$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/CedR6UibPJ3g8v2NhzziGbWOL1s.roa File: CedR6UibPJ3g8v2NhzziGbWOL1s.roa (raw, json) Hash identifier: boykge/+fL7zRvBk/a0rdxvXaV7XQP/sC1sR6nGqZW8= Subject key identifier: 09:E7:51:E9:48:9B:3C:9D:E0:F2:FD:8D:87:3C:E2:19:B5:8E:2F:5B Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E61 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CedR6UibPJ3g8v2NhzziGbWOL1s.roa Signing time: Fri 01 Sep 2023 08:49:38 +0000 ROA not before: Fri 01 Sep 2023 08:49:38 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 203.222.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3681 (0xe61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:38 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=09E751E9489B3C9DE0F2FD8D873CE219B58E2F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:46:3d:6b:8c:7b:f8:8d:11:63:aa:4f:c5:4c: 38:6c:4f:36:21:5a:0a:d0:a8:2c:01:b7:69:99:64: 81:fe:93:54:f3:dd:f9:1a:b3:ce:4c:eb:fa:b9:ec: ae:83:03:d2:b4:45:9b:ca:3b:ec:04:ab:be:50:8b: 74:58:08:72:b1:10:ab:b9:88:09:4a:c4:be:8c:08: ec:0e:3e:7b:97:51:5f:7c:75:32:15:c7:98:4b:04: 60:aa:b7:a1:4b:ee:d2:50:3b:ef:84:a3:4e:3c:23: 78:d2:86:4f:8f:e5:01:5e:12:80:b6:74:d4:64:4b: 7b:70:0d:bd:84:e5:70:dc:f6:78:7c:00:74:46:44: a8:ac:e2:d7:44:27:31:c9:4a:29:03:c5:ef:de:5d: a8:90:11:c6:79:46:06:9c:d1:be:02:b1:43:57:e0: ba:ec:65:35:5a:a0:95:c5:f7:0d:d9:f9:d6:64:62: 2e:26:5d:f6:8f:11:c1:78:5c:4a:7b:8c:96:e1:ac: 91:5d:d7:ae:41:26:9e:25:15:36:88:7e:07:a7:83: 3d:5f:27:a9:84:a5:24:d8:ea:4d:dc:7f:11:30:77: 66:84:ce:08:47:5f:2d:52:61:36:66:01:01:52:5e: 67:ae:50:b6:cf:5b:03:ca:b6:7c:92:48:fb:6f:72: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E7:51:E9:48:9B:3C:9D:E0:F2:FD:8D:87:3C:E2:19:B5:8E:2F:5B X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CedR6UibPJ3g8v2NhzziGbWOL1s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.28.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:7a:ae:98:45:8e:51:7e:e7:f6:36:eb:4f:0d:1d:73:b9:cb: 3b:23:68:e5:1c:15:9b:84:11:80:3c:f2:52:80:ba:f3:74:87: 93:d0:e4:02:fd:e4:16:af:e4:b8:9a:ba:e5:79:85:58:d5:03: 18:3c:7a:6a:67:68:a0:ac:fb:8e:d1:f7:23:28:cd:fb:b9:f7: b8:44:d0:07:be:8b:3a:ad:ea:02:a5:01:a8:4b:be:0e:2e:04: 1a:50:5e:68:a9:24:fc:e5:f1:42:cf:93:ae:52:5c:af:22:14: d8:e1:ef:49:c6:45:44:e2:fc:39:c6:79:f7:04:ec:01:2d:9f: 32:d2:13:0e:79:8e:8b:94:9a:30:9a:76:6a:78:23:8b:9f:d7: 1f:ab:60:c3:e8:96:d4:e0:f7:47:a1:37:38:9b:07:a3:8d:e8: 9f:8a:b0:f1:0f:39:b6:cb:91:76:7b:68:b8:2b:fc:3d:f3:e2: 73:df:9c:ad:40:54:18:41:1c:63:d2:b0:b2:2b:12:42:f2:5c: a4:7d:75:cd:37:6a:b8:a7:7c:11:c5:e1:fc:b2:e9:b6:54:46: 86:34:e7:c3:ff:7a:28:92:4a:12:b5:ea:e9:ae:ae:6c:37:b1: a0:ac:ba:cb:97:ee:65:45:0e:41:51:76:b0:be:3a:7f:a1:21: 7c:98:7c:e1 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MzhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA5RTc1MUU5NDg5QjND OURFMEYyRkQ4RDg3M0NFMjE5QjU4RTJGNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0Rj1rjHv4jRFjqk/FTDhsTzYhWgrQqCwBt2mZZIH+k1Tz3fka s85M6/q57K6DA9K0RZvKO+wEq75Qi3RYCHKxEKu5iAlKxL6MCOwOPnuXUV98dTIV x5hLBGCqt6FL7tJQO++Eo048I3jShk+P5QFeEoC2dNRkS3twDb2E5XDc9nh8AHRG RKis4tdEJzHJSikDxe/eXaiQEcZ5Rgac0b4CsUNX4LrsZTVaoJXF9w3Z+dZkYi4m XfaPEcF4XEp7jJbhrJFd165BJp4lFTaIfgengz1fJ6mEpSTY6k3cfxEwd2aEzghH Xy1SYTZmAQFSXmeuULbPWwPKtnySSPtvctS3AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUCedR6UibPJ3g8v2NhzziGbWOL1swHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvQ2VkUjZVaWJQSjNnOHYyTmh6emlH YldPTDFzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveHDAN BgkqhkiG9w0BAQsFAAOCAQEAbHqumEWOUX7n9jbrTw0dc7nLOyNo5RwVm4QRgDzy UoC683SHk9DkAv3kFq/kuJq65XmFWNUDGDx6amdooKz7jtH3IyjN+7n3uETQB76L Oq3qAqUBqEu+Di4EGlBeaKkk/OXxQs+TrlJcryIU2OHvScZFROL8OcZ59wTsAS2f MtITDnmOi5SaMJp2angji5/XH6tgw+iW1OD3R6E3OJsHo43on4qw8Q85tsuRdnto uCv8PfPic9+crUBUGEEcY9KwsisSQvJcpH11zTdquKd8EcXh/LLptlRGhjTnw/96 KJJKErXq6a6ubDexoKy6y5fuZUUOQVF2sL46f6EhfJh84Q== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org