$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/IbW-sfh8zJGoobgpBzFqrdVjZbw.roa File: IbW-sfh8zJGoobgpBzFqrdVjZbw.roa (raw, json) Hash identifier: cHiyG04rhuSWHMLRt/5z2HpoDSgQfGKE5i392hOHsD4= Subject key identifier: 21:B5:BE:B1:F8:7C:CC:91:A8:A1:B8:29:07:31:6A:AD:D5:63:65:BC Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1005 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/IbW-sfh8zJGoobgpBzFqrdVjZbw.roa Signing time: Mon 26 Aug 2024 05:13:18 +0000 ROA not before: Mon 26 Aug 2024 05:13:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.222.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4101 (0x1005) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=21B5BEB1F87CCC91A8A1B82907316AADD56365BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:c7:57:0f:3e:88:29:a4:54:28:af:d1:fa: 79:8f:5d:7a:9b:36:76:b3:bf:43:77:8f:50:51:0d: cb:3a:9f:41:92:f1:36:5e:94:a8:8f:5a:b4:71:f5: b2:84:8b:92:67:7e:9d:6b:f2:46:79:78:e6:aa:17: bd:a9:13:89:89:19:a6:fb:87:fb:76:36:26:59:46: 6a:d3:b6:97:44:71:21:a4:85:f2:97:8b:5b:1f:43: 55:49:e2:62:13:c1:b6:5f:a7:c0:0f:a9:47:47:69: 15:3a:08:f2:2b:c4:16:af:4f:75:0f:cd:c6:ef:32: a7:50:07:80:82:5b:c6:5f:47:c2:c5:37:24:45:1b: 33:3c:c9:52:c3:fb:cf:bd:ed:59:61:fd:c9:88:b6: 80:32:74:40:12:41:e7:4f:7a:b4:1e:d1:87:27:de: 84:66:82:4b:fd:a7:fe:10:1b:ff:8f:2f:e4:6f:5d: 44:4e:59:25:43:c1:fc:f5:12:95:0f:b1:0b:ce:b3: 84:25:1c:f4:24:05:f8:00:ad:9b:61:39:ee:a4:5f: 77:06:17:66:57:92:96:30:3f:42:b5:a9:21:4f:f9: bb:62:2e:1d:d6:2b:30:63:4a:21:a1:64:36:65:c2: 21:eb:c9:fc:0d:14:54:9e:b5:02:75:18:22:0c:5f: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B5:BE:B1:F8:7C:CC:91:A8:A1:B8:29:07:31:6A:AD:D5:63:65:BC X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/IbW-sfh8zJGoobgpBzFqrdVjZbw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.8.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:98:f2:fb:4c:5d:ef:da:b5:98:48:49:d1:9d:02:2b:56:50: af:18:c8:d1:00:6b:61:a2:bd:ae:8c:59:de:42:27:be:25:1b: d8:9f:f4:e3:da:6b:e5:b3:1c:6a:91:14:26:6f:36:ce:bf:07: 43:88:7b:3c:84:d2:aa:a0:dd:44:ad:04:19:6c:7b:d3:18:83: 78:fd:8e:e4:41:f7:fa:bf:d0:2c:95:35:05:eb:53:5d:0c:c4: 31:91:40:58:2a:eb:53:86:b2:24:6c:41:7f:49:a3:6f:b0:ed: 70:81:e7:d1:b0:f9:0d:af:23:e1:1b:bd:52:88:b9:62:d8:ee: db:49:d0:91:b7:3c:86:ed:c7:8f:f2:5d:d8:89:25:be:58:d6: b0:ad:36:cb:7a:05:c1:99:14:65:cb:36:69:df:a9:35:ed:f5: ef:a3:63:e3:1b:80:78:0c:48:9d:f7:db:c3:13:3b:f1:a5:88: d1:74:14:77:75:e0:c1:cb:86:4b:ca:dd:85:de:21:7a:ff:e8: 66:92:04:eb:8c:4f:28:5c:a8:30:0a:1f:69:b1:de:cc:32:23: 1d:58:be:7e:b0:3f:04:7a:d9:f8:23:5d:ba:63:a3:67:5c:4a: 5d:f3:bb:55:7d:97:6b:1c:c1:94:5e:93:6a:0d:0d:0a:ac:4b: ef:5f:38:4e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIxQjVCRUIxRjg3Q0ND OTFBOEExQjgyOTA3MzE2QUFERDU2MzY1QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDERcdXDz6IKaRUKK/R+nmPXXqbNnazv0N3j1BRDcs6n0GS8TZe lKiPWrRx9bKEi5Jnfp1r8kZ5eOaqF72pE4mJGab7h/t2NiZZRmrTtpdEcSGkhfKX i1sfQ1VJ4mITwbZfp8APqUdHaRU6CPIrxBavT3UPzcbvMqdQB4CCW8ZfR8LFNyRF GzM8yVLD+8+97Vlh/cmItoAydEASQedPerQe0Ycn3oRmgkv9p/4QG/+PL+RvXURO WSVDwfz1EpUPsQvOs4QlHPQkBfgArZthOe6kX3cGF2ZXkpYwP0K1qSFP+btiLh3W KzBjSiGhZDZlwiHryfwNFFSetQJ1GCIMX+NLAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUIbW+sfh8zJGoobgpBzFqrdVjZbwwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvSWJXLXNmaDh6Skdvb2JncEJ6RnFy ZFZqWmJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveCDAN BgkqhkiG9w0BAQsFAAOCAQEAT5jy+0xd79q1mEhJ0Z0CK1ZQrxjI0QBrYaK9roxZ 3kInviUb2J/049pr5bMcapEUJm82zr8HQ4h7PITSqqDdRK0EGWx70xiDeP2O5EH3 +r/QLJU1BetTXQzEMZFAWCrrU4ayJGxBf0mjb7DtcIHn0bD5Da8j4Ru9Uoi5Ytju 20nQkbc8hu3Hj/Jd2IklvljWsK02y3oFwZkUZcs2ad+pNe3176Nj4xuAeAxInffb wxM78aWI0XQUd3XgwcuGS8rdhd4hev/oZpIE64xPKFyoMAofabHezDIjHVi+frA/ BHrZ+CNdumOjZ1xKXfO7VX2XaxzBlF6Tag0NCqxL7184Tg== -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:32 2024 by rpki-client on console-fra.rpki-client.org