$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Dua2jo2GEP3T1aps3DQi1PRCU3E.roa File: Dua2jo2GEP3T1aps3DQi1PRCU3E.roa (raw, json) Hash identifier: sFiuv4zaPeHx9IK79MTbrNevi05pL/ZS2Rn1RmD6Lqs= Subject key identifier: 0E:E6:B6:8E:8D:86:10:FD:D3:D5:AA:6C:DC:34:22:D4:F4:42:53:71 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0FEF Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Dua2jo2GEP3T1aps3DQi1PRCU3E.roa Signing time: Mon 26 Aug 2024 05:13:13 +0000 ROA not before: Mon 26 Aug 2024 05:13:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 121.254.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4079 (0xfef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0EE6B68E8D8610FDD3D5AA6CDC3422D4F4425371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:29:79:c9:ac:87:ca:da:21:f9:5c:55:40: 03:59:ce:45:39:00:bb:ac:70:42:f3:70:b3:ae:1e: ee:33:61:00:a4:cb:e1:08:a4:b8:b4:92:78:bd:74: 91:f4:68:eb:aa:0e:82:c4:00:1c:79:c8:26:16:c3: 92:4b:d0:12:6c:d5:17:3a:b9:b7:76:d9:30:5e:e4: bc:a5:a4:06:b8:b6:6a:05:20:8f:32:0a:89:98:28: d1:fc:5f:75:ce:e2:c7:94:aa:9d:05:95:07:2d:c6: 8e:97:83:70:ac:ff:32:29:72:21:e9:3b:f5:64:d9: ca:b5:4d:8a:ca:d3:29:f3:2d:fd:55:0a:e6:8b:03: e8:21:a0:a6:f4:e4:97:9b:94:a6:38:2b:3e:88:48: 6d:72:c9:1c:34:35:de:21:31:87:6c:76:0b:e9:23: 4e:01:db:42:66:ee:45:19:71:1f:80:3a:40:ff:97: 6c:15:30:af:58:95:f5:62:81:cb:71:fd:50:89:c3: 16:7e:57:0b:62:6f:51:85:5e:43:0f:e5:c1:c3:0d: 55:e1:99:49:13:d0:55:6a:d4:21:fd:c8:51:62:58: 96:f5:3c:2b:1b:63:58:68:b8:93:97:9e:f7:2d:e9: 98:08:9f:2a:17:00:30:fa:b4:fc:dc:a4:cb:f0:66: 2b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E6:B6:8E:8D:86:10:FD:D3:D5:AA:6C:DC:34:22:D4:F4:42:53:71 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Dua2jo2GEP3T1aps3DQi1PRCU3E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.120.0/21 Signature Algorithm: sha256WithRSAEncryption a2:aa:36:20:12:f8:95:d2:3b:e0:84:bd:81:fd:8d:e2:c2:17: 57:7d:1a:8f:7b:0d:c9:01:0c:c0:6d:1a:fd:47:ba:65:84:ac: 09:4e:c0:21:07:da:3c:f0:95:8a:f2:ee:94:4f:96:23:6e:d3: 7f:27:67:1a:79:21:49:34:46:85:57:9d:c4:25:d3:38:fb:78: 95:ce:21:86:01:ba:56:e4:57:11:39:81:2e:b8:23:62:69:3c: 3e:08:15:28:1d:78:25:85:d3:bb:4a:96:4f:b7:f1:0f:de:a5: 31:9b:f6:d9:88:11:37:69:2e:f1:a1:a9:0f:d9:11:0b:2f:cf: ca:00:6f:ad:de:5f:a2:f4:f0:78:b1:42:96:7c:49:86:36:a0: f2:18:fe:63:e9:36:6a:1a:4e:04:15:8b:3b:ed:d9:07:0c:1b: d0:d7:c4:72:b4:0d:2d:89:82:bf:72:92:3c:dd:a2:c9:de:8b: 3a:34:d0:48:cf:42:15:8f:cd:a4:1b:b2:d8:48:54:de:61:aa: 8b:6c:24:7d:44:7f:8d:4d:7d:3b:39:7a:1f:07:cb:99:de:24: cc:77:27:6f:85:33:50:be:c0:61:23:fc:0a:8b:10:25:1a:e8: 72:1c:a3:83:ad:b2:d2:d0:30:7e:12:9b:48:f2:8b:2a:30:7f: 10:26:0c:9b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBFRTZCNjhFOEQ4NjEw RkREM0Q1QUE2Q0RDMzQyMkQ0RjQ0MjUzNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4lCl5yayHytoh+VxVQANZzkU5ALuscELzcLOuHu4zYQCky+EI pLi0kni9dJH0aOuqDoLEABx5yCYWw5JL0BJs1Rc6ubd22TBe5LylpAa4tmoFII8y ComYKNH8X3XO4seUqp0FlQctxo6Xg3Cs/zIpciHpO/Vk2cq1TYrK0ynzLf1VCuaL A+ghoKb05JeblKY4Kz6ISG1yyRw0Nd4hMYdsdgvpI04B20Jm7kUZcR+AOkD/l2wV MK9YlfVigctx/VCJwxZ+Vwtib1GFXkMP5cHDDVXhmUkT0FVq1CH9yFFiWJb1PCsb Y1houJOXnvct6ZgInyoXADD6tPzcpMvwZiuPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUDua2jo2GEP3T1aps3DQi1PRCU3EwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvRHVhMmpvMkdFUDNUMWFwczNEUWkx UFJDVTNFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+eDAN BgkqhkiG9w0BAQsFAAOCAQEAoqo2IBL4ldI74IS9gf2N4sIXV30aj3sNyQEMwG0a /Ue6ZYSsCU7AIQfaPPCVivLulE+WI27TfydnGnkhSTRGhVedxCXTOPt4lc4hhgG6 VuRXETmBLrgjYmk8PggVKB14JYXTu0qWT7fxD96lMZv22YgRN2ku8aGpD9kRCy/P ygBvrd5fovTweLFClnxJhjag8hj+Y+k2ahpOBBWLO+3ZBwwb0NfEcrQNLYmCv3KS PN2iyd6LOjTQSM9CFY/NpBuy2EhU3mGqi2wkfUR/jU19Ozl6HwfLmd4kzHcnb4Uz UL7AYSP8CosQJRrochyjg62y0tAwfhKbSPKLKjB/ECYMmw== -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:40 2024 by rpki-client on console-fra.rpki-client.org