$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/KvO45oiO2o0VH1cBik3U3WIBPPE.roa File: KvO45oiO2o0VH1cBik3U3WIBPPE.roa (raw, json) Hash identifier: 4eGlCsSEzfmZYvEX+daJ/cp+p5k+j7PXdpjNMfCbfqg= Subject key identifier: 2A:F3:B8:E6:88:8E:DA:8D:15:1F:57:01:8A:4D:D4:DD:62:01:3C:F1 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0DBB Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/KvO45oiO2o0VH1cBik3U3WIBPPE.roa Signing time: Mon 26 Aug 2024 05:10:22 +0000 ROA not before: Mon 26 Aug 2024 05:10:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 27.147.0.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Nov 2024 07:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3515 (0xdbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 26 05:10:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2AF3B8E6888EDA8D151F57018A4DD4DD62013CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a1:4b:59:c9:fa:56:59:f6:97:11:93:f7:2b: 46:0d:b8:6c:15:88:f9:d1:38:53:3b:d5:f9:d8:ad: a5:8a:94:b4:e2:38:9e:c3:14:f9:03:17:e2:99:7f: be:1c:e9:2e:fd:ec:4c:6c:b3:32:b2:db:d7:c6:a1: dc:61:ec:53:2c:28:d7:47:f9:0f:d9:92:da:3d:c5: f1:48:2c:ba:2f:74:32:85:aa:83:33:0a:b4:78:a4: 00:18:55:56:5f:f4:5c:77:77:b2:df:1b:fa:a9:d4: 9b:7d:b8:07:7d:89:28:38:c7:b5:02:9b:20:53:21: 92:4c:00:3f:62:63:61:c4:f8:19:ea:19:7b:2a:c4: 77:06:c4:8d:fa:4a:2e:35:df:0d:af:39:0c:7f:2e: 44:65:74:b0:10:2e:82:95:68:a4:80:57:9d:2c:3a: 10:1e:4a:06:4c:59:24:f3:b1:90:7c:97:e6:d9:2d: 5d:4a:5b:a3:2c:08:e7:83:53:6f:8c:fb:21:e7:89: f0:39:a7:48:8e:60:7f:cd:f4:ae:67:73:91:6e:cb: 1d:72:c5:4b:66:c1:15:49:1a:48:97:93:89:91:33: 69:a3:76:cb:06:a2:8d:04:00:07:bf:5c:e3:1a:76: 84:39:ca:63:da:11:ae:46:5b:8b:d1:92:47:32:15: 4a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:B8:E6:88:8E:DA:8D:15:1F:57:01:8A:4D:D4:DD:62:01:3C:F1 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/KvO45oiO2o0VH1cBik3U3WIBPPE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.0.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:c4:e7:a8:e7:50:e8:5b:ba:7d:77:68:b3:ff:16:ff:ea:2c: 4e:1c:39:ff:9a:ef:80:00:1a:22:fe:ef:a9:e0:f7:a5:cf:5f: 62:f1:a8:4c:fc:5a:74:4b:35:cf:2a:e2:59:18:85:92:f3:f2: 2e:49:e3:c2:ab:ba:3c:7d:60:2e:5d:8b:66:e9:7a:85:8e:b7: fb:7d:a2:b3:5e:0f:22:42:a3:d7:27:74:d8:74:97:69:47:8b: 6f:ae:d5:90:73:18:35:e0:7c:06:85:d6:28:48:fe:1a:ea:78: ba:0e:6b:ca:a7:dd:98:5d:a8:bf:64:1d:8f:57:57:c6:3a:57: 11:e8:82:d3:34:56:a6:10:f7:50:06:cd:2c:be:ea:53:cf:d3: e9:e6:6f:20:92:34:cb:d8:0e:ea:44:08:92:42:3a:8f:61:ca: d7:f0:0e:67:82:4e:95:ea:37:0e:a1:b9:5a:e3:97:ea:15:fc: c8:30:21:88:9c:0a:60:87:b6:82:5c:36:e5:cc:1f:01:13:5d: e3:37:78:f2:b2:a7:e0:64:99:13:ef:70:ba:9f:c0:a6:76:64: a9:b1:d2:92:10:86:1d:31:c8:a7:85:0b:cf:35:90:fd:6e:58: 1b:15:d0:56:8a:1f:91:fa:dd:b8:97:56:a9:88:ab:ff:28:63: 90:07:3d:ad -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNDA4MjYw NTEwMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBRjNCOEU2ODg4RURB OEQxNTFGNTcwMThBNERENERENjIwMTNDRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD6oUtZyfpWWfaXEZP3K0YNuGwViPnROFM71fnYraWKlLTiOJ7D FPkDF+KZf74c6S797ExsszKy29fGodxh7FMsKNdH+Q/Zkto9xfFILLovdDKFqoMz CrR4pAAYVVZf9Fx3d7LfG/qp1Jt9uAd9iSg4x7UCmyBTIZJMAD9iY2HE+BnqGXsq xHcGxI36Si413w2vOQx/LkRldLAQLoKVaKSAV50sOhAeSgZMWSTzsZB8l+bZLV1K W6MsCOeDU2+M+yHnifA5p0iOYH/N9K5nc5Fuyx1yxUtmwRVJGkiXk4mRM2mjdssG oo0EAAe/XOMadoQ5ymPaEa5GW4vRkkcyFUqTAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUKvO45oiO2o0VH1cBik3U3WIBPPEwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9Ldk80NW9pTzJvMFZIMWNCaWsz VTNXSUJQUEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5MA MA0GCSqGSIb3DQEBCwUAA4IBAQCaxOeo51DoW7p9d2iz/xb/6ixOHDn/mu+AABoi /u+p4Pelz19i8ahM/Fp0SzXPKuJZGIWS8/IuSePCq7o8fWAuXYtm6XqFjrf7faKz Xg8iQqPXJ3TYdJdpR4tvrtWQcxg14HwGhdYoSP4a6ni6DmvKp92YXai/ZB2PV1fG OlcR6ILTNFamEPdQBs0svupTz9Pp5m8gkjTL2A7qRAiSQjqPYcrX8A5ngk6V6jcO obla45fqFfzIMCGInApgh7aCXDblzB8BE13jN3jysqfgZJkT73C6n8CmdmSpsdKS EIYdMcinhQvPNZD9blgbFdBWih+R+t24l1apiKv/KGOQBz2t -----END CERTIFICATE-----Generated at Thu Nov 14 05:00:49 2024 by rpki-client on console-fra.rpki-client.org