$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/L5J2MruoO2-rbqJumTMsnR21D5A.roa File: L5J2MruoO2-rbqJumTMsnR21D5A.roa (raw, json) Hash identifier: gmmrk/PSSLPuSymOJ79yVkOG1/wMpiRZMW+NpzJUVR4= Subject key identifier: 2F:92:76:32:BB:A8:3B:6F:AB:6E:A2:6E:99:33:2C:9D:1D:B5:0F:90 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0C5B Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/L5J2MruoO2-rbqJumTMsnR21D5A.roa Signing time: Fri 01 Sep 2023 08:26:28 +0000 ROA not before: Fri 01 Sep 2023 08:26:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18429 IP address blocks: 27.147.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Sep 1 08:26:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2F927632BBA83B6FAB6EA26E99332C9D1DB50F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:a6:ef:97:35:0f:18:aa:e0:c2:16:8f:cf: 1a:33:f8:5a:11:28:1d:c1:9f:73:84:55:28:24:c5: 57:fc:a8:1e:cc:59:d0:10:47:dd:e7:31:c4:73:60: ff:b3:ee:72:ab:a4:26:83:e1:37:d3:5b:b1:23:94: 2d:17:3f:6b:ca:33:ec:c2:d3:16:92:41:65:b0:2d: eb:4f:94:43:ae:ed:2b:e2:ed:0f:6b:a3:fb:79:31: 21:0e:a5:a5:8e:74:76:13:a3:90:f3:f6:ed:7b:5b: 3a:cc:92:14:c8:67:f2:16:2e:71:c4:93:c1:fd:fd: 2b:01:87:6a:62:86:94:9e:10:ac:eb:06:16:0c:d4: a6:eb:d4:3a:09:68:4f:12:eb:ed:28:8f:6a:23:46: ae:08:0a:bb:bf:6a:88:e2:44:73:11:13:8e:ca:69: 6c:25:45:ac:06:1e:34:74:48:5a:b0:de:0a:e8:3c: 97:b7:c0:6a:9d:ca:48:f9:53:f7:ae:e3:e8:40:83: 4b:d7:e4:0a:58:fb:f0:db:4a:17:70:fc:4a:da:f6: 2b:a0:45:3e:48:21:22:fe:5b:af:a4:e8:d5:62:fd: 7e:1d:14:d6:08:dc:21:ef:40:8f:fd:ef:bd:ef:ab: 1d:8d:b3:65:f4:3f:e6:b3:be:14:8e:04:87:2e:6f: 6d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:92:76:32:BB:A8:3B:6F:AB:6E:A2:6E:99:33:2C:9D:1D:B5:0F:90 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/L5J2MruoO2-rbqJumTMsnR21D5A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.61.0/24 Signature Algorithm: sha256WithRSAEncryption 22:56:70:72:18:5a:96:c9:4a:f5:8e:a0:69:dc:df:f0:32:05: fc:3f:9d:1e:40:3a:59:dd:66:57:ef:d4:7d:53:3d:c6:8d:2b: b8:b0:b7:ce:9d:49:39:34:65:f9:a8:7d:67:2b:1e:6c:5c:b3: 3b:5e:97:ec:85:1c:e4:ab:4d:a9:86:b5:9a:6c:85:92:e7:b0: 93:be:7f:0d:e2:ff:1c:c3:1d:f2:24:ad:32:5f:40:65:e8:db: 28:ea:5c:5b:b6:75:62:c9:e7:bd:9f:17:88:70:68:e8:e0:da: 70:05:a9:5a:a4:97:5a:04:d9:25:94:07:b1:ba:33:a6:cc:bc: 4a:84:06:a5:0d:68:5c:2a:e9:b7:4e:ad:26:37:d0:17:16:f6: ad:e6:01:e4:1b:bd:f4:ce:a9:06:1e:a0:e9:8c:f4:c7:d1:eb: 0f:84:17:37:20:20:56:44:39:0c:62:5a:1a:56:ba:9d:16:d0: b6:50:82:a0:a0:7a:a5:45:84:ba:32:c2:06:86:d8:ab:29:33: 52:ee:73:bb:bb:14:d6:fb:17:23:65:b8:eb:4c:10:2b:eb:5e: 17:63:83:4f:56:af:06:d3:f8:28:94:a1:4e:2e:a2:e5:da:ef: 4b:09:8b:6e:a4:b9:31:b9:b8:f5:f7:3c:5b:43:44:4e:c6:6a: 61:5e:b9:52 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw ODI2MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJGOTI3NjMyQkJBODNC NkZBQjZFQTI2RTk5MzMyQzlEMURCNTBGOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgS6bvlzUPGKrgwhaPzxoz+FoRKB3Bn3OEVSgkxVf8qB7MWdAQ R93nMcRzYP+z7nKrpCaD4TfTW7EjlC0XP2vKM+zC0xaSQWWwLetPlEOu7Svi7Q9r o/t5MSEOpaWOdHYTo5Dz9u17WzrMkhTIZ/IWLnHEk8H9/SsBh2pihpSeEKzrBhYM 1Kbr1DoJaE8S6+0oj2ojRq4ICru/aojiRHMRE47KaWwlRawGHjR0SFqw3groPJe3 wGqdykj5U/eu4+hAg0vX5ApY+/DbShdw/Era9iugRT5IISL+W6+k6NVi/X4dFNYI 3CHvQI/9773vqx2Ns2X0P+azvhSOBIcub20PAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUL5J2MruoO2+rbqJumTMsnR21D5AwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9MNUoyTXJ1b08yLXJicUp1bVRN c25SMjFENUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG5M9 MA0GCSqGSIb3DQEBCwUAA4IBAQAiVnByGFqWyUr1jqBp3N/wMgX8P50eQDpZ3WZX 79R9Uz3GjSu4sLfOnUk5NGX5qH1nKx5sXLM7XpfshRzkq02phrWabIWS57CTvn8N 4v8cwx3yJK0yX0Bl6Nso6lxbtnViyee9nxeIcGjo4NpwBalapJdaBNkllAexujOm zLxKhAalDWhcKum3Tq0mN9AXFvat5gHkG730zqkGHqDpjPTH0esPhBc3ICBWRDkM YloaVrqdFtC2UIKgoHqlRYS6MsIGhtirKTNS7nO7uxTW+xcjZbjrTBAr614XY4NP Vq8G0/golKFOLqLl2u9LCYtupLkxubj19zxbQ0ROxmphXrlS -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:40 2024 by rpki-client on console-ams.rpki-client.org