$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/KP4cx1H_QRjJ5zFYDqreKiTyqLg.roa File: KP4cx1H_QRjJ5zFYDqreKiTyqLg.roa (raw, json) Hash identifier: v8vcviXwBc+TYaAiCM7dDK+P04IfpWaf3vAaOLny0kI= Subject key identifier: 28:FE:1C:C7:51:FF:41:18:C9:E7:31:58:0E:AA:DE:2A:24:F2:A8:B8 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0FDD Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KP4cx1H_QRjJ5zFYDqreKiTyqLg.roa Signing time: Mon 26 Aug 2024 05:13:10 +0000 ROA not before: Mon 26 Aug 2024 05:13:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 121.254.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4061 (0xfdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=28FE1CC751FF4118C9E731580EAADE2A24F2A8B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:cb:6d:65:28:9c:6f:5e:3d:01:03:bc:78: 7c:03:ed:e3:74:89:a3:87:7a:d3:95:03:fe:a8:a6: 80:3a:31:dc:92:bb:89:14:31:4d:9e:8d:f4:a9:df: ad:65:44:8a:1b:22:b1:30:ba:a2:24:10:4a:cf:66: ea:5a:f6:7b:05:ee:6e:c7:cd:93:5f:25:94:1d:34: 87:f2:af:06:5e:91:12:56:53:bb:0f:5f:08:f0:fc: 6f:aa:6e:42:ce:0e:7f:9c:f0:a0:ef:c4:8a:52:cd: 56:7e:bf:6a:82:50:ad:4b:c7:5a:a1:7d:a0:42:f6: cc:e6:01:6d:41:d4:5a:f7:59:3f:c6:17:e1:f4:ef: 73:be:58:e1:3a:0c:22:fe:55:02:87:e1:e8:1a:f1: 7d:d2:2f:10:50:ec:5f:92:12:b9:07:6b:b9:b8:da: a8:1f:f6:93:d4:c4:55:71:cd:5d:71:7d:da:58:d0: f6:ab:d4:69:9c:5c:e5:52:32:56:c2:14:67:cb:04: 36:4f:bf:a0:43:20:ef:35:55:4b:ed:6d:27:a7:76: 7a:d6:27:4c:c1:66:ce:77:0e:71:8d:3d:55:53:47: c8:0a:91:a6:eb:5c:0f:96:91:85:5a:94:67:5a:f0: 11:d7:6d:83:6b:a5:44:88:a4:01:5b:cb:17:de:80: 82:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:1C:C7:51:FF:41:18:C9:E7:31:58:0E:AA:DE:2A:24:F2:A8:B8 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KP4cx1H_QRjJ5zFYDqreKiTyqLg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.64.0/21 Signature Algorithm: sha256WithRSAEncryption 61:44:93:8c:16:9b:a2:e7:15:c5:28:b9:f4:09:25:02:ab:48: 4e:6e:2b:9c:f4:c0:66:9b:12:36:e1:2c:e7:ba:8d:60:ec:8e: 9c:77:4d:09:bb:9b:20:03:85:51:d7:02:b7:58:12:f9:f1:30: da:af:20:f6:6d:b8:14:97:85:da:73:a8:4a:0d:48:c1:9d:23: 5e:65:cb:ea:1e:23:e2:90:f2:de:aa:1d:f0:eb:99:52:ad:ea: 1f:01:3d:b1:d6:b8:37:d4:4b:30:04:a8:dd:ac:d2:44:6c:2b: 76:ae:85:46:37:fc:a8:f5:49:47:e2:49:37:f5:64:4c:c2:18: 8f:65:ee:1d:2a:23:76:96:69:30:c2:92:fe:55:04:a6:84:ff: bf:be:5b:52:64:1c:19:09:64:e9:36:30:89:57:30:ad:05:27: 2b:91:02:8a:08:17:cb:bc:49:b6:90:f5:c7:8e:a8:ea:70:ac: 8d:61:23:8e:62:c5:6b:f2:31:31:7e:87:31:d5:c0:2e:4f:9a: eb:c5:57:5b:92:15:17:77:2e:ae:35:d1:1c:33:76:38:2d:cf: eb:f4:8b:2f:2e:6b:0f:ca:71:c5:06:20:6b:c7:ed:ee:84:e4: 15:7a:86:e9:76:a2:f5:1a:55:82:8f:69:69:19:72:c7:fa:54: 84:d2:7d:22 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI4RkUxQ0M3NTFGRjQx MThDOUU3MzE1ODBFQUFERTJBMjRGMkE4QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCfcttZSicb149AQO8eHwD7eN0iaOHetOVA/6opoA6MdySu4kU MU2ejfSp361lRIobIrEwuqIkEErPZupa9nsF7m7HzZNfJZQdNIfyrwZekRJWU7sP Xwjw/G+qbkLODn+c8KDvxIpSzVZ+v2qCUK1Lx1qhfaBC9szmAW1B1Fr3WT/GF+H0 73O+WOE6DCL+VQKH4ega8X3SLxBQ7F+SErkHa7m42qgf9pPUxFVxzV1xfdpY0Par 1GmcXOVSMlbCFGfLBDZPv6BDIO81VUvtbSendnrWJ0zBZs53DnGNPVVTR8gKkabr XA+WkYValGda8BHXbYNrpUSIpAFbyxfegIKlAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUKP4cx1H/QRjJ5zFYDqreKiTyqLgwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvS1A0Y3gxSF9RUmpKNXpGWURxcmVL aVR5cUxnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+QDAN BgkqhkiG9w0BAQsFAAOCAQEAYUSTjBaboucVxSi59AklAqtITm4rnPTAZpsSNuEs 57qNYOyOnHdNCbubIAOFUdcCt1gS+fEw2q8g9m24FJeF2nOoSg1IwZ0jXmXL6h4j 4pDy3qod8OuZUq3qHwE9sda4N9RLMASo3azSRGwrdq6FRjf8qPVJR+JJN/VkTMIY j2XuHSojdpZpMMKS/lUEpoT/v75bUmQcGQlk6TYwiVcwrQUnK5ECiggXy7xJtpD1 x46o6nCsjWEjjmLFa/IxMX6HMdXALk+a68VXW5IVF3curjXRHDN2OC3P6/SLLy5r D8pxxQYga8ft7oTkFXqG6Xai9RpVgo9paRlyx/pUhNJ9Ig== -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:40 2024 by rpki-client on console-fra.rpki-client.org