$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/W-1MmZcYOO0vd9OoCq5qu4KP7q4.roa File: W-1MmZcYOO0vd9OoCq5qu4KP7q4.roa (raw, json) Hash identifier: kWnqzuvgqCKugxgFaDhcmHNZmJJDOS28+HuM/S7qe28= Subject key identifier: 5B:ED:4C:99:97:18:38:ED:2F:77:D3:A8:0A:AE:6A:BB:82:8F:EE:AE Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0DB0 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/W-1MmZcYOO0vd9OoCq5qu4KP7q4.roa Signing time: Mon 26 Aug 2024 05:10:20 +0000 ROA not before: Mon 26 Aug 2024 05:10:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 27.147.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Nov 2024 07:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3504 (0xdb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 26 05:10:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5BED4C99971838ED2F77D3A80AAE6ABB828FEEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:ea:79:2b:d5:8f:4f:4b:d1:62:62:dd:5d: 55:2b:50:29:d8:df:e8:eb:34:4a:a2:5d:df:e4:98: 31:97:c8:61:50:30:96:7e:10:62:9b:b9:78:b8:14: 3e:48:79:d5:d0:07:5d:6a:63:d5:04:9f:9c:f4:3a: 2d:d8:fe:8f:92:1b:2f:09:1f:7f:96:f1:3e:31:d9: d5:87:57:62:76:85:a4:18:f2:5c:28:6b:da:01:e0: fa:39:b4:df:54:d1:66:92:90:93:59:75:e2:28:da: bd:13:dd:d1:b1:8d:2b:09:b5:2f:90:e5:64:39:42: 2d:76:ca:10:8d:95:38:d5:ed:45:85:99:a5:fc:cd: ad:12:4c:68:83:23:3e:93:72:b7:61:5b:ce:c9:25: d9:a8:59:38:8c:78:18:07:00:58:5d:fc:d2:83:7e: 33:48:d6:91:bd:17:db:d3:49:ef:0f:bc:5f:c1:7c: e8:90:a1:12:f8:d9:ce:53:76:f3:67:97:8d:51:70: 04:6c:19:bf:3f:8f:03:fb:68:25:fa:60:0b:ae:64: e6:fd:d5:f9:b9:8f:b5:8b:63:9a:98:dd:bb:9e:9b: 8e:78:af:81:56:8b:2f:3b:17:60:d0:49:6d:52:c6: ba:b3:de:45:f0:6b:d1:22:51:20:66:ad:c4:17:dd: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:ED:4C:99:97:18:38:ED:2F:77:D3:A8:0A:AE:6A:BB:82:8F:EE:AE X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/W-1MmZcYOO0vd9OoCq5qu4KP7q4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.24.0/21 Signature Algorithm: sha256WithRSAEncryption 08:fa:db:aa:11:3f:1a:ec:fe:71:83:38:db:e5:38:86:99:b2: a8:a9:11:10:64:ae:bb:7e:d0:89:68:00:7d:a8:ab:b9:77:b6: 75:c3:c6:73:f6:44:f9:4f:0b:fa:9f:d0:9e:e1:f2:2c:a7:88: 9e:c2:18:9c:0d:51:85:df:81:25:3c:5f:7e:73:9d:bf:bf:db: 16:70:e5:82:aa:d8:1b:51:72:fd:70:ff:c3:45:bf:69:e5:54: e1:5e:0f:c1:9c:13:12:f7:0f:d5:fa:6c:8c:91:fc:8a:a9:c2: 1c:d8:70:05:55:f8:90:96:86:87:2c:fd:10:12:ea:d4:35:4f: be:e6:3e:20:3f:75:ac:aa:00:53:c3:66:fc:b9:4b:c2:78:14: 02:ab:bb:88:34:39:d3:d2:76:b6:86:f8:e7:07:e4:8c:ce:ca: 01:be:07:6b:58:2e:1b:18:85:7c:be:4b:50:15:a4:29:4d:ee: 44:19:bb:24:9e:31:d3:bb:7b:54:dd:a9:75:0e:c3:a1:90:e4: c3:a1:e8:62:2d:ae:c7:64:b2:ee:d7:34:de:29:ca:85:75:5d: 43:9f:1b:79:96:d8:28:4d:38:a9:94:11:91:a3:1b:9c:93:f7: 82:4f:b2:95:5e:6a:59:e3:cb:c1:31:77:78:23:32:10:3b:67: 39:5b:2f:b8 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNDA4MjYw NTEwMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVCRUQ0Qzk5OTcxODM4 RUQyRjc3RDNBODBBQUU2QUJCODI4RkVFQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhjOp5K9WPT0vRYmLdXVUrUCnY3+jrNEqiXd/kmDGXyGFQMJZ+ EGKbuXi4FD5IedXQB11qY9UEn5z0Oi3Y/o+SGy8JH3+W8T4x2dWHV2J2haQY8lwo a9oB4Po5tN9U0WaSkJNZdeIo2r0T3dGxjSsJtS+Q5WQ5Qi12yhCNlTjV7UWFmaX8 za0STGiDIz6TcrdhW87JJdmoWTiMeBgHAFhd/NKDfjNI1pG9F9vTSe8PvF/BfOiQ oRL42c5TdvNnl41RcARsGb8/jwP7aCX6YAuuZOb91fm5j7WLY5qY3buem454r4FW iy87F2DQSW1Sxrqz3kXwa9EiUSBmrcQX3d2jAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUW+1MmZcYOO0vd9OoCq5qu4KP7q4wHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9XLTFNbVpjWU9PMHZkOU9vQ3E1 cXU0S1A3cTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5MY MA0GCSqGSIb3DQEBCwUAA4IBAQAI+tuqET8a7P5xgzjb5TiGmbKoqREQZK67ftCJ aAB9qKu5d7Z1w8Zz9kT5Twv6n9Ce4fIsp4iewhicDVGF34ElPF9+c52/v9sWcOWC qtgbUXL9cP/DRb9p5VThXg/BnBMS9w/V+myMkfyKqcIc2HAFVfiQloaHLP0QEurU NU++5j4gP3WsqgBTw2b8uUvCeBQCq7uINDnT0na2hvjnB+SMzsoBvgdrWC4bGIV8 vktQFaQpTe5EGbsknjHTu3tU3al1DsOhkOTDoehiLa7HZLLu1zTeKcqFdV1Dnxt5 ltgoTTiplBGRoxuck/eCT7KVXmpZ48vBMXd4IzIQO2c5Wy+4 -----END CERTIFICATE-----Generated at Thu Nov 14 06:09:14 2024 by rpki-client on console-ams.rpki-client.org