$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Hd-uz11je1rMauPmSAKZEGmBRBw.roa File: Hd-uz11je1rMauPmSAKZEGmBRBw.roa (raw, json) Hash identifier: Wvhdy99PumuuvD7aEyaOSLYdBa32eQ7GpHaDhTpZX5c= Subject key identifier: 1D:DF:AE:CF:5D:63:7B:5A:CC:6A:E3:E6:48:02:99:10:69:81:44:1C Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E6E Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Hd-uz11je1rMauPmSAKZEGmBRBw.roa Signing time: Fri 01 Sep 2023 08:49:41 +0000 ROA not before: Fri 01 Sep 2023 08:49:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 211.79.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3694 (0xe6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:41 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1DDFAECF5D637B5ACC6AE3E6480299106981441C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:38:a8:3d:e3:dd:0a:99:99:b7:a7:88:30: 91:95:80:65:2e:4d:f6:17:0b:b6:32:29:05:59:68: 59:4d:ba:9e:be:ad:ed:15:c2:49:2e:21:e3:1e:cc: 61:6c:d5:a3:06:2b:86:90:1f:01:6c:79:ef:c9:1e: 98:75:f6:ee:bb:c0:5b:2d:1f:61:f1:f1:25:bb:70: f2:3a:9c:3a:31:49:5a:4c:d8:09:a1:83:ac:ae:2d: c8:c3:ab:eb:ea:ea:b2:20:ba:4c:c6:62:12:d3:e2: 6a:3a:72:9e:49:73:31:ad:aa:fd:b4:34:61:84:91: cd:97:02:54:d3:23:0a:21:8a:4d:72:8d:47:4f:13: cd:1c:89:0f:06:77:de:f1:31:ad:27:17:d4:62:b0: d5:3d:14:b1:93:84:89:b5:02:02:fb:f7:16:a1:a6: 13:d8:ec:42:5f:a1:db:36:7f:e9:0d:14:b4:bc:b3: b4:b5:43:e1:b4:18:f5:0e:1f:89:3b:4b:e8:d1:b7: 86:ea:39:48:80:b0:3c:1b:3e:83:69:6b:06:16:b2: c6:97:ff:60:59:5f:84:b0:52:e1:28:9e:10:d4:98: 07:be:db:2f:32:c5:32:49:7e:2e:15:e5:82:3e:67: 88:09:f1:ee:59:24:e9:da:41:37:74:01:e7:f7:7f: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:AE:CF:5D:63:7B:5A:CC:6A:E3:E6:48:02:99:10:69:81:44:1C X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Hd-uz11je1rMauPmSAKZEGmBRBw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.120.0/21 Signature Algorithm: sha256WithRSAEncryption 31:d3:7f:88:df:a6:25:54:f3:e1:de:3d:45:90:d3:39:af:93: bc:7e:ed:bc:8f:50:cf:a1:f6:62:7c:85:b9:0d:25:7c:f7:2e: 3d:0b:a2:52:e4:18:92:e6:73:4a:dd:57:48:cf:18:e1:0d:bb: 6c:57:7c:78:27:96:de:82:64:f4:9b:f1:8e:26:42:1f:5e:84: 0a:69:09:3a:ea:a8:d1:69:b4:1e:11:c6:d6:7c:ff:b7:65:bd: 10:ae:36:98:32:7a:2b:a3:1d:54:bb:56:47:f4:16:33:78:5d: f1:c1:84:ab:2f:ff:95:66:aa:42:ba:8a:66:cb:a7:a4:6f:a5: b6:51:2c:5f:45:a0:90:5c:95:bc:62:4e:ae:d2:46:14:34:bd: a7:0a:13:54:f6:07:75:bb:71:a7:54:d9:36:c5:2a:ba:87:c5: 51:f1:29:96:4c:53:f1:39:a6:0f:b6:78:fa:3f:92:0c:a1:2e: c6:92:81:4e:7f:bc:cc:07:f8:48:ee:a9:8b:c0:a2:96:80:e1: 04:07:2d:5b:94:8d:cf:9e:c2:09:6d:9a:ae:aa:b9:8b:47:7b: 24:0b:da:30:ac:f9:6c:2e:23:eb:d3:8f:99:72:85:95:a6:0a: b0:ac:3b:b1:12:78:36:ea:c7:ec:fb:1f:76:30:0c:48:f3:16: 68:4a:06:74 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFEREZBRUNGNUQ2MzdC NUFDQzZBRTNFNjQ4MDI5OTEwNjk4MTQ0MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+hTioPePdCpmZt6eIMJGVgGUuTfYXC7YyKQVZaFlNup6+re0V wkkuIeMezGFs1aMGK4aQHwFsee/JHph19u67wFstH2Hx8SW7cPI6nDoxSVpM2Amh g6yuLcjDq+vq6rIgukzGYhLT4mo6cp5JczGtqv20NGGEkc2XAlTTIwohik1yjUdP E80ciQ8Gd97xMa0nF9RisNU9FLGThIm1AgL79xahphPY7EJfods2f+kNFLS8s7S1 Q+G0GPUOH4k7S+jRt4bqOUiAsDwbPoNpawYWssaX/2BZX4SwUuEonhDUmAe+2y8y xTJJfi4V5YI+Z4gJ8e5ZJOnaQTd0Aef3f+qRAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUHd+uz11je1rMauPmSAKZEGmBRBwwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvSGQtdXoxMWplMXJNYXVQbVNBS1pF R21CUkJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9NPeDAN BgkqhkiG9w0BAQsFAAOCAQEAMdN/iN+mJVTz4d49RZDTOa+TvH7tvI9Qz6H2YnyF uQ0lfPcuPQuiUuQYkuZzSt1XSM8Y4Q27bFd8eCeW3oJk9JvxjiZCH16ECmkJOuqo 0Wm0HhHG1nz/t2W9EK42mDJ6K6MdVLtWR/QWM3hd8cGEqy//lWaqQrqKZsunpG+l tlEsX0WgkFyVvGJOrtJGFDS9pwoTVPYHdbtxp1TZNsUquofFUfEplkxT8TmmD7Z4 +j+SDKEuxpKBTn+8zAf4SO6pi8CiloDhBActW5SNz57CCW2arqq5i0d7JAvaMKz5 bC4j69OPmXKFlaYKsKw7sRJ4NurH7PsfdjAMSPMWaEoGdA== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org