$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/AdEKAudTaXpO8J7FrB6ixGwo-zk.roa File: AdEKAudTaXpO8J7FrB6ixGwo-zk.roa (raw, json) Hash identifier: mMFGTzkrHPe1sY/dZd7QeOysKT/deT9OBNDjhsFKTF8= Subject key identifier: 01:D1:0A:02:E7:53:69:7A:4E:F0:9E:C5:AC:1E:A2:C4:6C:28:FB:39 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0DA9 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AdEKAudTaXpO8J7FrB6ixGwo-zk.roa Signing time: Mon 26 Aug 2024 05:10:18 +0000 ROA not before: Mon 26 Aug 2024 05:10:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 27.147.24.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3497 (0xda9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 26 05:10:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=01D10A02E753697A4EF09EC5AC1EA2C46C28FB39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6c:3a:e8:99:f7:15:b4:ee:8f:84:7f:d4:a4: 52:55:47:08:f1:27:7c:b8:7a:7f:11:b5:27:22:47: 3b:d3:d3:44:cc:b3:c4:21:e2:6b:6c:e9:54:08:4a: 34:03:35:2f:26:bf:23:3c:6d:ac:ce:cb:6a:0b:5e: 74:92:c1:73:6b:73:7e:62:c8:7d:96:86:75:c1:b6: aa:c2:d1:f6:5d:ca:6d:36:42:37:7e:0b:f3:4c:ea: 1f:48:c0:84:42:ee:fa:d9:9a:7a:b0:ff:f3:74:63: 70:36:74:da:c8:1c:33:aa:03:bd:a3:32:05:a9:04: bb:4c:b1:23:f9:04:9c:e9:47:1d:91:f0:2a:e1:76: 69:75:2f:5b:55:9d:9f:4d:2f:cf:30:ef:91:58:c1: 72:38:5e:f7:8b:2c:88:32:2c:ce:e0:35:5e:7d:51: c6:62:75:d2:be:59:f3:ec:27:98:46:70:50:75:8e: 06:93:64:db:c9:50:92:b0:4a:be:56:b6:1e:0f:8a: 85:c5:31:bb:0b:25:6b:18:93:6f:3c:2f:1f:5a:dd: b2:2b:db:b4:97:47:24:83:0f:ca:92:61:18:9d:7e: 2c:3d:38:59:68:bf:41:e3:dd:4a:6e:60:06:12:a0: e4:08:ef:09:fc:0b:30:f5:57:40:69:1e:ff:51:41: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D1:0A:02:E7:53:69:7A:4E:F0:9E:C5:AC:1E:A2:C4:6C:28:FB:39 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AdEKAudTaXpO8J7FrB6ixGwo-zk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.24.0/21 Signature Algorithm: sha256WithRSAEncryption 79:49:1d:9b:c6:74:dc:c3:2d:39:da:ff:27:50:f5:6e:3d:ff: b0:3e:9b:06:50:f0:14:a9:18:71:3d:5f:20:8b:53:01:92:89: d3:9d:21:df:45:06:53:96:88:fc:10:7d:f5:99:f2:00:da:81: 25:5b:1f:53:13:1e:7d:55:e0:d2:15:ba:a3:e6:00:a1:0c:f0: 95:8a:57:84:5d:f3:c0:eb:fa:56:be:55:e8:d1:3c:00:c2:c5: bf:28:e1:b2:63:26:07:38:3a:bb:4c:2d:5e:87:60:c8:e0:02: 31:f0:a4:a9:55:70:ac:04:2e:d0:12:ba:77:bf:f0:aa:67:8c: e9:c2:89:a3:3b:08:13:95:45:70:c3:f5:5d:d1:01:e8:7f:18: 1a:99:71:b0:20:2d:6a:36:84:7c:30:66:0b:ec:ca:78:3e:a6: 7a:8b:8d:75:17:5f:c7:9a:3e:1b:3d:8a:6c:c9:be:3b:e0:bf: fe:0f:37:dc:de:9b:aa:36:f6:31:b7:0b:dc:41:3c:cb:c9:2f: c0:6e:37:47:5f:aa:de:34:bb:d0:2d:10:03:b5:b6:52:53:08: 70:4a:eb:b6:2b:f3:c6:c1:23:ef:f5:f0:d0:87:42:3e:84:5d: 3b:03:b5:38:4b:f7:e7:08:25:84:a2:03:07:5c:0b:a6:d1:02: e5:91:90:47 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNDA4MjYw NTEwMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxRDEwQTAyRTc1MzY5 N0E0RUYwOUVDNUFDMUVBMkM0NkMyOEZCMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXbDromfcVtO6PhH/UpFJVRwjxJ3y4en8RtSciRzvT00TMs8Qh 4mts6VQISjQDNS8mvyM8bazOy2oLXnSSwXNrc35iyH2WhnXBtqrC0fZdym02Qjd+ C/NM6h9IwIRC7vrZmnqw//N0Y3A2dNrIHDOqA72jMgWpBLtMsSP5BJzpRx2R8Crh dml1L1tVnZ9NL88w75FYwXI4XveLLIgyLM7gNV59UcZiddK+WfPsJ5hGcFB1jgaT ZNvJUJKwSr5Wth4PioXFMbsLJWsYk288Lx9a3bIr27SXRySDD8qSYRidfiw9OFlo v0Hj3UpuYAYSoOQI7wn8CzD1V0BpHv9RQdN5AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUAdEKAudTaXpO8J7FrB6ixGwo+zkwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9BZEVLQXVkVGFYcE84SjdGckI2 aXhHd28temsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5MY MA0GCSqGSIb3DQEBCwUAA4IBAQB5SR2bxnTcwy052v8nUPVuPf+wPpsGUPAUqRhx PV8gi1MBkonTnSHfRQZTloj8EH31mfIA2oElWx9TEx59VeDSFbqj5gChDPCVileE XfPA6/pWvlXo0TwAwsW/KOGyYyYHODq7TC1eh2DI4AIx8KSpVXCsBC7QErp3v/Cq Z4zpwomjOwgTlUVww/Vd0QHofxgamXGwIC1qNoR8MGYL7Mp4PqZ6i411F1/Hmj4b PYpsyb474L/+Dzfc3puqNvYxtwvcQTzLyS/AbjdHX6reNLvQLRADtbZSUwhwSuu2 K/PGwSPv9fDQh0I+hF07A7U4S/fnCCWEogMHXAum0QLlkZBH -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org