$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/JQswR4yn95N3Lj3L14XU75idpXM.roa File: JQswR4yn95N3Lj3L14XU75idpXM.roa (raw, json) Hash identifier: 5ElHec8rEFX0i84w0G8qJlyluSaZjYQASXfj/GxRQyE= Subject key identifier: 25:0B:30:47:8C:A7:F7:93:77:2E:3D:CB:D7:85:D4:EF:98:9D:A5:73 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0DB6 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/JQswR4yn95N3Lj3L14XU75idpXM.roa Signing time: Mon 26 Aug 2024 05:10:21 +0000 ROA not before: Mon 26 Aug 2024 05:10:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 123.50.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Nov 2024 11:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 26 05:10:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=250B30478CA7F793772E3DCBD785D4EF989DA573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:6b:83:2a:48:74:56:7d:d7:af:c0:a3:87: ca:f2:59:67:17:2c:05:3f:ea:11:73:a8:da:ec:31: 9d:10:8d:8d:14:79:09:3b:4f:ea:ec:50:ac:a0:c5: 8c:11:39:38:51:38:34:c5:9a:91:c8:c2:cb:11:f7: bb:93:1b:d0:e4:bd:5d:91:2b:fd:5a:e5:05:bc:ee: eb:95:f1:c8:72:c4:2d:62:35:a9:22:7e:9b:93:37: fb:36:02:4e:59:58:f2:60:5d:59:03:8b:ef:f2:0a: 57:07:77:84:bb:24:fb:ac:35:76:e4:76:ff:da:c9: 22:23:42:36:09:c9:2d:8d:bf:6e:10:2c:5a:f1:f8: 79:01:7e:8b:3c:be:05:68:aa:5a:98:30:22:56:cf: be:c7:24:2a:2e:82:8d:ff:ca:3d:4e:2a:b5:e1:c6: 0f:36:16:d5:e2:93:04:94:9a:04:d3:c6:36:67:19: e2:52:ce:ba:f4:57:ba:7b:97:b3:0d:fc:cd:a0:f9: 1a:e4:a1:77:f2:ef:5e:0e:8f:56:53:64:ce:a2:7f: bf:15:4e:93:e3:63:61:00:a4:99:a1:c7:88:a5:c5: 3b:fe:ed:e9:09:19:1f:25:a0:14:f3:e7:77:33:0c: 27:cb:36:ef:24:f3:1b:68:f4:5e:ba:5e:80:25:8e: 8f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0B:30:47:8C:A7:F7:93:77:2E:3D:CB:D7:85:D4:EF:98:9D:A5:73 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/JQswR4yn95N3Lj3L14XU75idpXM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.50.48.0/21 Signature Algorithm: sha256WithRSAEncryption 97:62:bc:18:8c:1c:b9:fe:65:30:73:f6:58:b2:94:f1:ab:eb: c5:cc:c3:77:82:03:fb:b1:8f:8f:5e:1d:c9:41:97:e3:eb:01: e1:d8:a4:0c:ee:be:91:cb:92:ef:26:62:8e:68:46:73:5e:a2: 63:b2:f5:bd:44:68:64:d6:34:1a:78:f5:bd:fd:15:c4:ef:e5: a1:4d:cc:f7:c1:16:ca:46:04:7e:5b:77:83:fa:ac:c7:44:a7: 0e:ba:d1:d9:09:af:d2:b4:de:36:45:a1:3d:ce:06:50:3a:2f: a2:03:8d:e6:9e:f0:08:17:07:da:52:01:ce:b6:b1:d8:4c:36: 7e:89:a2:f7:d5:a1:c6:e4:6a:37:83:63:d0:7c:50:12:fd:c8: c9:6b:4f:be:1f:04:c0:d2:de:ae:14:87:b4:eb:50:f2:81:1c: f5:ea:d2:c0:94:20:59:11:7d:e7:3a:83:15:95:b6:ea:ad:8a: 8c:d3:d7:1f:5b:ce:93:cd:33:1d:3f:17:75:52:89:1d:60:41: f3:22:c9:16:ea:fe:0c:cb:1a:de:6b:ba:b2:82:57:00:59:5a: 5a:08:cb:20:c4:18:b4:25:ce:69:c5:db:df:8d:56:93:f0:16: de:ae:bf:c0:c8:aa:60:d2:4b:37:7b:db:b2:0d:6b:e3:54:a8: 27:54:bc:f2 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNDA4MjYw NTEwMjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI1MEIzMDQ3OENBN0Y3 OTM3NzJFM0RDQkQ3ODVENEVGOTg5REE1NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2bmuDKkh0Vn3Xr8Cjh8ryWWcXLAU/6hFzqNrsMZ0QjY0UeQk7 T+rsUKygxYwROThRODTFmpHIwssR97uTG9DkvV2RK/1a5QW87uuV8chyxC1iNaki fpuTN/s2Ak5ZWPJgXVkDi+/yClcHd4S7JPusNXbkdv/aySIjQjYJyS2Nv24QLFrx +HkBfos8vgVoqlqYMCJWz77HJCougo3/yj1OKrXhxg82FtXikwSUmgTTxjZnGeJS zrr0V7p7l7MN/M2g+RrkoXfy714Oj1ZTZM6if78VTpPjY2EApJmhx4ilxTv+7ekJ GR8loBTz53czDCfLNu8k8xto9F66XoAljo/hAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJQswR4yn95N3Lj3L14XU75idpXMwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9KUXN3UjR5bjk1TjNMajNMMTRY VTc1aWRwWE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDezIw MA0GCSqGSIb3DQEBCwUAA4IBAQCXYrwYjBy5/mUwc/ZYspTxq+vFzMN3ggP7sY+P Xh3JQZfj6wHh2KQM7r6Ry5LvJmKOaEZzXqJjsvW9RGhk1jQaePW9/RXE7+WhTcz3 wRbKRgR+W3eD+qzHRKcOutHZCa/StN42RaE9zgZQOi+iA43mnvAIFwfaUgHOtrHY TDZ+iaL31aHG5Go3g2PQfFAS/cjJa0++HwTA0t6uFIe061DygRz16tLAlCBZEX3n OoMVlbbqrYqM09cfW86TzTMdPxd1UokdYEHzIskW6v4Myxrea7qyglcAWVpaCMsg xBi0Jc5pxdvfjVaT8Bberr/AyKpg0ks3e9uyDWvjVKgnVLzy -----END CERTIFICATE-----Generated at Thu Nov 14 07:14:15 2024 by rpki-client on console-fra.rpki-client.org