$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/dzWYojmHAg7zztUtrm31gOqxD_A.roa File: dzWYojmHAg7zztUtrm31gOqxD_A.roa (raw, json) Hash identifier: 33SSTQHZ+M+kwJm/xttqzoFkgbA8atoPsZ9Yu3ZFEbY= Subject key identifier: 77:35:98:A2:39:87:02:0E:F3:CE:D5:2D:AE:6D:F5:80:EA:B1:0F:F0 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0E4D Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/dzWYojmHAg7zztUtrm31gOqxD_A.roa Signing time: Mon 10 Feb 2025 14:03:23 +0000 ROA not before: Mon 10 Feb 2025 14:03:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 27.147.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3661 (0xe4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Feb 10 14:03:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=773598A23987020EF3CED52DAE6DF580EAB10FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:f2:46:87:8d:90:b8:ad:3f:3e:2f:7a:c5: b9:3b:0c:62:45:1a:4e:e5:84:bb:be:b1:e1:f9:c2: 55:59:c2:3a:1e:b2:23:65:8a:f4:2b:3a:5d:a7:ec: ce:09:c5:f7:89:9c:4d:eb:1f:65:06:cf:07:67:0e: c8:ae:c7:97:99:eb:08:41:01:1c:26:e0:5a:59:df: 21:e2:8e:24:54:17:fa:66:b9:51:39:56:c6:e2:32: 96:bf:a1:c3:7a:e6:d7:a6:4c:b6:64:af:1c:b2:23: fe:15:41:ff:2d:41:57:55:f2:35:0a:33:1f:c6:cd: 85:5c:3a:b2:1d:94:d2:9e:d4:b7:2b:91:8d:5f:4c: ee:de:07:94:aa:e9:69:13:f0:f5:6d:89:12:d6:6a: 4b:c9:7f:0e:89:53:59:cd:97:72:43:02:01:14:93: 1a:c9:ef:64:6c:63:db:e3:ee:c8:32:7b:c2:f1:25: 24:da:1b:17:53:1d:c9:c2:3d:10:2f:de:8d:23:27: 12:17:d9:a8:a9:25:13:ae:7a:9b:dc:a0:6f:12:ac: cd:3f:ee:4d:a4:a7:8a:2f:79:27:c2:bc:cc:a2:2d: 7a:4e:f8:8e:24:0c:b7:a9:da:7a:89:21:41:76:34: 27:dd:42:7c:d0:8c:4f:62:be:75:c5:41:df:c4:be: 89:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:98:A2:39:87:02:0E:F3:CE:D5:2D:AE:6D:F5:80:EA:B1:0F:F0 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/dzWYojmHAg7zztUtrm31gOqxD_A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.62.0/24 Signature Algorithm: sha256WithRSAEncryption 91:ee:de:62:a7:41:03:45:2e:f4:8e:98:34:0c:0f:6e:40:64: 15:68:f5:6e:e8:96:d2:06:e7:28:45:62:b2:68:67:45:15:a2: 0e:29:95:05:48:90:27:98:68:78:50:07:0c:6c:b2:cd:1a:f4: f0:a8:90:aa:53:99:29:37:f4:d9:7f:7e:16:85:35:a4:30:11: 73:75:fc:a3:b0:e9:1f:1e:6c:98:a8:64:d4:fa:e4:c6:2b:da: 39:82:51:bc:7f:4c:8f:13:f5:60:15:70:99:49:42:70:98:0b: 26:4b:55:1a:71:12:b4:92:58:4f:fc:40:f0:11:87:d9:c8:71: 80:7f:8f:40:20:cd:43:64:c3:e9:2c:09:b0:c4:24:9b:6b:de: 0f:4e:78:aa:4d:cb:b6:cb:db:1d:e8:ed:82:79:9a:e3:8b:f3: 4f:62:53:21:43:e1:8d:19:06:d5:4a:b6:32:a5:bd:60:d4:a0: 5b:4e:80:9d:32:fd:c7:16:58:e3:62:db:3a:c3:e9:1d:ed:30: 08:be:31:0e:a3:cf:3d:b9:a6:d3:81:7f:86:1e:b1:90:7d:d1: cf:b5:9b:69:9b:48:37:3f:f8:64:de:4d:79:e6:9f:44:9a:73: 6c:7e:0e:28:d2:9b:cb:f7:96:5c:76:34:73:98:96:26:cb:18: 3b:38:96:61 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTAyMTAx NDAzMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3MzU5OEEyMzk4NzAy MEVGM0NFRDUyREFFNkRGNTgwRUFCMTBGRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQc/JGh42QuK0/Pi96xbk7DGJFGk7lhLu+seH5wlVZwjoesiNl ivQrOl2n7M4JxfeJnE3rH2UGzwdnDsiux5eZ6whBARwm4FpZ3yHijiRUF/pmuVE5 VsbiMpa/ocN65temTLZkrxyyI/4VQf8tQVdV8jUKMx/GzYVcOrIdlNKe1LcrkY1f TO7eB5Sq6WkT8PVtiRLWakvJfw6JU1nNl3JDAgEUkxrJ72RsY9vj7sgye8LxJSTa GxdTHcnCPRAv3o0jJxIX2aipJROuepvcoG8SrM0/7k2kp4oveSfCvMyiLXpO+I4k DLep2nqJIUF2NCfdQnzQjE9ivnXFQd/Evol3AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUdzWYojmHAg7zztUtrm31gOqxD/AwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9keldZb2ptSEFnN3p6dFV0cm0z MWdPcXhEX0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG5M+ MA0GCSqGSIb3DQEBCwUAA4IBAQCR7t5ip0EDRS70jpg0DA9uQGQVaPVu6JbSBuco RWKyaGdFFaIOKZUFSJAnmGh4UAcMbLLNGvTwqJCqU5kpN/TZf34WhTWkMBFzdfyj sOkfHmyYqGTU+uTGK9o5glG8f0yPE/VgFXCZSUJwmAsmS1UacRK0klhP/EDwEYfZ yHGAf49AIM1DZMPpLAmwxCSba94PTniqTcu2y9sd6O2CeZrji/NPYlMhQ+GNGQbV SrYypb1g1KBbToCdMv3HFljjYts6w+kd7TAIvjEOo889uabTgX+GHrGQfdHPtZtp m0g3P/hk3k155p9EmnNsfg4o0pvL95ZcdjRzmJYmyxg7OJZh -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:42 2025 by rpki-client