$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/78QYJrTl2Ang17KJlHM5lCGfXIw.roa File: 78QYJrTl2Ang17KJlHM5lCGfXIw.roa (raw, json) Hash identifier: TvHfKoxfYmlli+fWZwJoCXrBA73Kl/AYWiKlyJRA/AY= Subject key identifier: EF:C4:18:26:B4:E5:D8:09:E0:D7:B2:89:94:73:39:94:21:9F:5C:8C Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1015 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/78QYJrTl2Ang17KJlHM5lCGfXIw.roa Signing time: Mon 26 Aug 2024 05:13:22 +0000 ROA not before: Mon 26 Aug 2024 05:13:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 113.61.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4117 (0x1015) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EFC41826B4E5D809E0D7B28994733994219F5C8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:20:fc:96:08:e0:fd:cc:1c:85:da:b0:3b: 53:e1:57:1f:b3:d9:a3:79:52:18:a3:92:72:ad:c9: 68:82:c0:f9:3b:e9:92:d8:40:98:3e:f1:56:4a:5b: c6:e7:76:e2:63:e7:02:b9:22:be:77:c1:a2:aa:9b: 61:82:e8:1c:3e:62:4f:70:b5:b2:8b:b7:5d:2e:0a: a8:f2:32:1d:aa:3f:ce:b6:25:5f:5f:a6:00:75:d4: b0:5e:19:03:85:54:52:e0:84:7e:e5:5a:eb:b4:d0: fe:0b:6c:3a:9c:2a:bf:ce:a1:27:01:83:ed:fc:69: b3:17:a7:55:67:e4:3f:6d:7a:62:a2:b0:da:53:16: 5d:94:b5:a3:a3:e9:6c:ba:3d:30:35:73:42:1b:50: 43:a9:f8:e4:84:7d:b5:c9:e1:d9:b2:dd:f8:87:32: 97:2d:4a:0c:a5:e6:29:e5:b0:30:e8:61:b5:a4:e1: ad:cd:2f:8d:2b:e7:98:6b:a3:48:52:f7:d9:99:26: 04:56:2f:25:89:de:37:59:72:24:89:e9:e0:22:fb: ff:36:99:1e:f0:f1:0e:1c:de:2d:f9:4b:81:06:b0: 42:91:26:44:9a:d8:b6:aa:99:9e:38:71:e2:f1:ae: 4e:b8:bb:46:dd:4a:c3:82:77:62:4d:fe:3b:74:f9: 2f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C4:18:26:B4:E5:D8:09:E0:D7:B2:89:94:73:39:94:21:9F:5C:8C X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/78QYJrTl2Ang17KJlHM5lCGfXIw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.128.0/20 Signature Algorithm: sha256WithRSAEncryption 32:5a:ef:95:c1:e4:13:93:63:2b:97:60:14:d4:dc:1e:bb:96: e6:91:5e:dc:80:87:7b:5a:c9:78:49:7c:a4:3f:79:6d:b0:d0: 9f:c3:56:c0:93:01:fe:09:b1:d1:e6:89:95:a0:91:9b:ce:bc: 1e:e2:df:34:04:5f:eb:43:f2:c4:43:da:91:28:7b:71:fa:b9: d7:4b:6b:57:a2:42:ec:8e:74:8f:a5:5b:4f:c8:4d:91:0c:29: 92:55:ba:e8:0f:db:85:ab:6e:e3:fc:a0:af:a8:77:62:48:f2: a3:ef:6e:06:30:e3:c6:bb:4f:7b:a9:da:bb:7b:57:d7:0c:09: 42:50:30:79:be:14:18:ac:e9:5a:78:e9:0b:11:ac:5f:43:6e: 28:35:7e:4f:16:23:a2:f1:b7:57:1c:52:b4:0d:e6:ab:0c:6b: fd:1e:3a:47:c5:87:01:96:20:5e:57:1b:3f:3b:0c:56:91:78: 05:f4:c0:8b:21:19:df:5f:3a:11:30:41:8a:1a:e9:5b:23:1b: 9d:4d:74:b2:17:09:f6:b7:9c:df:e8:69:e8:3b:09:56:d5:bb: d2:55:8b:40:a2:52:3b:5d:34:b6:82:5d:0f:7b:6b:be:7b:98: fe:89:af:9f:09:52:1d:c4:21:a0:49:57:81:a6:d1:a7:b1:15: 10:ed:6d:a8 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVGQzQxODI2QjRFNUQ4 MDlFMEQ3QjI4OTk0NzMzOTk0MjE5RjVDOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/iiD8lgjg/cwchdqwO1PhVx+z2aN5UhijknKtyWiCwPk76ZLY QJg+8VZKW8bnduJj5wK5Ir53waKqm2GC6Bw+Yk9wtbKLt10uCqjyMh2qP862JV9f pgB11LBeGQOFVFLghH7lWuu00P4LbDqcKr/OoScBg+38abMXp1Vn5D9temKisNpT Fl2UtaOj6Wy6PTA1c0IbUEOp+OSEfbXJ4dmy3fiHMpctSgyl5inlsDDoYbWk4a3N L40r55hro0hS99mZJgRWLyWJ3jdZciSJ6eAi+/82mR7w8Q4c3i35S4EGsEKRJkSa 2LaqmZ44ceLxrk64u0bdSsOCd2JN/jt0+S+FAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU78QYJrTl2Ang17KJlHM5lCGfXIwwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvNzhRWUpyVGwyQW5nMTdLSmxITTVs Q0dmWEl3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHE9gDAN BgkqhkiG9w0BAQsFAAOCAQEAMlrvlcHkE5NjK5dgFNTcHruW5pFe3ICHe1rJeEl8 pD95bbDQn8NWwJMB/gmx0eaJlaCRm868HuLfNARf60PyxEPakSh7cfq510trV6JC 7I50j6VbT8hNkQwpklW66A/bhatu4/ygr6h3Ykjyo+9uBjDjxrtPe6nau3tX1wwJ QlAweb4UGKzpWnjpCxGsX0NuKDV+TxYjovG3VxxStA3mqwxr/R46R8WHAZYgXlcb PzsMVpF4BfTAiyEZ3186ETBBihrpWyMbnU10shcJ9rec3+hp6DsJVtW70lWLQKJS O100toJdD3trvnuY/omvnwlSHcQhoElXgabRp7EVEO1tqA== -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org