$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZbccFsShwwhu76VL-aE4QPq5jqo.roa File: ZbccFsShwwhu76VL-aE4QPq5jqo.roa (raw, json) Hash identifier: 0Vp5/6PtR2QAjWRYUCcSPNdtXVaZEbu0gZumH1mDTWw= Subject key identifier: 65:B7:1C:16:C4:A1:C3:08:6E:EF:A5:4B:F9:A1:38:40:FA:B9:8E:AA Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0DA1 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZbccFsShwwhu76VL-aE4QPq5jqo.roa Signing time: Mon 26 Aug 2024 05:10:17 +0000 ROA not before: Mon 26 Aug 2024 05:10:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 61.57.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3489 (0xda1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 26 05:10:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=65B71C16C4A1C3086EEFA54BF9A13840FAB98EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:7b:c5:50:ba:3b:c1:81:45:0d:7e:90:ea: bd:02:52:14:b7:46:e2:78:ad:45:c0:3a:11:76:a0: ca:86:4a:4b:94:90:98:77:e2:32:e4:d3:69:20:4e: 4c:f4:da:92:5a:fd:db:31:8e:9e:6d:fc:f2:1d:1d: 7a:93:1a:64:57:0c:75:78:09:7a:16:58:ee:aa:ee: 1f:27:90:4e:8d:07:60:9e:17:f2:d3:9f:c6:08:0c: 21:d3:42:8a:15:39:55:a1:60:36:37:65:62:85:39: 99:31:fa:17:11:5b:c6:7d:ae:41:af:1c:fd:0f:71: ea:e5:54:b6:81:bc:fd:c6:05:c5:c4:e1:b4:58:66: c6:60:3b:04:16:5b:1b:d9:9c:1f:2b:fe:b9:1f:bc: bf:85:7d:6b:9c:2b:c3:87:82:b9:8e:fc:d5:9d:60: 2a:c8:28:92:71:cc:71:ab:a3:6d:30:a6:a8:d4:84: aa:55:92:c6:d5:f9:00:68:87:9c:87:a5:a8:ee:77: a4:cf:5c:86:7b:5f:b6:ca:8d:90:ac:a6:a2:cb:ad: 8c:90:69:32:b0:c9:41:d2:42:28:ba:36:03:ff:6e: ff:07:87:6d:ec:2c:39:1e:a3:ad:91:9e:87:7e:56: 4c:b7:0c:b5:f8:19:3c:6c:5e:ee:5d:5a:eb:e0:a7: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B7:1C:16:C4:A1:C3:08:6E:EF:A5:4B:F9:A1:38:40:FA:B9:8E:AA X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZbccFsShwwhu76VL-aE4QPq5jqo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.144.0/22 Signature Algorithm: sha256WithRSAEncryption 53:18:a9:aa:59:0c:e4:e5:ce:4c:7d:35:b6:24:ab:13:03:37: 0f:f6:4d:02:1d:82:3a:b2:42:fb:4d:88:35:2d:33:c5:65:38: b4:21:cb:45:d3:af:00:e8:66:48:39:99:86:96:0a:f4:0b:20: 44:21:7b:24:e9:90:9d:f6:c1:3e:07:07:63:94:fa:44:88:93: 6d:f9:b1:43:52:aa:41:b8:09:de:8a:ed:89:85:9d:bc:5a:ae: da:64:94:de:b4:e8:56:d6:5c:cd:01:ce:72:1c:c6:7d:d5:f5: b7:0d:89:5f:62:1e:b5:19:8c:78:1c:e7:0a:a6:58:4a:ec:a4: 50:42:43:2e:72:5b:98:6e:23:c5:03:3e:1a:65:99:d6:2e:bc: d6:1a:b1:a7:e6:56:42:15:e0:76:89:64:de:a5:5e:dc:4b:0a: 90:97:44:e4:fc:d3:95:db:6c:91:e5:c2:4b:1d:ef:ae:19:61: 49:b2:75:9b:b4:c7:ef:ec:64:d2:07:9f:70:8b:ff:97:3d:f6: c4:91:15:14:0d:15:da:a8:01:a9:60:9b:44:34:05:82:89:85: 9b:3a:9c:9a:53:d8:17:50:7c:90:f4:d0:cb:c0:72:ef:08:86: be:11:00:7f:ee:3d:8b:fc:8f:61:17:4f:37:fc:b1:8d:f5:f1: 37:03:00:2d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNDA4MjYw NTEwMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY1QjcxQzE2QzRBMUMz MDg2RUVGQTU0QkY5QTEzODQwRkFCOThFQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC35XvFULo7wYFFDX6Q6r0CUhS3RuJ4rUXAOhF2oMqGSkuUkJh3 4jLk02kgTkz02pJa/dsxjp5t/PIdHXqTGmRXDHV4CXoWWO6q7h8nkE6NB2CeF/LT n8YIDCHTQooVOVWhYDY3ZWKFOZkx+hcRW8Z9rkGvHP0PcerlVLaBvP3GBcXE4bRY ZsZgOwQWWxvZnB8r/rkfvL+FfWucK8OHgrmO/NWdYCrIKJJxzHGro20wpqjUhKpV ksbV+QBoh5yHpajud6TPXIZ7X7bKjZCspqLLrYyQaTKwyUHSQii6NgP/bv8Hh23s LDkeo62Rnod+Vky3DLX4GTxsXu5dWuvgpyUVAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUZbccFsShwwhu76VL+aE4QPq5jqowHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9aYmNjRnNTaHd3aHU3NlZMLWFF NFFQcTVqcW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPTmQ MA0GCSqGSIb3DQEBCwUAA4IBAQBTGKmqWQzk5c5MfTW2JKsTAzcP9k0CHYI6skL7 TYg1LTPFZTi0IctF068A6GZIOZmGlgr0CyBEIXsk6ZCd9sE+BwdjlPpEiJNt+bFD UqpBuAneiu2JhZ28Wq7aZJTetOhW1lzNAc5yHMZ91fW3DYlfYh61GYx4HOcKplhK 7KRQQkMucluYbiPFAz4aZZnWLrzWGrGn5lZCFeB2iWTepV7cSwqQl0Tk/NOV22yR 5cJLHe+uGWFJsnWbtMfv7GTSB59wi/+XPfbEkRUUDRXaqAGpYJtENAWCiYWbOpya U9gXUHyQ9NDLwHLvCIa+EQB/7j2L/I9hF083/LGN9fE3AwAt -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org