIY1MJH4S dx4/v7kAREhIQttJ44P21Uc9a2ZGsYBEU3Kk0QPHArpeKrlc -----END CERTIFICATE-----Generated at Tue Apr 22 23:17:52 2025 by rpki-client