$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ixT9r0spqrGofW3Le-Bacw2i0_I.roa File: ixT9r0spqrGofW3Le-Bacw2i0_I.roa (raw, json) Hash identifier: dRUvX9Ci9v+WUoyEgzfes30PMZ9zkLKhK4WcV9yaPBc= Subject key identifier: 8B:14:FD:AF:4B:29:AA:B1:A8:7D:6D:CB:7B:E0:5A:73:0D:A2:D3:F2 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0E56 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ixT9r0spqrGofW3Le-Bacw2i0_I.roa Signing time: Mon 10 Feb 2025 14:03:26 +0000 ROA not before: Mon 10 Feb 2025 14:03:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18429 IP address blocks: 27.147.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3670 (0xe56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Feb 10 14:03:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8B14FDAF4B29AAB1A87D6DCB7BE05A730DA2D3F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:4d:3e:90:26:ce:59:65:91:3e:ad:d7:19: b0:6a:cc:f7:5e:d6:cf:f1:1f:1f:0e:50:0e:4d:30: fe:63:fd:3f:da:5c:13:34:80:e5:b6:81:06:06:9a: d7:e8:75:9a:54:60:46:55:cd:c8:72:2c:e2:b7:50: e1:57:43:35:4d:0d:a0:86:8c:e8:c4:78:97:7a:c8: f8:a8:06:51:b0:ab:5a:34:67:1a:da:f6:6d:16:34: d5:f6:be:1a:c1:cd:bb:2c:c5:63:38:d3:7d:9b:64: e4:06:1b:e6:0d:6f:84:ca:0e:82:fd:e2:5f:5e:97: c2:fb:ad:5b:6d:3a:fd:f8:6b:50:09:d5:ee:3b:ae: 03:f5:51:c4:09:38:b4:a3:02:44:e6:b4:15:3e:29: 12:e0:2d:0d:28:a4:7e:b5:e6:ca:8c:7d:f2:df:93: a4:65:0e:5a:c2:ba:ed:92:e2:c1:52:8a:4c:a0:25: 9d:da:80:d9:0e:9a:fd:cc:29:b0:46:cc:ed:a6:39: 56:f6:79:76:f2:01:93:d2:d8:aa:1f:89:be:38:90: 6f:13:d7:98:a3:29:2a:4f:8a:e7:ce:a8:4d:48:c0: f5:7b:a2:d3:b8:f7:a1:07:22:bc:e3:29:03:e9:b1: 2d:5b:fa:ec:5f:67:02:64:04:5e:13:58:36:9c:84: e2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:14:FD:AF:4B:29:AA:B1:A8:7D:6D:CB:7B:E0:5A:73:0D:A2:D3:F2 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ixT9r0spqrGofW3Le-Bacw2i0_I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.62.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:b6:b2:c5:f2:66:d2:1c:ce:35:76:7a:27:60:34:1f:7f:65: 3d:66:db:f1:a3:21:1b:de:fd:10:77:21:4f:a3:44:a1:2d:9c: 57:c0:4e:af:72:38:e7:ee:a5:da:9e:a9:83:d6:df:1d:b6:0c: 3f:3e:40:7a:76:b2:54:db:10:b0:f9:45:ca:cc:45:d0:cf:6a: ec:ab:6e:02:35:73:a3:bf:fd:41:b9:2a:98:ae:bb:07:7a:50: 20:ae:07:6a:b9:1c:8a:6e:f2:9b:d6:0d:a6:cc:bd:94:1c:28: 17:d5:f5:e5:be:a6:ba:be:f8:bc:03:f4:eb:bf:8e:fb:ae:5a: 85:76:e2:69:27:10:76:11:79:c6:65:80:e1:29:fe:ea:61:7b: 2e:56:98:65:db:28:fb:57:6e:31:c0:4b:33:3a:92:f3:1c:21: 1f:1d:2f:44:35:7d:5d:b0:3f:12:5d:2a:0b:87:35:b9:94:3e: d0:9c:3b:9c:4f:f9:3f:d9:0d:a2:be:bd:9c:05:43:17:67:74: 05:12:ec:ed:6e:28:bb:77:09:e2:38:46:de:2b:f2:15:cd:1c: 5a:dc:f2:f0:24:2c:8f:64:59:87:ef:fc:61:93:c1:30:db:4a: e7:aa:45:85:e0:b2:3d:a3:ab:42:b4:fe:66:1f:6c:ba:fb:07: c2:61:ee:33 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTAyMTAx NDAzMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCMTRGREFGNEIyOUFB QjFBODdENkRDQjdCRTA1QTczMERBMkQzRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt2U0+kCbOWWWRPq3XGbBqzPde1s/xHx8OUA5NMP5j/T/aXBM0 gOW2gQYGmtfodZpUYEZVzchyLOK3UOFXQzVNDaCGjOjEeJd6yPioBlGwq1o0Zxra 9m0WNNX2vhrBzbssxWM4032bZOQGG+YNb4TKDoL94l9el8L7rVttOv34a1AJ1e47 rgP1UcQJOLSjAkTmtBU+KRLgLQ0opH615sqMffLfk6RlDlrCuu2S4sFSikygJZ3a gNkOmv3MKbBGzO2mOVb2eXbyAZPS2Kofib44kG8T15ijKSpPiufOqE1IwPV7otO4 96EHIrzjKQPpsS1b+uxfZwJkBF4TWDachOK/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUixT9r0spqrGofW3Le+Bacw2i0/IwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9peFQ5cjBzcHFyR29mVzNMZS1C YWN3MmkwX0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBG5M+ MA0GCSqGSIb3DQEBCwUAA4IBAQAdtrLF8mbSHM41dnonYDQff2U9ZtvxoyEb3v0Q dyFPo0ShLZxXwE6vcjjn7qXanqmD1t8dtgw/PkB6drJU2xCw+UXKzEXQz2rsq24C NXOjv/1BuSqYrrsHelAgrgdquRyKbvKb1g2mzL2UHCgX1fXlvqa6vvi8A/Trv477 rlqFduJpJxB2EXnGZYDhKf7qYXsuVphl2yj7V24xwEszOpLzHCEfHS9ENX1dsD8S XSoLhzW5lD7QnDucT/k/2Q2ivr2cBUMXZ3QFEuztbii7dwniOEbeK/IVzRxa3PLw JCyPZFmH7/xhk8Ew20rnqkWF4LI9o6tCtP5mH2y6+wfCYe4z -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:26 2025 by rpki-client