$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/J05rOiLboud8tMM3wBosPkqH6NQ.roa File: J05rOiLboud8tMM3wBosPkqH6NQ.roa (raw, json) Hash identifier: l1w+zucp6/qf5aCMF00CPA4T7P5gsL3dg9/pibC/y+c= Subject key identifier: 27:4E:6B:3A:22:DB:A2:E7:7C:B4:C3:37:C0:1A:2C:3E:4A:87:E8:D4 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0E4B Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/J05rOiLboud8tMM3wBosPkqH6NQ.roa Signing time: Mon 10 Feb 2025 14:03:23 +0000 ROA not before: Mon 10 Feb 2025 14:03:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 27.147.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3659 (0xe4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Feb 10 14:03:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=274E6B3A22DBA2E77CB4C337C01A2C3E4A87E8D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:28:3a:02:8d:da:c2:2f:08:b0:a6:75:01: 30:2f:6c:a7:8b:9a:55:43:4e:f1:b1:8b:f6:c7:97: 9a:24:7b:5c:52:bc:57:8a:99:74:8f:13:7a:d9:aa: ce:48:90:05:d6:32:da:59:c1:79:2e:74:cf:44:6b: 1c:0c:c5:a4:87:ab:8b:95:68:34:ba:15:1e:dc:8e: 0e:1c:c0:72:75:26:89:aa:36:95:0d:b1:d3:d1:34: 7a:9b:da:9a:fb:d0:c3:b6:39:44:35:df:80:75:ad: 1f:5e:8e:a1:e9:72:d7:96:fa:ec:4e:db:59:89:bb: 20:23:5a:f2:44:77:d1:4a:ab:4b:9e:0b:d0:8e:1b: a0:c7:94:9f:a6:f2:6f:1e:69:9d:33:d2:ac:24:a7: 11:46:b6:fa:c9:51:99:be:61:47:86:20:54:88:a1: 94:3a:7d:b8:34:a4:5f:2d:e7:3f:a3:9b:ce:1e:25: 6f:02:fc:02:0a:88:86:4c:99:1a:c1:39:55:1f:cc: 7b:a9:e9:2c:d9:01:10:25:21:94:ec:53:a7:c0:e1: 15:42:a5:2b:1a:d7:f6:b0:af:37:04:96:5a:92:e5: 3a:b2:b1:18:90:98:03:74:f8:a1:3d:96:f8:51:21: ab:05:50:01:00:01:10:2c:c1:d8:f9:f8:de:6e:ea: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4E:6B:3A:22:DB:A2:E7:7C:B4:C3:37:C0:1A:2C:3E:4A:87:E8:D4 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/J05rOiLboud8tMM3wBosPkqH6NQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.61.0/24 Signature Algorithm: sha256WithRSAEncryption 89:9d:56:ef:46:5a:c2:08:5a:ce:e5:2b:d3:7d:20:42:bd:69: 8f:89:53:ff:be:87:87:16:f3:dd:46:2d:a9:d6:d9:c9:85:57: 80:85:cc:74:19:e4:88:b5:0e:18:1a:91:eb:87:df:a8:50:2f: 92:7a:41:1f:c0:4e:eb:8e:51:e1:9d:0a:ca:25:6b:8e:c6:eb: 6b:24:2e:17:5c:b0:cb:94:bb:0b:c9:83:60:0a:71:8d:92:1a: 7a:06:d2:08:c4:f3:2a:25:5d:14:ea:bb:d1:e0:4f:a3:79:10: 5f:e1:04:33:47:c6:f7:f4:cd:fa:57:de:9e:22:75:ca:f0:d9: 0b:4d:7d:29:39:c1:3e:62:f1:45:41:b4:9b:93:84:da:a8:ca: e2:88:52:51:2e:ac:43:f8:3d:f9:30:d7:03:fd:49:71:35:cf: 2c:2a:f8:5c:25:90:47:55:37:2e:c0:39:e8:20:75:ef:95:68: 43:4a:9c:61:43:f4:a7:e5:29:27:4d:9e:70:9a:7f:06:12:a5: ff:eb:30:0f:19:f8:b1:15:27:c7:b4:84:20:4a:5e:cc:ea:a1: eb:e0:f1:86:49:32:5e:2a:f1:33:4f:cd:28:d3:60:5c:23:34: 5f:a2:20:4a:3a:ab:a3:84:ec:be:a3:ea:f0:81:0a:0e:8c:1a: 8b:0a:7b:aa -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTAyMTAx NDAzMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3NEU2QjNBMjJEQkEy RTc3Q0I0QzMzN0MwMUEyQzNFNEE4N0U4RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqASg6Ao3awi8IsKZ1ATAvbKeLmlVDTvGxi/bHl5oke1xSvFeK mXSPE3rZqs5IkAXWMtpZwXkudM9EaxwMxaSHq4uVaDS6FR7cjg4cwHJ1JomqNpUN sdPRNHqb2pr70MO2OUQ134B1rR9ejqHpcteW+uxO21mJuyAjWvJEd9FKq0ueC9CO G6DHlJ+m8m8eaZ0z0qwkpxFGtvrJUZm+YUeGIFSIoZQ6fbg0pF8t5z+jm84eJW8C /AIKiIZMmRrBOVUfzHup6SzZARAlIZTsU6fA4RVCpSsa1/awrzcEllqS5TqysRiQ mAN0+KE9lvhRIasFUAEAARAswdj5+N5u6prJAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJ05rOiLboud8tMM3wBosPkqH6NQwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9KMDVyT2lMYm91ZDh0TU0zd0Jv c1BrcUg2TlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG5M9 MA0GCSqGSIb3DQEBCwUAA4IBAQCJnVbvRlrCCFrO5SvTfSBCvWmPiVP/voeHFvPd Ri2p1tnJhVeAhcx0GeSItQ4YGpHrh9+oUC+SekEfwE7rjlHhnQrKJWuOxutrJC4X XLDLlLsLyYNgCnGNkhp6BtIIxPMqJV0U6rvR4E+jeRBf4QQzR8b39M36V96eInXK 8NkLTX0pOcE+YvFFQbSbk4TaqMriiFJRLqxD+D35MNcD/UlxNc8sKvhcJZBHVTcu wDnoIHXvlWhDSpxhQ/Sn5SknTZ5wmn8GEqX/6zAPGfixFSfHtIQgSl7M6qHr4PGG STJeKvEzT80o02BcIzRfoiBKOqujhOy+o+rwgQoOjBqLCnuq -----END CERTIFICATE-----Generated at Wed Feb 19 22:10:28 2025 by rpki-client