$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/PSQdVwGHusm1MgqlIkT1uOjJNPI.roa File: PSQdVwGHusm1MgqlIkT1uOjJNPI.roa (raw, json) Hash identifier: ipZixGA2lQb7hfKcaqohPhAvLLePXw+BvasNS81r9Hc= Subject key identifier: 3D:24:1D:57:01:87:BA:C9:B5:32:0A:A5:22:44:F5:B8:E8:C9:34:F2 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E60 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/PSQdVwGHusm1MgqlIkT1uOjJNPI.roa Signing time: Fri 01 Sep 2023 08:49:38 +0000 ROA not before: Fri 01 Sep 2023 08:49:38 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 121.254.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3680 (0xe60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:38 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3D241D570187BAC9B5320AA52244F5B8E8C934F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:47:e5:fd:1f:1a:a0:ed:a9:50:4e:fb:1a: ae:bb:45:50:e5:08:bd:0c:56:c4:6d:b1:fa:0d:33: cd:25:41:88:bd:6c:80:9d:33:73:ef:8e:36:a4:92: 44:52:1b:b1:55:c1:08:8d:b3:8e:d1:d9:4a:33:c8: 68:4f:0f:97:36:d6:3f:53:17:8f:90:90:0d:5f:27: b3:3a:e1:ab:78:b7:e3:d0:be:ff:7c:6f:b3:4f:37: bb:96:36:bc:1c:45:fc:b3:87:b2:10:21:a9:b9:0c: 37:44:f5:aa:ad:20:c4:64:37:47:4e:fa:99:cf:37: 92:4c:4c:92:0c:08:51:a4:63:2d:bc:97:9a:dd:5a: 7a:ab:ff:47:3d:f8:93:d6:a8:bf:e3:97:e1:d9:56: ae:45:21:fd:fe:3e:a9:aa:37:18:fd:bd:b4:2b:79: f5:a3:89:26:80:95:32:02:81:4b:88:99:fe:ad:67: be:32:a1:16:6c:0e:f6:76:f9:05:51:93:5a:b6:ca: 96:9e:ea:93:86:54:d6:e4:d5:30:7b:50:96:7c:15: 36:36:82:49:0b:cd:af:f1:7a:69:fa:63:0e:c5:55: 5f:90:48:80:4a:fb:1e:f2:7c:49:b3:45:71:54:f2: 01:01:bd:f7:2e:8e:34:0c:0e:b2:ce:48:53:67:e8: c5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:24:1D:57:01:87:BA:C9:B5:32:0A:A5:22:44:F5:B8:E8:C9:34:F2 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/PSQdVwGHusm1MgqlIkT1uOjJNPI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.120.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:e6:44:36:6b:ca:55:2a:71:e2:30:55:97:a4:38:25:c1:22: a0:d7:dd:a9:20:37:af:fa:35:ef:4d:f6:08:19:ef:1a:a2:ff: 3e:e7:cc:ab:19:79:1a:e8:7e:b3:23:eb:1f:9d:7e:c8:92:ed: b6:42:98:f0:03:ab:5f:3a:a0:fd:57:96:df:df:0c:94:b9:e0: 0e:13:88:cd:9b:d7:a6:c7:a8:6e:e5:06:91:78:52:b3:bb:dc: b7:e3:77:ac:a9:8d:b9:fd:44:f6:81:5a:a6:08:4c:6d:0e:ad: e4:bf:47:fb:1b:1f:6e:64:fd:8d:2b:7b:2d:ed:91:6a:cd:50: 40:96:f9:82:3d:83:01:b1:85:c0:86:6c:b4:07:28:15:fa:f4: 1a:64:e2:54:76:b9:43:75:77:a8:7c:9e:37:ac:69:69:a6:ed: d0:e8:12:9c:bc:40:7b:37:5d:85:78:b0:30:87:fa:b3:53:fd: fa:f8:d4:8a:33:e0:92:b7:01:49:34:1e:1d:1f:e2:c8:42:5f: 06:1b:53:b3:43:42:65:da:03:86:b6:96:39:16:08:1e:1b:6b: 2e:e6:83:fd:21:df:df:2d:ed:de:5a:cd:02:c5:2a:ca:46:41: b6:f3:45:5e:2c:ac:c8:08:61:c2:73:71:54:3a:1b:45:c1:6a: e4:a6:e0:02 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MzhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNEMjQxRDU3MDE4N0JB QzlCNTMyMEFBNTIyNDRGNUI4RThDOTM0RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwcEfl/R8aoO2pUE77Gq67RVDlCL0MVsRtsfoNM80lQYi9bICd M3PvjjakkkRSG7FVwQiNs47R2UozyGhPD5c21j9TF4+QkA1fJ7M64at4t+PQvv98 b7NPN7uWNrwcRfyzh7IQIam5DDdE9aqtIMRkN0dO+pnPN5JMTJIMCFGkYy28l5rd Wnqr/0c9+JPWqL/jl+HZVq5FIf3+PqmqNxj9vbQrefWjiSaAlTICgUuImf6tZ74y oRZsDvZ2+QVRk1q2ypae6pOGVNbk1TB7UJZ8FTY2gkkLza/xemn6Yw7FVV+QSIBK +x7yfEmzRXFU8gEBvfcujjQMDrLOSFNn6MWXAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUPSQdVwGHusm1MgqlIkT1uOjJNPIwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvUFNRZFZ3R0h1c20xTWdxbElrVDF1 T2pKTlBJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+eDAN BgkqhkiG9w0BAQsFAAOCAQEAT+ZENmvKVSpx4jBVl6Q4JcEioNfdqSA3r/o17032 CBnvGqL/PufMqxl5Guh+syPrH51+yJLttkKY8AOrXzqg/VeW398MlLngDhOIzZvX pseobuUGkXhSs7vct+N3rKmNuf1E9oFapghMbQ6t5L9H+xsfbmT9jSt7Le2Ras1Q QJb5gj2DAbGFwIZstAcoFfr0GmTiVHa5Q3V3qHyeN6xpaabt0OgSnLxAezddhXiw MIf6s1P9+vjUijPgkrcBSTQeHR/iyEJfBhtTs0NCZdoDhraWORYIHhtrLuaD/SHf 3y3t3lrNAsUqykZBtvNFXiysyAhhwnNxVDobRcFq5KbgAg== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org