$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/gRpwspNHRemQRuP7MNV5av2EKLw.roa File: gRpwspNHRemQRuP7MNV5av2EKLw.roa (raw, json) Hash identifier: f/6b43C03FNe+5i+nMxLdExiB6JakTcF5b5ShLwr4yY= Subject key identifier: 81:1A:70:B2:93:47:45:E9:90:46:E3:FB:30:D5:79:6A:FD:84:28:BC Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0C5D Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gRpwspNHRemQRuP7MNV5av2EKLw.roa Signing time: Fri 01 Sep 2023 08:26:28 +0000 ROA not before: Fri 01 Sep 2023 08:26:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18429 IP address blocks: 27.147.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Sep 1 08:26:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=811A70B2934745E99046E3FB30D5796AFD8428BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:17:3f:18:5b:13:2e:39:c0:78:23:37:e3: 26:26:9d:16:49:b7:b3:52:1e:d9:51:98:69:94:eb: 83:b5:b9:7c:98:b9:b7:3e:f3:1d:0b:8c:7a:cb:2d: 87:1d:69:0c:24:d3:7e:eb:f3:ee:39:f0:5f:3c:51: 1f:70:69:25:72:cd:8c:8b:5c:c9:34:2b:eb:17:74: 15:37:28:77:d9:f8:95:2e:fa:73:4d:a3:b7:9d:a9: ea:db:b7:9f:d9:3e:82:e9:ae:88:50:b5:ff:cc:60: cc:f8:dd:e3:8f:a1:a0:e0:e0:a7:b4:3e:63:6d:0a: 99:2e:b4:d1:3c:97:6a:b9:a7:b7:8e:11:c8:e5:72: b2:6e:25:e9:df:da:81:13:69:d9:e1:af:10:db:c6: df:06:e0:b9:e7:88:fe:c9:d9:5e:a1:a0:f6:70:77: 12:2f:92:fd:8b:80:12:27:a4:12:36:9a:f0:e2:f4: 73:85:78:66:68:76:e9:b1:a4:da:14:76:9e:b8:b2: 08:02:4d:45:aa:c6:62:5d:d4:7f:7f:60:6a:f6:f1: eb:e9:7b:0e:af:1c:f6:46:80:e3:7b:ae:ab:82:eb: 59:49:8f:41:a1:64:97:09:1c:bb:59:65:6f:ff:b6: 4c:58:3a:ae:08:fd:ec:0b:d3:54:3c:51:d3:23:6a: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1A:70:B2:93:47:45:E9:90:46:E3:FB:30:D5:79:6A:FD:84:28:BC X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gRpwspNHRemQRuP7MNV5av2EKLw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.62.0/24 Signature Algorithm: sha256WithRSAEncryption 17:dd:c4:27:4a:9a:a8:70:a2:86:7d:20:41:1f:e9:08:b2:d7: 1e:0a:29:47:65:16:88:e7:74:7f:fc:a7:7f:54:2d:f9:82:cf: db:2a:64:15:d7:46:48:ca:47:5b:ef:9d:30:21:3d:3d:26:32: 65:17:db:cd:96:51:7c:3b:09:6d:b9:aa:68:17:32:12:1c:aa: bb:35:0f:e8:e4:58:a1:01:45:c5:83:25:52:df:13:da:40:ff: 3e:54:ef:cb:c1:ba:e4:f4:8f:f6:a5:05:75:e2:e4:f6:3b:25: 93:75:14:14:23:93:2f:0e:bf:64:04:84:66:c7:6d:12:d0:fd: 5f:ee:24:2d:bb:54:53:ff:38:a1:70:22:51:d9:13:4b:e4:d3: 99:93:9c:10:ec:48:9a:57:48:08:3d:85:30:5d:74:31:eb:04: 4e:a4:be:44:b9:4e:dd:93:bb:e9:01:3b:ca:3c:98:90:cc:89: ce:07:c3:30:90:b4:8c:3d:68:57:9e:ae:10:67:74:5b:50:67: 8e:54:d4:5e:c5:be:de:7d:39:76:58:39:c8:7e:7f:70:c6:32: 88:ef:ae:47:b1:7e:a4:3d:99:a0:26:1e:26:ff:07:90:be:32: 34:64:35:60:ce:11:a2:be:17:99:10:e5:40:af:35:17:b3:65: a3:46:fd:91 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw ODI2MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgxMUE3MEIyOTM0NzQ1 RTk5MDQ2RTNGQjMwRDU3OTZBRkQ4NDI4QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2eBc/GFsTLjnAeCM34yYmnRZJt7NSHtlRmGmU64O1uXyYubc+ 8x0LjHrLLYcdaQwk037r8+458F88UR9waSVyzYyLXMk0K+sXdBU3KHfZ+JUu+nNN o7edqerbt5/ZPoLprohQtf/MYMz43eOPoaDg4Ke0PmNtCpkutNE8l2q5p7eOEcjl crJuJenf2oETadnhrxDbxt8G4LnniP7J2V6hoPZwdxIvkv2LgBInpBI2mvDi9HOF eGZodumxpNoUdp64sggCTUWqxmJd1H9/YGr28evpew6vHPZGgON7rquC61lJj0Gh ZJcJHLtZZW//tkxYOq4I/ewL01Q8UdMjakjPAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUgRpwspNHRemQRuP7MNV5av2EKLwwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9nUnB3c3BOSFJlbVFSdVA3TU5W NWF2MkVLTHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG5M+ MA0GCSqGSIb3DQEBCwUAA4IBAQAX3cQnSpqocKKGfSBBH+kIstceCilHZRaI53R/ /Kd/VC35gs/bKmQV10ZIykdb750wIT09JjJlF9vNllF8OwltuapoFzISHKq7NQ/o 5FihAUXFgyVS3xPaQP8+VO/Lwbrk9I/2pQV14uT2OyWTdRQUI5MvDr9kBIRmx20S 0P1f7iQtu1RT/zihcCJR2RNL5NOZk5wQ7EiaV0gIPYUwXXQx6wROpL5EuU7dk7vp ATvKPJiQzInOB8MwkLSMPWhXnq4QZ3RbUGeOVNRexb7efTl2WDnIfn9wxjKI765H sX6kPZmgJh4m/weQvjI0ZDVgzhGivheZEOVArzUXs2WjRv2R -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:38 2024 by rpki-client on console-fra.rpki-client.org