$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/8tB86diAt6Yoelp9tNXPu5WPiUM.roa File: 8tB86diAt6Yoelp9tNXPu5WPiUM.roa (raw, json) Hash identifier: yrP2SdaeAKbxT/EwZImscaxADT5LyeqaQjrka8LUWKk= Subject key identifier: F2:D0:7C:E9:D8:80:B7:A6:28:7A:5A:7D:B4:D5:CF:BB:95:8F:89:43 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0E49 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/8tB86diAt6Yoelp9tNXPu5WPiUM.roa Signing time: Mon 10 Feb 2025 14:03:22 +0000 ROA not before: Mon 10 Feb 2025 14:03:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 27.147.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3657 (0xe49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Feb 10 14:03:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F2D07CE9D880B7A6287A5A7DB4D5CFBB958F8943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:d9:07:57:22:25:60:8b:af:b2:e8:49:c4: f0:3d:f5:9a:ad:e5:2d:4c:31:e1:72:e9:22:59:71: 58:1d:21:65:b6:1b:a5:fe:aa:46:8d:27:cb:65:ec: 4f:31:a1:fb:84:18:ab:f9:0c:68:a7:49:88:e4:f3: 79:d0:bb:22:dc:e9:76:b1:5d:27:79:42:08:03:75: 1a:ae:d2:ed:01:ce:61:6d:23:74:9d:43:d8:88:15: c9:bb:29:93:e2:f6:21:57:89:3b:b1:b9:47:75:b3: 09:6f:78:8c:1c:25:d8:8b:5b:87:8a:7c:b8:a3:38: 41:a5:8c:6e:06:b8:2f:f6:41:26:6c:a6:2e:e1:29: 5b:9a:4f:5d:57:f5:e9:bc:aa:d5:0a:e3:8a:c7:df: a6:3c:bb:65:ae:70:5b:5b:31:ba:29:be:27:d8:99: 76:aa:7d:6f:62:66:bc:74:5f:2b:5d:f5:7a:ef:39: 76:0e:a5:33:0d:7e:13:52:f0:e1:9a:ca:10:70:ce: 6a:b8:cd:77:bb:64:b2:1d:06:7f:9a:20:17:09:fd: bd:59:6e:56:4e:47:7b:ba:f2:5e:6a:fa:3e:3d:56: 89:30:83:e7:25:a8:3c:78:aa:0c:e0:1c:32:52:87: 34:22:47:cb:9e:64:b1:c3:12:e6:16:84:8b:cd:76: e0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D0:7C:E9:D8:80:B7:A6:28:7A:5A:7D:B4:D5:CF:BB:95:8F:89:43 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/8tB86diAt6Yoelp9tNXPu5WPiUM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.32.0/21 Signature Algorithm: sha256WithRSAEncryption a5:01:2b:8c:27:52:62:70:d9:a7:ea:ac:45:f9:a6:f2:37:d0: 76:5a:c6:e8:51:ad:54:dd:42:47:39:0c:4e:e0:1c:12:7b:21: c9:f0:7b:a4:1d:c7:59:ff:35:d9:89:63:b0:29:ee:c9:bf:b3: f3:7c:8d:d3:b3:9a:ec:10:7e:c2:87:27:b0:1e:be:3b:15:55: c1:55:0e:79:64:7b:51:c0:22:89:e2:b7:60:da:5a:8c:e4:03: af:fb:32:c3:6a:ee:a0:29:81:c5:77:76:6f:28:3c:20:88:2b: 93:13:38:1d:99:23:d0:20:5f:14:6e:70:bd:73:1f:eb:88:4f: 7d:d8:51:a9:2c:2c:62:72:21:df:b9:df:86:87:56:f1:41:28: de:c5:d7:25:f9:c9:cd:1b:91:ca:7d:d7:de:fb:dc:e9:d7:b2: 55:38:5d:b3:f8:35:fb:fa:cf:5f:29:d6:b6:9a:f3:d5:39:4d: 5a:00:df:56:2e:68:35:43:92:02:0e:b3:33:21:4e:d0:21:9f: fc:65:82:0e:fa:93:af:c0:f2:b4:32:2d:b3:92:f0:6a:c0:7a: b0:b3:72:9a:56:aa:4e:87:a2:30:e3:5e:9f:a8:8a:06:98:47: 5e:d2:62:39:64:af:a1:92:7b:5c:5e:74:08:ca:69:8e:84:d1: bf:e7:06:8c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTAyMTAx NDAzMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyRDA3Q0U5RDg4MEI3 QTYyODdBNUE3REI0RDVDRkJCOTU4Rjg5NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiHdkHVyIlYIuvsuhJxPA99Zqt5S1MMeFy6SJZcVgdIWW2G6X+ qkaNJ8tl7E8xofuEGKv5DGinSYjk83nQuyLc6XaxXSd5QggDdRqu0u0BzmFtI3Sd Q9iIFcm7KZPi9iFXiTuxuUd1swlveIwcJdiLW4eKfLijOEGljG4GuC/2QSZspi7h KVuaT11X9em8qtUK44rH36Y8u2WucFtbMbopvifYmXaqfW9iZrx0Xytd9XrvOXYO pTMNfhNS8OGayhBwzmq4zXe7ZLIdBn+aIBcJ/b1ZblZOR3u68l5q+j49Vokwg+cl qDx4qgzgHDJShzQiR8ueZLHDEuYWhIvNduDfAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU8tB86diAt6Yoelp9tNXPu5WPiUMwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC84dEI4NmRpQXQ2WW9lbHA5dE5Y UHU1V1BpVU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5Mg MA0GCSqGSIb3DQEBCwUAA4IBAQClASuMJ1JicNmn6qxF+abyN9B2WsboUa1U3UJH OQxO4BwSeyHJ8HukHcdZ/zXZiWOwKe7Jv7PzfI3Ts5rsEH7ChyewHr47FVXBVQ55 ZHtRwCKJ4rdg2lqM5AOv+zLDau6gKYHFd3ZvKDwgiCuTEzgdmSPQIF8UbnC9cx/r iE992FGpLCxiciHfud+Gh1bxQSjexdcl+cnNG5HKfdfe+9zp17JVOF2z+DX7+s9f Kda2mvPVOU1aAN9WLmg1Q5ICDrMzIU7QIZ/8ZYIO+pOvwPK0Mi2zkvBqwHqws3Ka VqpOh6Iw416fqIoGmEde0mI5ZK+hkntcXnQIymmOhNG/5waM -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:12 2025 by rpki-client