$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Mg5uQvUOztOIe6Eq00F1cHlIqE.roa File: 7Mg5uQvUOztOIe6Eq00F1cHlIqE.roa (raw, json) Hash identifier: wUSd0lfRocOIds6Jfvva8/UjaZMGN74dyCgimeTzlXY= Subject key identifier: EC:C8:39:B9:0B:D4:3B:3B:4E:21:EE:84:AB:4D:05:D5:C1:E5:22:A1 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0C57 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Mg5uQvUOztOIe6Eq00F1cHlIqE.roa Signing time: Fri 01 Sep 2023 08:26:26 +0000 ROA not before: Fri 01 Sep 2023 08:26:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18429 IP address blocks: 124.155.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Sep 1 08:26:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=ECC839B90BD43B3B4E21EE84AB4D05D5C1E522A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:21:14:78:a4:a6:08:7c:fc:12:75:ac:e4: ea:ac:ee:a3:b9:23:13:d7:bb:00:fe:15:9f:06:d9: a8:1f:8f:ac:e5:7a:da:fe:79:47:e2:6d:0b:af:b5: 33:4a:af:2d:0a:6d:d2:54:ef:b5:91:8f:84:44:01: 00:9b:87:1a:28:a0:9c:77:5a:2c:8a:ae:4d:1c:c5: 31:e6:38:b3:25:2b:94:47:2e:6b:9a:1c:3a:30:a8: 42:91:d8:6a:d1:92:b4:64:b7:f6:34:a8:31:76:4b: 63:cb:e1:20:9d:31:58:b2:01:6d:02:9b:f7:20:9d: d1:7d:db:15:a5:d5:c8:85:da:95:0a:aa:87:b6:17: d2:3d:73:97:6e:e0:bc:ac:73:f5:d4:41:e3:de:35: 8a:2e:54:a9:48:a2:86:b5:f7:eb:9f:22:d2:d2:73: ab:bc:ae:49:62:eb:84:b5:9e:af:e8:c6:2c:59:5f: a6:a3:20:e3:56:9f:36:88:82:81:5a:67:76:10:ee: 85:b3:f8:e3:65:b8:a3:20:14:dd:65:f4:4a:8a:b9: 15:2c:f5:70:7f:31:ae:02:4d:f3:39:aa:ee:7c:95: ed:51:7e:35:99:70:20:c0:0d:0c:4c:6d:82:6f:13: 91:30:71:69:cf:a6:4f:ff:ec:3e:63:ad:64:35:f6: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C8:39:B9:0B:D4:3B:3B:4E:21:EE:84:AB:4D:05:D5:C1:E5:22:A1 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Mg5uQvUOztOIe6Eq00F1cHlIqE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.155.168.0/21 Signature Algorithm: sha256WithRSAEncryption 85:13:4f:b7:b2:ac:b0:a8:80:39:8d:91:de:48:c8:43:74:38: 8b:3b:a1:43:b4:95:b9:7c:3d:9b:70:07:71:de:83:27:f0:61: 03:94:9b:f6:63:e8:a7:2c:c3:26:35:f4:0d:27:94:19:e0:2b: 0c:33:8d:83:fb:b0:a9:6f:5e:a9:02:65:90:89:87:93:37:1c: 57:10:e2:b1:19:40:45:66:6a:ab:c8:56:ed:7e:32:35:f9:ae: 34:e0:b2:a8:8e:5d:a2:14:30:94:00:df:68:15:47:79:4e:f7: f1:06:23:ab:4a:51:ad:08:90:34:ea:c4:67:c6:a7:79:c4:46: 94:53:85:0b:a9:f1:31:b9:ed:1b:2b:07:ed:00:43:d2:0c:69: 78:d4:91:47:3b:a2:8a:83:37:e3:aa:2a:ab:4b:7b:bd:9b:38: 87:80:c4:e1:b7:3a:25:f2:2b:d8:47:c9:ab:1d:9f:d4:f3:98: 49:6a:00:ad:37:d4:7d:7d:3e:db:f3:e7:3a:fe:eb:18:97:db: 5a:ee:22:00:7d:50:a5:7c:bd:8a:b0:ed:de:5c:96:c4:b3:a5: b8:c8:f4:56:38:6a:d1:39:d5:15:db:74:7e:7a:9a:c1:b8:d5: 9d:ba:5f:12:94:ef:7f:8e:6b:24:49:05:42:70:84:cc:d8:ae: 15:64:cd:c0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw ODI2MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVDQzgzOUI5MEJENDNC M0I0RTIxRUU4NEFCNEQwNUQ1QzFFNTIyQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkKyEUeKSmCHz8EnWs5Oqs7qO5IxPXuwD+FZ8G2agfj6zletr+ eUfibQuvtTNKry0KbdJU77WRj4REAQCbhxoooJx3WiyKrk0cxTHmOLMlK5RHLmua HDowqEKR2GrRkrRkt/Y0qDF2S2PL4SCdMViyAW0Cm/cgndF92xWl1ciF2pUKqoe2 F9I9c5du4Lysc/XUQePeNYouVKlIooa19+ufItLSc6u8rkli64S1nq/oxixZX6aj IONWnzaIgoFaZ3YQ7oWz+ONluKMgFN1l9EqKuRUs9XB/Ma4CTfM5qu58le1RfjWZ cCDADQxMbYJvE5EwcWnPpk//7D5jrWQ19qd7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU7Mg5uQvUOztOIe6Eq00F1cHlIqEwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC83TWc1dVF2VU96dE9JZTZFcTAw RjFjSGxJcUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDfJuo MA0GCSqGSIb3DQEBCwUAA4IBAQCFE0+3sqywqIA5jZHeSMhDdDiLO6FDtJW5fD2b cAdx3oMn8GEDlJv2Y+inLMMmNfQNJ5QZ4CsMM42D+7Cpb16pAmWQiYeTNxxXEOKx GUBFZmqryFbtfjI1+a404LKojl2iFDCUAN9oFUd5TvfxBiOrSlGtCJA06sRnxqd5 xEaUU4ULqfExue0bKwftAEPSDGl41JFHO6KKgzfjqiqrS3u9mziHgMThtzol8ivY R8mrHZ/U85hJagCtN9R9fT7b8+c6/usYl9ta7iIAfVClfL2KsO3eXJbEs6W4yPRW OGrROdUV23R+eprBuNWdul8SlO9/jmskSQVCcITM2K4VZM3A -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:40 2024 by rpki-client on console-ams.rpki-client.org