$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/WmfgQvxwq2S7F6H13s-myxJWeF8.roa File: WmfgQvxwq2S7F6H13s-myxJWeF8.roa (raw, json) Hash identifier: Khq2Qq3U4EtqYV1dKVQvrkV4u3367/7bN8G0YpsjimY= Subject key identifier: 5A:67:E0:42:FC:70:AB:64:BB:17:A1:F5:DE:CF:A6:CB:12:56:78:5F Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0DA8 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/WmfgQvxwq2S7F6H13s-myxJWeF8.roa Signing time: Mon 26 Aug 2024 05:10:18 +0000 ROA not before: Mon 26 Aug 2024 05:10:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 124.155.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Nov 2024 07:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3496 (0xda8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 26 05:10:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5A67E042FC70AB64BB17A1F5DECFA6CB1256785F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:90:13:2e:71:3a:e1:d2:d5:e7:fe:90:a4: 65:19:0f:7a:0a:3d:f9:84:4e:17:c6:7d:4f:61:c8: 17:f7:42:d4:2a:aa:63:81:e1:d9:c7:00:29:b6:4f: b5:51:47:b7:0c:c1:cf:0e:98:ba:df:0c:55:db:14: d9:e3:27:7c:eb:4d:1f:5f:2b:b7:00:5f:9b:9f:e1: eb:cd:ed:a4:ac:b7:d6:a0:99:fa:f5:33:a0:08:27: e7:77:b7:b9:13:d3:2e:2c:99:05:db:83:27:8e:57: 23:4c:75:76:3a:e5:95:08:3c:7a:a7:12:af:c2:7d: 64:93:26:18:88:58:a2:e1:4c:bd:f2:8f:17:b6:37: 0e:7f:f3:57:1e:0c:85:83:84:ee:22:16:7f:aa:b7: d1:41:88:53:86:ae:9c:f8:c5:fd:77:c1:f8:b9:f9: 29:30:39:20:54:6c:31:1c:9d:9c:50:70:85:ef:d5: 98:29:ef:89:d3:da:09:b0:f5:5a:0d:eb:94:77:d6: b3:e4:b0:53:d4:73:de:f4:3b:ee:33:db:ae:18:1d: bd:eb:2f:19:d5:0e:04:23:55:2a:55:05:c6:df:bc: 9f:26:f1:67:06:18:fc:ee:03:d0:c0:fe:0c:75:5b: 55:84:b4:b5:6d:70:9f:c5:42:d2:73:ac:ea:56:1c: 62:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:67:E0:42:FC:70:AB:64:BB:17:A1:F5:DE:CF:A6:CB:12:56:78:5F X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/WmfgQvxwq2S7F6H13s-myxJWeF8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.155.176.0/21 Signature Algorithm: sha256WithRSAEncryption 79:31:5c:92:a3:a8:98:01:c4:7b:64:d0:b1:c8:2c:01:92:a4: 57:06:ba:8a:68:2e:25:ae:db:b4:ad:8e:1c:ad:5f:76:56:54: 1e:ff:e9:13:55:e5:e7:90:dc:45:82:87:0f:f8:c9:18:f9:e8: bf:e4:b1:83:04:15:8d:84:24:73:43:0e:e5:16:fd:57:1d:b7: c4:6b:1f:51:03:5a:4e:4f:05:96:56:bd:90:32:c5:28:a1:0e: fe:a3:79:8c:da:d9:8d:14:7e:20:9f:41:80:7f:83:15:a1:b1: 91:ff:64:99:35:6c:8d:83:fd:ef:d2:df:1a:38:fa:01:0f:ec: e6:1e:ce:f3:04:85:95:67:41:5d:46:94:08:84:06:05:8c:d4: 42:40:0b:0f:ed:59:8f:1a:03:8f:09:cc:d8:b8:93:bf:3c:70: 18:b9:03:db:19:79:92:db:49:23:6b:8c:a7:67:97:d2:c4:78: 6e:16:81:2d:5e:a6:c9:db:be:24:85:77:6d:08:ac:18:e2:c9: c4:ee:35:bb:99:57:87:90:34:8d:66:78:3e:1e:3a:8b:1b:a7: 69:c4:e4:20:60:2f:70:f9:2f:bf:97:99:7f:2d:40:42:95:84: 48:00:c9:32:fb:7d:8e:d7:11:b6:43:16:7e:7c:6e:bd:f2:7d: a1:7f:b1:18 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNDA4MjYw NTEwMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBNjdFMDQyRkM3MEFC NjRCQjE3QTFGNURFQ0ZBNkNCMTI1Njc4NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxspATLnE64dLV5/6QpGUZD3oKPfmEThfGfU9hyBf3QtQqqmOB 4dnHACm2T7VRR7cMwc8OmLrfDFXbFNnjJ3zrTR9fK7cAX5uf4evN7aSst9agmfr1 M6AIJ+d3t7kT0y4smQXbgyeOVyNMdXY65ZUIPHqnEq/CfWSTJhiIWKLhTL3yjxe2 Nw5/81ceDIWDhO4iFn+qt9FBiFOGrpz4xf13wfi5+SkwOSBUbDEcnZxQcIXv1Zgp 74nT2gmw9VoN65R31rPksFPUc970O+4z264YHb3rLxnVDgQjVSpVBcbfvJ8m8WcG GPzuA9DA/gx1W1WEtLVtcJ/FQtJzrOpWHGItAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUWmfgQvxwq2S7F6H13s+myxJWeF8wHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9XbWZnUXZ4d3EyUzdGNkgxM3Mt bXl4SldlRjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDfJuw MA0GCSqGSIb3DQEBCwUAA4IBAQB5MVySo6iYAcR7ZNCxyCwBkqRXBrqKaC4lrtu0 rY4crV92VlQe/+kTVeXnkNxFgocP+MkY+ei/5LGDBBWNhCRzQw7lFv1XHbfEax9R A1pOTwWWVr2QMsUooQ7+o3mM2tmNFH4gn0GAf4MVobGR/2SZNWyNg/3v0t8aOPoB D+zmHs7zBIWVZ0FdRpQIhAYFjNRCQAsP7VmPGgOPCczYuJO/PHAYuQPbGXmS20kj a4ynZ5fSxHhuFoEtXqbJ274khXdtCKwY4snE7jW7mVeHkDSNZng+HjqLG6dpxOQg YC9w+S+/l5l/LUBClYRIAMky+32O1xG2QxZ+fG698n2hf7EY -----END CERTIFICATE-----Generated at Thu Nov 14 06:09:14 2024 by rpki-client on console-ams.rpki-client.org