$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/J8Iuc3q-urlJxyGKRfrPYNV_4LI.roa File: J8Iuc3q-urlJxyGKRfrPYNV_4LI.roa (raw, json) Hash identifier: jg71c37JUEajjjPKYZcUGFz1bdUWbCZ6/eU0oI563cc= Subject key identifier: 27:C2:2E:73:7A:BE:BA:B9:49:C7:21:8A:45:FA:CF:60:D5:7F:E0:B2 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E26 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/J8Iuc3q-urlJxyGKRfrPYNV_4LI.roa Signing time: Fri 01 Sep 2023 08:49:21 +0000 ROA not before: Fri 01 Sep 2023 08:49:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 182.155.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3622 (0xe26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=27C22E737ABEBAB949C7218A45FACF60D57FE0B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:a3:10:02:d4:5f:03:e7:18:5f:c6:d1:64: 34:86:dd:8f:db:3d:4a:31:60:fc:69:c1:d3:e3:09: cc:40:7e:be:12:25:90:84:82:2e:b3:53:a1:75:1e: 7e:a6:e7:20:51:6b:a8:64:e5:2e:c3:00:61:8c:8a: e1:6f:91:88:93:97:1c:10:91:8b:5c:e3:fb:bd:5c: 40:a6:29:f1:1b:a3:b1:f4:45:05:82:59:d7:f7:56: 34:c8:12:12:c6:85:28:f0:aa:9d:85:77:05:4f:e3: b2:6d:cb:46:40:e1:ec:9f:af:ad:65:03:a3:76:d3: b4:16:7b:4c:c6:40:9b:4b:98:c6:42:bd:41:f6:53: 17:79:f4:27:ed:9b:43:1d:94:0b:b1:a7:1d:ea:14: c8:11:31:e9:c8:41:9c:fc:8c:d1:a1:1d:bf:4d:87: 5f:35:4a:23:5c:3e:dd:6d:92:6e:73:19:c7:6b:69: d3:d4:90:cc:43:17:04:d9:e1:b6:19:fa:65:93:79: 2b:44:69:e8:a1:6a:01:35:d8:b2:16:fe:fc:04:19: d1:e8:f8:f1:98:6c:35:30:40:b0:4f:30:7c:94:e4: bb:84:5b:80:64:b8:39:18:77:51:fc:ba:7f:9a:89: d5:12:a8:52:ed:6c:32:45:37:b6:68:d7:1a:38:e5: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C2:2E:73:7A:BE:BA:B9:49:C7:21:8A:45:FA:CF:60:D5:7F:E0:B2 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/J8Iuc3q-urlJxyGKRfrPYNV_4LI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.155.96.0/19 Signature Algorithm: sha256WithRSAEncryption a3:f3:ec:f5:cd:e0:4a:1a:1c:e5:39:bf:2f:d8:03:ed:e8:c2: 9e:8d:ca:0c:eb:e3:81:64:43:95:51:e1:0e:83:5c:1f:e0:dd: 5f:35:fb:bf:20:c5:fa:4b:55:32:48:bf:ac:66:27:cb:64:e9: e9:9a:31:0c:b6:6a:b7:73:45:16:5c:ba:86:ce:1e:ae:b0:0e: 75:e3:a2:17:ce:21:8d:f5:31:29:fa:1d:2e:ab:3b:aa:38:82: 37:18:41:a4:30:38:71:47:d1:8a:16:e8:79:dc:40:07:d2:27: 75:3e:fe:86:3f:c2:0b:8a:a2:1f:06:37:75:7b:5a:ca:88:84: b1:6c:56:31:ac:4c:68:03:86:4c:7e:f8:c7:10:bd:e4:42:53: 38:74:53:bd:a1:d7:08:0f:84:2b:81:df:1a:11:eb:fb:52:fe: 94:a4:e4:4f:53:fb:ed:1f:24:38:b1:cf:fa:97:ad:3d:c0:d8: 81:38:26:a8:53:4d:2e:f2:70:6b:c2:14:12:a0:62:f4:90:e2: 91:31:40:ad:e9:b6:37:ed:5f:30:25:e3:ff:cf:76:3e:1a:2d: 1b:78:b6:ae:19:37:b9:94:f7:3a:40:85:c5:19:20:04:45:68: 5b:e9:04:85:35:a5:4b:bf:79:e0:20:e2:71:92:ee:77:d8:b9: 34:aa:8a:81 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI3QzIyRTczN0FCRUJB Qjk0OUM3MjE4QTQ1RkFDRjYwRDU3RkUwQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCikqMQAtRfA+cYX8bRZDSG3Y/bPUoxYPxpwdPjCcxAfr4SJZCE gi6zU6F1Hn6m5yBRa6hk5S7DAGGMiuFvkYiTlxwQkYtc4/u9XECmKfEbo7H0RQWC Wdf3VjTIEhLGhSjwqp2FdwVP47Jty0ZA4eyfr61lA6N207QWe0zGQJtLmMZCvUH2 Uxd59Cftm0MdlAuxpx3qFMgRMenIQZz8jNGhHb9Nh181SiNcPt1tkm5zGcdradPU kMxDFwTZ4bYZ+mWTeStEaeihagE12LIW/vwEGdHo+PGYbDUwQLBPMHyU5LuEW4Bk uDkYd1H8un+aidUSqFLtbDJFN7Zo1xo45W0BAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUJ8Iuc3q+urlJxyGKRfrPYNV/4LIwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvSjhJdWMzcS11cmxKeHlHS1JmclBZ TlZfNExJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbabYDAN BgkqhkiG9w0BAQsFAAOCAQEAo/Ps9c3gShoc5Tm/L9gD7ejCno3KDOvjgWRDlVHh DoNcH+DdXzX7vyDF+ktVMki/rGYny2Tp6ZoxDLZqt3NFFly6hs4errAOdeOiF84h jfUxKfodLqs7qjiCNxhBpDA4cUfRihboedxAB9IndT7+hj/CC4qiHwY3dXtayoiE sWxWMaxMaAOGTH74xxC95EJTOHRTvaHXCA+EK4HfGhHr+1L+lKTkT1P77R8kOLHP +petPcDYgTgmqFNNLvJwa8IUEqBi9JDikTFArem2N+1fMCXj/892PhotG3i2rhk3 uZT3OkCFxRkgBEVoW+kEhTWlS7954CDicZLud9i5NKqKgQ== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org