$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Szk38jmv0AQ8kurLVtOpB4yAGk.roa File: 7Szk38jmv0AQ8kurLVtOpB4yAGk.roa (raw, json) Hash identifier: ghDs/I+ADSG4O70Vlu+G/NY9TjN05c45WGgFjx7Dup0= Subject key identifier: ED:2C:E4:DF:C8:E6:BF:40:10:F2:4B:AB:2D:5B:4E:A4:1E:32:00:69 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0C6A Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Szk38jmv0AQ8kurLVtOpB4yAGk.roa Signing time: Fri 01 Sep 2023 08:26:32 +0000 ROA not before: Fri 01 Sep 2023 08:26:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18429 IP address blocks: 27.147.16.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Sep 1 08:26:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=ED2CE4DFC8E6BF4010F24BAB2D5B4EA41E320069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:ee:69:b9:8f:0c:1b:7b:a2:65:e5:56:13: d8:71:aa:1f:55:29:77:c9:16:e3:b4:08:a6:74:42: 67:4e:8f:17:28:52:18:1e:d6:ff:41:6e:76:58:1d: 13:7c:aa:b8:07:9f:9e:22:26:7a:fe:14:e4:d7:54: 81:2f:95:9c:68:58:8f:89:8f:6f:15:f6:8f:39:3f: 97:4e:99:85:ce:0a:25:f2:5e:a0:29:b6:31:b1:18: a8:ca:ac:45:db:1b:40:3b:99:46:d8:7d:8b:c7:84: 12:f5:c8:51:e5:0b:3c:79:f6:ec:61:57:64:cb:f8: 2d:d2:82:8c:0a:b6:04:98:57:82:0e:5c:0f:b6:0c: 0a:1a:68:30:91:e4:9a:80:21:b7:4b:fb:44:35:7b: ca:95:6a:c9:6b:ff:9f:e7:c0:78:33:8a:58:d9:8a: fd:25:f5:3c:70:8f:12:1c:8c:95:c4:34:1b:ed:01: 8b:fa:f4:56:34:4e:5a:f0:36:62:8c:82:2a:9e:2b: c5:24:2c:8a:ab:d4:6d:40:fa:79:1b:d2:17:c9:4e: ea:e7:05:6c:c5:57:66:a0:f4:2d:7d:94:f9:b9:b5: a0:83:89:cb:b3:4e:4e:01:d7:49:44:88:9d:65:2d: 52:77:7d:29:40:af:cf:23:58:cc:a8:be:17:a7:98: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2C:E4:DF:C8:E6:BF:40:10:F2:4B:AB:2D:5B:4E:A4:1E:32:00:69 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Szk38jmv0AQ8kurLVtOpB4yAGk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.16.0/21 Signature Algorithm: sha256WithRSAEncryption 54:7a:b8:b0:2c:68:e9:16:7e:bd:ce:30:0f:18:c1:36:24:a2: 68:d8:29:46:bc:c5:95:ac:05:e3:73:3d:ab:7e:bd:d5:8e:2b: 26:ef:44:ac:33:d3:c5:57:7b:ee:6d:6e:ba:fd:bd:4d:18:e5: 92:4f:14:18:4a:03:be:50:8f:9a:05:df:4a:34:05:4a:44:dd: 2e:a8:28:92:1b:05:4d:ce:7a:1b:4e:61:37:20:77:0c:b0:d6: 60:4d:49:e3:45:83:74:bb:93:3b:23:fd:6b:00:1f:89:e8:31: 69:f8:bc:d3:53:d6:17:e9:59:3c:ac:de:bf:07:31:41:70:4f: 6e:c9:ba:bc:d1:49:28:c3:bb:d3:2d:00:4a:90:b5:ac:7f:d6: 3d:a3:78:7b:47:6e:cb:d8:d1:a9:85:bf:c6:08:2c:d4:f5:ee: 9a:68:3d:14:bf:b9:56:7f:c7:6b:77:ae:61:d3:86:15:77:ba: a3:8b:33:03:6d:0b:81:38:7c:98:88:87:b3:cf:4d:20:33:06: 17:c9:dc:77:ac:40:e0:ec:51:bf:ea:7d:d4:f4:11:ec:28:4d: ac:be:28:58:0c:95:ea:64:bc:a2:7f:05:8d:5d:a5:b2:c8:32: 38:00:9b:5d:be:6f:99:2c:86:d2:3e:1e:b3:fd:dd:f8:33:b3: a3:dd:ec:bc -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw ODI2MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVEMkNFNERGQzhFNkJG NDAxMEYyNEJBQjJENUI0RUE0MUUzMjAwNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiY+5puY8MG3uiZeVWE9hxqh9VKXfJFuO0CKZ0QmdOjxcoUhge 1v9BbnZYHRN8qrgHn54iJnr+FOTXVIEvlZxoWI+Jj28V9o85P5dOmYXOCiXyXqAp tjGxGKjKrEXbG0A7mUbYfYvHhBL1yFHlCzx59uxhV2TL+C3SgowKtgSYV4IOXA+2 DAoaaDCR5JqAIbdL+0Q1e8qVaslr/5/nwHgziljZiv0l9TxwjxIcjJXENBvtAYv6 9FY0TlrwNmKMgiqeK8UkLIqr1G1A+nkb0hfJTurnBWzFV2ag9C19lPm5taCDicuz Tk4B10lEiJ1lLVJ3fSlAr88jWMyovhenmAcFAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU7Szk38jmv0AQ8kurLVtOpB4yAGkwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC83U3prMzhqbXYwQVE4a3VyTFZ0 T3BCNHlBR2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5MQ MA0GCSqGSIb3DQEBCwUAA4IBAQBUeriwLGjpFn69zjAPGME2JKJo2ClGvMWVrAXj cz2rfr3Vjism70SsM9PFV3vubW66/b1NGOWSTxQYSgO+UI+aBd9KNAVKRN0uqCiS GwVNznobTmE3IHcMsNZgTUnjRYN0u5M7I/1rAB+J6DFp+LzTU9YX6Vk8rN6/BzFB cE9uybq80Ukow7vTLQBKkLWsf9Y9o3h7R27L2NGphb/GCCzU9e6aaD0Uv7lWf8dr d65h04YVd7qjizMDbQuBOHyYiIezz00gMwYXydx3rEDg7FG/6n3U9BHsKE2svihY DJXqZLyifwWNXaWyyDI4AJtdvm+ZLIbSPh6z/d34M7Oj3ey8 -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:40 2024 by rpki-client on console-ams.rpki-client.org