$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/CDTh-zQJXCT2TZLG_JcnnscuXTc.roa File: CDTh-zQJXCT2TZLG_JcnnscuXTc.roa (raw, json) Hash identifier: 3/aDzCYgAjsCdpjy2tjTkqrR1m97GKzQu3jJXRF6FOk= Subject key identifier: 08:34:E1:FB:34:09:5C:24:F6:4D:92:C6:FC:97:27:9E:C7:2E:5D:37 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 101C Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CDTh-zQJXCT2TZLG_JcnnscuXTc.roa Signing time: Mon 26 Aug 2024 05:13:23 +0000 ROA not before: Mon 26 Aug 2024 05:13:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 210.209.128.0/17 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4124 (0x101c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0834E1FB34095C24F64D92C6FC97279EC72E5D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:7f:77:bd:ba:bb:e9:68:9b:fb:27:52:d7: 8b:0f:9d:e3:db:05:0c:a9:f1:3b:e8:4d:70:7b:dc: b2:51:dd:cc:9a:42:86:9a:96:36:bc:f3:32:86:cf: b2:e3:31:1d:31:c6:38:89:21:1c:99:b1:08:1e:23: 82:3e:4a:2d:6b:05:8f:54:f9:73:0f:7f:da:12:9e: 03:7b:c3:f8:ae:8c:b3:67:4a:99:6c:88:47:b4:d4: 2f:d1:24:68:87:b4:e6:95:bf:fc:77:35:98:c4:24: 5c:80:a0:1f:02:61:18:5a:d6:2b:ed:dc:2b:29:48: be:8c:09:5d:81:57:3d:c6:19:aa:5c:f2:7b:9b:cd: 19:68:d1:4d:a5:d3:2e:ea:af:81:c4:b7:7a:e1:73: 48:78:e3:25:70:cb:2b:5b:a0:94:f5:dc:00:be:57: 92:3c:93:37:49:1d:3d:36:2f:0a:38:2a:7c:b1:59: 58:d4:64:60:e5:e7:4e:43:a3:8c:45:df:f4:22:45: 3f:da:4e:6f:d7:ec:7e:f1:ad:c0:11:eb:a1:0d:a3: 13:59:6d:03:78:6d:ed:7c:76:e1:3c:c0:84:4a:68: ea:cc:d0:cf:87:4d:49:8b:89:2e:63:e0:da:3b:fc: ad:0c:e7:f8:ee:ce:a3:1d:6b:c3:ab:1b:a4:88:8e: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:34:E1:FB:34:09:5C:24:F6:4D:92:C6:FC:97:27:9E:C7:2E:5D:37 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CDTh-zQJXCT2TZLG_JcnnscuXTc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.128.0/17 Signature Algorithm: sha256WithRSAEncryption 15:52:01:d7:93:c4:10:29:76:09:83:fd:9d:c5:4a:37:6c:9e: 6d:85:69:1a:de:fe:45:e1:29:fd:90:bb:65:51:51:71:bd:90: 42:05:5d:42:a8:43:d6:71:98:42:84:c6:a6:f9:a4:9f:12:08: f6:62:37:f8:79:6b:58:ef:68:86:d6:4f:e3:fd:37:45:af:93: e2:61:de:bb:90:52:27:9e:c1:32:4f:5f:35:ae:4b:47:65:3b: 88:fa:ee:6d:cb:1f:1a:3c:fa:15:5f:89:28:63:21:8e:ee:49: b4:0d:7f:6b:22:56:4f:77:ff:bd:31:a8:7d:20:df:81:87:c2: 31:e2:27:be:83:5e:df:29:9d:ea:62:91:25:e8:3e:95:e8:d2: b6:0c:98:00:8e:1f:71:a1:8d:85:01:da:e0:e7:6e:8a:db:a2: 4c:d0:d8:58:2b:41:c2:21:66:13:86:c6:04:60:b9:f8:f1:08: aa:53:29:f1:59:fa:39:67:e2:67:10:ff:49:ef:4e:71:98:a8: 48:3c:ca:08:0d:af:96:b8:be:a1:a2:dd:f5:99:86:86:e5:63: 7f:be:86:1a:18:20:89:63:43:1b:c8:42:45:c9:26:89:85:88: b7:05:0d:d4:29:46:c0:55:10:7f:d3:aa:55:24:50:35:d7:13: 89:55:51:a6 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4MzRFMUZCMzQwOTVD MjRGNjREOTJDNkZDOTcyNzlFQzcyRTVEMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL8393vbq76Wib+ydS14sPnePbBQyp8TvoTXB73LJR3cyaQoaa lja88zKGz7LjMR0xxjiJIRyZsQgeI4I+Si1rBY9U+XMPf9oSngN7w/iujLNnSpls iEe01C/RJGiHtOaVv/x3NZjEJFyAoB8CYRha1ivt3CspSL6MCV2BVz3GGapc8nub zRlo0U2l0y7qr4HEt3rhc0h44yVwyytboJT13AC+V5I8kzdJHT02Lwo4KnyxWVjU ZGDl505Do4xF3/QiRT/aTm/X7H7xrcAR66ENoxNZbQN4be18duE8wIRKaOrM0M+H TUmLiS5j4No7/K0M5/juzqMda8OrG6SIjsppAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUCDTh+zQJXCT2TZLG/JcnnscuXTcwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvQ0RUaC16UUpYQ1QyVFpMR19KY25u c2N1WFRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9LRgDAN BgkqhkiG9w0BAQsFAAOCAQEAFVIB15PEECl2CYP9ncVKN2yebYVpGt7+ReEp/ZC7 ZVFRcb2QQgVdQqhD1nGYQoTGpvmknxII9mI3+HlrWO9ohtZP4/03Ra+T4mHeu5BS J57BMk9fNa5LR2U7iPrubcsfGjz6FV+JKGMhju5JtA1/ayJWT3f/vTGofSDfgYfC MeInvoNe3ymd6mKRJeg+lejStgyYAI4fcaGNhQHa4OduituiTNDYWCtBwiFmE4bG BGC5+PEIqlMp8Vn6OWfiZxD/Se9OcZioSDzKCA2vlri+oaLd9ZmGhuVjf76GGhgg iWNDG8hCRckmiYWItwUN1ClGwFUQf9OqVSRQNdcTiVVRpg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org