$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/-SAW2ZzIgAxadYcQirQA62uO3FA.roa File: -SAW2ZzIgAxadYcQirQA62uO3FA.roa (raw, json) Hash identifier: 9zxYZQsP2m40FJo5K6ZyK5dnHXKVid/MVsqMNQo2uIE= Subject key identifier: F9:20:16:D9:9C:C8:80:0C:5A:75:87:10:8A:B4:00:EB:6B:8E:DC:50 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E21 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/-SAW2ZzIgAxadYcQirQA62uO3FA.roa Signing time: Fri 01 Sep 2023 08:49:19 +0000 ROA not before: Fri 01 Sep 2023 08:49:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 121.254.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3617 (0xe21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F92016D99CC8800C5A7587108AB400EB6B8EDC50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:cd:ca:2c:97:85:05:e2:d2:2e:cb:a6:4d: 2a:96:34:0c:6d:e1:06:62:af:44:be:ef:b9:ab:27: 92:c0:2e:15:61:da:bd:09:81:79:04:4a:2d:60:2d: 0e:eb:b1:c8:c4:0c:2e:16:81:f5:c8:75:7f:74:1e: 1b:de:88:a5:b0:da:c2:e9:3a:3c:4a:b5:5a:d5:c6: b1:c5:41:6a:75:20:0e:ac:8c:3a:1e:0d:ba:16:94: af:05:c9:79:e9:08:8e:15:46:9e:9a:e0:e1:ec:9e: 88:23:93:f6:6f:1f:a0:48:ca:40:5c:9b:9c:35:1e: ef:57:01:6a:49:c4:5e:09:a5:9a:44:f4:7f:af:c0: 94:dd:91:e6:4e:a8:61:86:0a:56:4f:e9:27:53:3c: a8:bf:e1:97:cb:20:f1:92:8c:a7:a9:ff:fc:a9:4e: d5:b2:aa:62:ef:ef:7d:56:c3:8d:41:18:b2:7a:f8: c6:00:6f:61:59:64:39:69:0b:2f:40:11:12:58:2e: 75:a4:fd:2b:3a:b6:7b:8e:35:e1:c9:20:ae:6c:c1: e6:2d:8f:55:8d:38:7e:b2:8d:63:6f:ca:5c:53:31: f5:25:dd:06:42:7b:f3:d3:aa:af:e2:ff:3c:5f:5d: e2:33:86:63:96:28:fc:57:4b:ec:08:49:24:6c:a4: de:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:20:16:D9:9C:C8:80:0C:5A:75:87:10:8A:B4:00:EB:6B:8E:DC:50 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/-SAW2ZzIgAxadYcQirQA62uO3FA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.104.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:cd:cc:75:8e:cc:5e:db:bd:05:e1:97:7d:d4:41:c3:a1:11: 27:73:20:8e:e5:01:87:8d:77:67:d2:45:ce:d0:0c:77:0d:67: 8c:60:d7:3a:36:b4:86:ed:cd:ac:77:69:67:ec:93:f8:03:33: 48:96:87:8b:9d:b7:dc:78:7e:dc:7b:98:cc:26:6e:a2:81:b0: 6d:57:0c:f6:50:2c:93:ca:5b:ed:81:f2:db:fa:2d:b9:89:9a: d8:82:da:34:e7:89:9b:20:41:c5:2f:95:a0:16:fd:e7:fe:57: 3a:13:59:fd:b3:ad:60:cc:a8:a7:c8:c1:b8:21:80:67:5b:ee: fb:7d:5f:81:d9:25:4c:3e:4b:3c:3c:d4:e0:c1:6f:ae:3b:9c: 52:1c:3a:ab:4a:d4:54:70:12:13:57:da:a0:95:ec:36:78:f7: 21:e5:27:ea:d9:12:74:58:96:55:b5:03:47:2c:b7:f2:bf:b6: 21:59:f8:87:2e:2b:d8:27:ac:26:4e:ad:59:d4:5e:04:08:7e: c0:c7:34:73:b4:be:11:9c:65:17:43:a0:fa:05:03:b0:ee:2d: 75:20:6d:48:58:18:ac:ff:4f:35:db:07:48:09:86:8e:fd:a0: 19:af:3e:15:f1:c3:6e:f8:db:9c:62:fd:2b:ee:6c:91:2a:25: ef:78:b2:9d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY5MjAxNkQ5OUNDODgw MEM1QTc1ODcxMDhBQjQwMEVCNkI4RURDNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4q83KLJeFBeLSLsumTSqWNAxt4QZir0S+77mrJ5LALhVh2r0J gXkESi1gLQ7rscjEDC4WgfXIdX90HhveiKWw2sLpOjxKtVrVxrHFQWp1IA6sjDoe DboWlK8FyXnpCI4VRp6a4OHsnogjk/ZvH6BIykBcm5w1Hu9XAWpJxF4JpZpE9H+v wJTdkeZOqGGGClZP6SdTPKi/4ZfLIPGSjKep//ypTtWyqmLv731Ww41BGLJ6+MYA b2FZZDlpCy9AERJYLnWk/Ss6tnuONeHJIK5sweYtj1WNOH6yjWNvylxTMfUl3QZC e/PTqq/i/zxfXeIzhmOWKPxXS+wISSRspN5zAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU+SAW2ZzIgAxadYcQirQA62uO3FAwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvLVNBVzJaeklnQXhhZFljUWlyUUE2 MnVPM0ZBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+aDAN BgkqhkiG9w0BAQsFAAOCAQEAfs3MdY7MXtu9BeGXfdRBw6ERJ3MgjuUBh413Z9JF ztAMdw1njGDXOja0hu3NrHdpZ+yT+AMzSJaHi5233Hh+3HuYzCZuooGwbVcM9lAs k8pb7YHy2/otuYma2ILaNOeJmyBBxS+VoBb95/5XOhNZ/bOtYMyop8jBuCGAZ1vu +31fgdklTD5LPDzU4MFvrjucUhw6q0rUVHASE1faoJXsNnj3IeUn6tkSdFiWVbUD Ryy38r+2IVn4hy4r2CesJk6tWdReBAh+wMc0c7S+EZxlF0Og+gUDsO4tdSBtSFgY rP9PNdsHSAmGjv2gGa8+FfHDbvjbnGL9K+5skSol73iynQ== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org