$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/MuJzpSi4G_K89zR8Zba-xsbw1W4.roa File: MuJzpSi4G_K89zR8Zba-xsbw1W4.roa (raw, json) Hash identifier: HMqL8g4RLWfv8xYHhjWc7blNYCaXO8XvGPbLavEzJGg= Subject key identifier: 32:E2:73:A5:28:B8:1B:F2:BC:F7:34:7C:65:B6:BE:C6:C6:F0:D5:6E Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E22 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/MuJzpSi4G_K89zR8Zba-xsbw1W4.roa Signing time: Fri 01 Sep 2023 08:49:19 +0000 ROA not before: Fri 01 Sep 2023 08:49:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 27.96.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3618 (0xe22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=32E273A528B81BF2BCF7347C65B6BEC6C6F0D56E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b5:76:7c:22:f9:8a:81:75:30:32:1b:85:c2: 27:8b:07:b4:fd:4b:c1:d7:e3:4b:af:13:6c:ca:cd: 26:ca:74:ec:30:69:7a:98:09:8b:7d:50:8c:0d:2e: e3:58:fc:ae:1d:0b:75:6c:92:bb:bd:9f:15:76:62: 7c:e2:b6:4b:69:a4:16:1c:d5:b2:e1:cf:d3:10:30: b3:59:bd:38:2a:7a:f9:89:67:79:65:89:d9:ab:af: 88:59:f2:1a:1f:28:25:f5:02:a5:43:68:80:8b:f4: d6:d4:57:cf:be:35:ed:74:71:46:2f:08:34:e7:dc: 4b:23:a3:52:27:0d:77:38:c3:35:3e:29:d6:a6:f1: 97:2b:8d:6d:e2:4c:f1:2f:4a:3d:e9:23:5b:91:99: 62:60:97:2e:07:1f:d9:71:b0:80:05:2b:2c:9a:d2: ca:e0:ef:64:0f:6d:37:ce:28:30:c3:1f:d5:69:ef: 87:9f:7c:fe:c9:08:5f:15:9b:dd:52:e4:3a:f0:ee: 46:8a:f1:73:32:e4:46:24:6d:75:8b:13:aa:78:1d: d9:a3:b7:34:b0:8b:9d:f3:03:6c:31:b8:7e:4c:12: 76:98:af:bb:b0:1b:db:c1:73:b7:cc:e7:e5:e6:2f: 22:46:7d:99:aa:59:2e:06:3f:f0:00:a5:d3:ff:e8: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E2:73:A5:28:B8:1B:F2:BC:F7:34:7C:65:B6:BE:C6:C6:F0:D5:6E X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/MuJzpSi4G_K89zR8Zba-xsbw1W4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.96.224.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:4a:cc:8a:11:1c:3d:f6:78:21:99:3d:64:ca:f5:51:ad:00: 93:ca:e6:6d:e1:61:4f:83:8c:99:f3:ad:d2:a2:63:e1:03:ce: 95:d6:b4:6b:aa:07:8a:2e:9e:c0:e9:3b:12:31:7b:f1:74:00: 36:8f:2f:4c:6a:d7:0a:ab:01:9f:9c:56:b7:16:14:ad:97:16: a9:d7:9c:12:84:47:05:87:bf:ca:1e:ed:7f:9f:34:e5:f3:67: 46:58:9a:34:38:2c:5b:21:31:85:3c:d9:05:71:0c:7c:57:b0: ae:f6:e7:25:b2:41:01:29:4f:85:cb:14:e5:b8:82:c6:9b:69: 0a:be:6b:94:1a:3e:68:cb:9d:66:70:bd:e9:77:1f:9b:dc:64: 9a:41:df:88:e1:55:b1:c0:60:86:61:ad:90:f2:df:9d:6c:f5: b0:8f:17:27:59:a6:42:11:d0:0a:49:23:09:ef:b1:39:0c:43: 61:cb:78:7a:bd:fe:ac:e8:48:a4:cb:be:aa:74:a0:a3:98:7b: 73:33:ed:2c:be:19:0d:8a:5d:b6:a5:01:24:4a:09:77:90:44: d7:3d:ab:b6:a1:ce:8c:fa:a2:5f:f7:de:05:cc:58:06:06:8f: 7d:90:25:8c:ad:81:63:8c:fd:b6:d0:7f:f7:fe:78:d2:fd:47: 0b:94:4d:ea -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMyRTI3M0E1MjhCODFC RjJCQ0Y3MzQ3QzY1QjZCRUM2QzZGMEQ1NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCltXZ8IvmKgXUwMhuFwieLB7T9S8HX40uvE2zKzSbKdOwwaXqY CYt9UIwNLuNY/K4dC3Vskru9nxV2YnzitktppBYc1bLhz9MQMLNZvTgqevmJZ3ll idmrr4hZ8hofKCX1AqVDaICL9NbUV8++Ne10cUYvCDTn3Esjo1InDXc4wzU+Kdam 8ZcrjW3iTPEvSj3pI1uRmWJgly4HH9lxsIAFKyya0srg72QPbTfOKDDDH9Vp74ef fP7JCF8Vm91S5Drw7kaK8XMy5EYkbXWLE6p4HdmjtzSwi53zA2wxuH5MEnaYr7uw G9vBc7fM5+XmLyJGfZmqWS4GP/AApdP/6H7pAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUMuJzpSi4G/K89zR8Zba+xsbw1W4wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvTXVKenBTaTRHX0s4OXpSOFpiYS14 c2J3MVc0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAxtg4DAN BgkqhkiG9w0BAQsFAAOCAQEATErMihEcPfZ4IZk9ZMr1Ua0Ak8rmbeFhT4OMmfOt 0qJj4QPOlda0a6oHii6ewOk7EjF78XQANo8vTGrXCqsBn5xWtxYUrZcWqdecEoRH BYe/yh7tf5805fNnRliaNDgsWyExhTzZBXEMfFewrvbnJbJBASlPhcsU5biCxptp Cr5rlBo+aMudZnC96Xcfm9xkmkHfiOFVscBghmGtkPLfnWz1sI8XJ1mmQhHQCkkj Ce+xOQxDYct4er3+rOhIpMu+qnSgo5h7czPtLL4ZDYpdtqUBJEoJd5BE1z2rtqHO jPqiX/feBcxYBgaPfZAljK2BY4z9ttB/9/540v1HC5RN6g== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org