$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/8jUmrcGGz3-m5i7MpM6q8ZdQ2YU.roa File: 8jUmrcGGz3-m5i7MpM6q8ZdQ2YU.roa (raw, json) Hash identifier: e09XpjgNUWGOkkimKdpp3KsEVNuTlEq7I0pzcCg92jI= Subject key identifier: F2:35:26:AD:C1:86:CF:7F:A6:E6:2E:CC:A4:CE:AA:F1:97:50:D9:85 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1029 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/8jUmrcGGz3-m5i7MpM6q8ZdQ2YU.roa Signing time: Mon 26 Aug 2024 05:13:26 +0000 ROA not before: Mon 26 Aug 2024 05:13:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 27.96.224.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4137 (0x1029) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F23526ADC186CF7FA6E62ECCA4CEAAF19750D985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:b7:c8:41:42:d0:84:8f:e4:c2:f7:4c:08: 52:df:b5:91:28:3c:ea:f2:dd:10:51:99:a7:cc:ff: 9d:67:06:c2:a6:17:6c:23:c2:e4:19:07:ed:fd:48: 80:cf:9e:6e:b7:a9:57:9b:67:48:1b:c2:8c:db:8f: 03:e3:f3:22:da:7e:2c:c5:bc:e5:ba:5f:b6:fb:a2: f0:af:16:07:f2:7b:a9:d0:a9:64:c6:19:2d:ee:a2: 0f:7f:e8:d0:33:85:30:97:0a:03:f9:8b:64:45:ce: 79:8b:0d:56:d2:d4:0d:e3:be:30:02:4b:e3:24:a7: cd:b7:41:ae:6d:e6:c5:26:92:cb:f5:c4:93:87:4b: 6f:67:8c:f2:63:ab:d0:b9:0c:7c:08:f6:e0:de:04: b4:a3:d2:28:da:c6:7b:2c:3d:b4:f0:3d:b4:5d:c5: ff:ec:a9:64:c9:6b:35:7b:54:ba:c0:58:2c:9b:78: 7b:56:6f:48:5a:30:bf:95:b5:d4:24:aa:4c:24:c3: 69:71:1e:db:04:3c:ba:a2:d4:81:b8:02:a3:a0:1b: 4e:3d:d3:7d:52:bf:7d:f7:9b:33:5d:87:67:3f:95: 2d:10:cf:e1:79:ab:d0:17:ce:3a:c4:9f:49:f7:24: ab:1a:86:0e:e1:21:99:8c:7f:b3:ed:a7:3e:be:f6: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:35:26:AD:C1:86:CF:7F:A6:E6:2E:CC:A4:CE:AA:F1:97:50:D9:85 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/8jUmrcGGz3-m5i7MpM6q8ZdQ2YU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.96.224.0/19 Signature Algorithm: sha256WithRSAEncryption a0:5a:29:bd:1d:8a:26:44:f8:3b:34:a5:9a:4d:4a:04:6a:b2: 49:31:11:88:ec:07:05:0a:f6:bc:77:b9:c0:cb:eb:67:12:5b: bf:11:e4:01:a9:da:b7:c8:94:5e:c9:2a:4e:94:50:06:05:50: 4e:5a:20:50:f4:65:9a:50:2d:cf:b7:bd:b3:d2:5c:db:0c:09: 18:59:21:19:a6:16:4b:90:a7:be:6d:16:9c:cc:1b:02:8a:dd: c1:10:bd:c5:c6:ef:d9:e3:78:a1:94:bb:d1:67:c8:ce:47:93: 9a:0f:6e:3d:d7:64:d7:ce:1a:6c:fe:d7:f9:bd:a2:d2:17:2f: af:ee:36:bd:e2:39:4e:ef:49:c4:b7:83:a6:0c:75:87:99:ec: cc:9e:c1:c6:96:20:15:53:c7:d8:e8:4c:a5:cb:ae:c7:36:a0: d8:de:fb:06:33:c3:78:c3:5a:2e:a2:d6:2e:a1:f7:90:a6:17: 01:39:06:2b:6c:df:f3:37:e1:55:96:c9:f7:fd:bd:7b:05:e5: f3:ec:ec:8d:44:c8:66:ce:4b:7c:0b:a9:c4:39:1f:99:4d:c3: d9:9e:c7:a7:80:ed:1b:36:6e:99:84:45:24:ad:76:09:b6:b2: 6e:07:b7:fc:88:ab:19:a1:63:5e:7a:59:4d:d6:28:71:6b:10: be:a7:90:37 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICECkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyMzUyNkFEQzE4NkNG N0ZBNkU2MkVDQ0E0Q0VBQUYxOTc1MEQ5ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGFbfIQULQhI/kwvdMCFLftZEoPOry3RBRmafM/51nBsKmF2wj wuQZB+39SIDPnm63qVebZ0gbwozbjwPj8yLafizFvOW6X7b7ovCvFgfye6nQqWTG GS3uog9/6NAzhTCXCgP5i2RFznmLDVbS1A3jvjACS+Mkp823Qa5t5sUmksv1xJOH S29njPJjq9C5DHwI9uDeBLSj0ijaxnssPbTwPbRdxf/sqWTJazV7VLrAWCybeHtW b0haML+VtdQkqkwkw2lxHtsEPLqi1IG4AqOgG049031Sv333mzNdh2c/lS0Qz+F5 q9AXzjrEn0n3JKsahg7hIZmMf7Ptpz6+9tG7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU8jUmrcGGz3+m5i7MpM6q8ZdQ2YUwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvOGpVbXJjR0d6My1tNWk3TXBNNnE4 WmRRMllVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBRtg4DAN BgkqhkiG9w0BAQsFAAOCAQEAoFopvR2KJkT4OzSlmk1KBGqySTERiOwHBQr2vHe5 wMvrZxJbvxHkAanat8iUXskqTpRQBgVQTlogUPRlmlAtz7e9s9Jc2wwJGFkhGaYW S5Cnvm0WnMwbAordwRC9xcbv2eN4oZS70WfIzkeTmg9uPddk184abP7X+b2i0hcv r+42veI5Tu9JxLeDpgx1h5nszJ7BxpYgFVPH2OhMpcuuxzag2N77BjPDeMNaLqLW LqH3kKYXATkGK2zf8zfhVZbJ9/29ewXl8+zsjUTIZs5LfAupxDkfmU3D2Z7Hp4Dt GzZumYRFJK12Cbaybge3/IirGaFjXnpZTdYocWsQvqeQNw== -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:32 2024 by rpki-client on console-fra.rpki-client.org