$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/NvdANCPAoWHLSCwJyQgXmllK3OA.roa File: NvdANCPAoWHLSCwJyQgXmllK3OA.roa (raw, json) Hash identifier: pl2+okVuekE25tRpYxqMRs4YgPVSX7zR7YZbnCHOEUY= Subject key identifier: 36:F7:40:34:23:C0:A1:61:CB:48:2C:09:C9:08:17:9A:59:4A:DC:E0 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0DBC Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/NvdANCPAoWHLSCwJyQgXmllK3OA.roa Signing time: Mon 26 Aug 2024 05:10:22 +0000 ROA not before: Mon 26 Aug 2024 05:10:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 61.57.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Nov 2024 07:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 26 05:10:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=36F7403423C0A161CB482C09C908179A594ADCE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:1e:76:60:9e:8e:39:41:09:53:32:cd:b0: bc:2c:b2:5d:47:b7:de:d4:da:f4:14:77:e6:ab:59: 1a:5e:d5:a6:54:aa:77:20:36:bb:f1:d7:5a:74:8b: 7c:29:8b:c3:36:db:01:af:6e:5c:17:a5:a8:4b:b9: 3b:ff:53:17:26:87:25:ba:8e:18:1e:5b:fa:ab:da: ce:9e:50:12:59:e6:f8:93:76:63:8b:e5:51:e9:3d: b9:5d:72:56:bc:55:75:98:fc:fa:c5:43:01:97:61: 97:87:cd:ad:69:22:6c:66:3b:57:30:45:f0:f0:aa: ed:66:20:cd:16:0b:2c:9a:77:68:f1:a2:da:3f:c5: c6:7d:e1:d9:2b:0e:78:7d:0b:5a:78:30:e4:d9:4e: 05:ac:36:f1:db:57:57:45:18:b3:db:bd:b2:2f:6b: e7:ae:a4:f0:f2:28:bf:fb:55:d6:bf:73:ee:a5:e7: a4:b3:26:51:51:2f:14:df:65:e8:18:28:cb:21:86: b7:da:e6:eb:d6:eb:8b:8d:41:be:3b:ee:23:3a:22: cc:4e:5f:6f:46:54:73:1d:27:6d:2e:a3:0d:c8:57: 40:77:d6:df:85:dc:21:29:88:bd:46:4d:11:47:fe: aa:29:74:ef:65:4c:c8:04:97:fc:4a:d5:54:ca:f2: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F7:40:34:23:C0:A1:61:CB:48:2C:09:C9:08:17:9A:59:4A:DC:E0 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/NvdANCPAoWHLSCwJyQgXmllK3OA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.156.0/22 Signature Algorithm: sha256WithRSAEncryption 11:c2:12:cc:d8:03:17:c4:38:e5:dd:df:19:08:de:58:86:e6: 98:67:1e:db:4b:4d:44:c1:0d:35:b7:15:97:02:0a:5c:99:55: 5b:ae:6c:34:e1:2f:5d:d2:bd:e7:2a:68:a4:59:7f:3b:f2:a7: 6f:f4:3b:59:fb:da:1f:21:f1:85:d5:e8:f1:e9:a5:93:dc:79: 58:37:1f:1f:b4:15:4c:ca:26:fe:78:f9:69:b3:ba:17:5a:36: 76:69:d6:90:77:e7:a1:20:08:7a:c4:f6:b5:63:e6:c4:5a:56: 02:e9:5e:86:40:6d:d2:ce:2f:f9:70:37:ab:3a:51:43:9c:eb: eb:0e:4c:59:3b:0e:77:0b:ad:8d:d6:9c:a5:f8:19:b7:4a:f1: 49:f2:07:86:fe:91:70:fe:ab:6c:15:5b:67:ed:07:87:f4:86: b8:fd:38:7b:a6:db:3f:0f:96:fc:d3:64:31:15:ab:d3:c2:40: f3:55:8f:2c:f4:2a:43:7c:fe:40:8a:b7:b4:51:42:cc:db:55: b7:74:ea:74:79:0d:7e:b5:06:55:02:08:6f:93:a4:e3:1a:84: 07:60:3e:ed:ea:8b:18:5b:f4:b0:07:a6:51:6d:99:5c:2c:f7: 05:2e:4a:bf:b6:da:ca:cf:d4:de:1e:bf:93:b2:b2:73:6e:a5: f3:07:22:c1 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNDA4MjYw NTEwMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2Rjc0MDM0MjNDMEEx NjFDQjQ4MkMwOUM5MDgxNzlBNTk0QURDRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/uB52YJ6OOUEJUzLNsLwssl1Ht97U2vQUd+arWRpe1aZUqncg Nrvx11p0i3wpi8M22wGvblwXpahLuTv/UxcmhyW6jhgeW/qr2s6eUBJZ5viTdmOL 5VHpPbldcla8VXWY/PrFQwGXYZeHza1pImxmO1cwRfDwqu1mIM0WCyyad2jxoto/ xcZ94dkrDnh9C1p4MOTZTgWsNvHbV1dFGLPbvbIva+eupPDyKL/7Vda/c+6l56Sz JlFRLxTfZegYKMshhrfa5uvW64uNQb477iM6IsxOX29GVHMdJ20uow3IV0B31t+F 3CEpiL1GTRFH/qopdO9lTMgEl/xK1VTK8qfdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUNvdANCPAoWHLSCwJyQgXmllK3OAwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9OdmRBTkNQQW9XSExTQ3dKeVFn WG1sbEszT0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPTmc MA0GCSqGSIb3DQEBCwUAA4IBAQARwhLM2AMXxDjl3d8ZCN5YhuaYZx7bS01EwQ01 txWXAgpcmVVbrmw04S9d0r3nKmikWX878qdv9DtZ+9ofIfGF1ejx6aWT3HlYNx8f tBVMyib+ePlps7oXWjZ2adaQd+ehIAh6xPa1Y+bEWlYC6V6GQG3Szi/5cDerOlFD nOvrDkxZOw53C62N1pyl+Bm3SvFJ8geG/pFw/qtsFVtn7QeH9Ia4/Th7pts/D5b8 02QxFavTwkDzVY8s9CpDfP5Aire0UULM21W3dOp0eQ1+tQZVAghvk6TjGoQHYD7t 6osYW/SwB6ZRbZlcLPcFLkq/ttrKz9TeHr+TsrJzbqXzByLB -----END CERTIFICATE-----Generated at Thu Nov 14 06:09:14 2024 by rpki-client on console-ams.rpki-client.org