$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/OvVTcCHI3OgCjN-Re6s9p1kOl_A.roa File: OvVTcCHI3OgCjN-Re6s9p1kOl_A.roa (raw, json) Hash identifier: CvnQ2z5nxYRf+0v0S0ZmI6W4IA2wFe9XoQq49vYj1ls= Subject key identifier: 3A:F5:53:70:21:C8:DC:E8:02:8C:DF:91:7B:AB:3D:A7:59:0E:97:F0 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E6A Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/OvVTcCHI3OgCjN-Re6s9p1kOl_A.roa Signing time: Fri 01 Sep 2023 08:49:40 +0000 ROA not before: Fri 01 Sep 2023 08:49:40 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 121.254.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3690 (0xe6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:40 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3AF5537021C8DCE8028CDF917BAB3DA7590E97F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:8a:0a:e8:ba:43:1b:79:53:8c:44:d7:a1: 69:a4:5f:4d:aa:ec:cd:be:3b:23:8a:ff:de:7f:b7: 7b:27:91:0b:d5:d1:16:06:2f:00:9a:e1:12:43:91: 37:76:fd:63:76:34:fa:1c:63:8f:66:44:6f:dd:19: 51:f0:b8:7c:14:22:ba:f7:e7:a9:99:a6:ad:a6:1d: d8:86:a6:b0:de:55:d5:a4:6e:0d:70:bd:c3:cb:69: 67:f2:74:a0:d9:31:6e:b4:e6:a3:d9:55:2e:48:85: 16:d4:e6:51:b8:70:c0:3d:d4:c5:7a:0b:32:cd:45: 54:f3:89:ec:37:75:17:b1:e7:4f:5d:0b:a7:b3:ff: 91:db:0c:04:8c:cc:95:e0:59:73:6a:35:b0:3d:2f: 83:3a:33:1e:82:9b:9c:2c:2f:58:02:43:22:5e:11: 8a:e7:55:a5:80:6c:46:42:d7:c4:5a:da:65:4a:7b: 07:d6:0a:c5:55:cd:2d:be:ca:a3:f3:f4:b3:71:84: fb:f4:de:a2:c7:27:1b:9e:8c:77:cb:06:72:73:ad: 46:ce:a4:33:5d:f3:fd:b4:d8:20:4e:27:ef:16:87: b8:47:4d:dd:a8:62:17:48:6a:14:c4:63:21:15:e1: 97:fd:f2:b8:e0:38:21:c5:da:f1:a8:e5:bd:19:42: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F5:53:70:21:C8:DC:E8:02:8C:DF:91:7B:AB:3D:A7:59:0E:97:F0 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/OvVTcCHI3OgCjN-Re6s9p1kOl_A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.88.0/21 Signature Algorithm: sha256WithRSAEncryption 70:4b:64:72:5c:67:d1:ef:bb:8a:52:e4:d8:ea:30:d5:78:74: 08:ab:2c:97:74:f4:b7:7b:a9:98:a7:f1:32:f9:9c:b6:92:34: 7a:d7:66:3a:46:ae:41:7f:c7:0b:cd:41:14:6b:67:8f:66:81: cf:6b:b5:50:d1:cd:1c:58:eb:c8:1c:a9:42:8c:6a:3b:a7:57: f8:79:e8:1b:c7:05:c7:10:20:3c:5c:cb:fb:7c:d2:2a:2f:ad: 0a:0a:db:0d:15:55:07:b1:52:8b:44:c0:7f:c7:98:9d:e7:b2: ca:78:2e:a1:4a:8f:6c:6b:af:bf:42:9c:f2:e4:cf:8d:4e:d6: 07:7a:a9:06:03:4c:e0:78:9a:fb:b6:b2:2a:04:c7:43:cf:9a: af:53:0f:ad:c7:54:11:27:76:41:b9:46:6d:c4:42:db:fe:ed: c1:4d:db:c7:ee:ed:86:ef:a3:5e:81:36:1c:21:91:88:50:a9: 57:56:f9:dc:27:46:3a:52:33:80:c9:e9:36:4a:98:f3:25:25: b1:7c:ca:25:e3:8e:a2:5f:aa:03:f5:c7:a1:d8:9d:e8:08:ee: d2:75:54:8d:70:aa:04:6e:77:74:c4:ee:f1:ce:f3:30:3f:9f: 4f:8a:93:8d:07:b0:f5:25:44:a2:7d:9a:67:d7:79:be:af:3f: be:77:09:be -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNBRjU1MzcwMjFDOERD RTgwMjhDREY5MTdCQUIzREE3NTkwRTk3RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWUooK6LpDG3lTjETXoWmkX02q7M2+OyOK/95/t3snkQvV0RYG LwCa4RJDkTd2/WN2NPocY49mRG/dGVHwuHwUIrr356mZpq2mHdiGprDeVdWkbg1w vcPLaWfydKDZMW605qPZVS5IhRbU5lG4cMA91MV6CzLNRVTziew3dRex509dC6ez /5HbDASMzJXgWXNqNbA9L4M6Mx6Cm5wsL1gCQyJeEYrnVaWAbEZC18Ra2mVKewfW CsVVzS2+yqPz9LNxhPv03qLHJxuejHfLBnJzrUbOpDNd8/202CBOJ+8Wh7hHTd2o YhdIahTEYyEV4Zf98rjgOCHF2vGo5b0ZQmhXAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUOvVTcCHI3OgCjN+Re6s9p1kOl/AwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvT3ZWVGNDSEkzT2dDak4tUmU2czlw MWtPbF9BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+WDAN BgkqhkiG9w0BAQsFAAOCAQEAcEtkclxn0e+7ilLk2Oow1Xh0CKssl3T0t3upmKfx MvmctpI0etdmOkauQX/HC81BFGtnj2aBz2u1UNHNHFjryBypQoxqO6dX+HnoG8cF xxAgPFzL+3zSKi+tCgrbDRVVB7FSi0TAf8eYneeyynguoUqPbGuvv0Kc8uTPjU7W B3qpBgNM4Hia+7ayKgTHQ8+ar1MPrcdUESd2QblGbcRC2/7twU3bx+7thu+jXoE2 HCGRiFCpV1b53CdGOlIzgMnpNkqY8yUlsXzKJeOOol+qA/XHodid6Aju0nVUjXCq BG53dMTu8c7zMD+fT4qTjQew9SVEon2aZ9d5vq8/vncJvg== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org