$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/RjBYE6LzjG-mWNsvmUDv1Uo-R5w.roa File: RjBYE6LzjG-mWNsvmUDv1Uo-R5w.roa (raw, json) Hash identifier: I6WsMQJEBriWOErfyLq4u96o6QQAxjVj2sGwo+Bx/EI= Subject key identifier: 46:30:58:13:A2:F3:8C:6F:A6:58:DB:2F:99:40:EF:D5:4A:3E:47:9C Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 102F Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/RjBYE6LzjG-mWNsvmUDv1Uo-R5w.roa Signing time: Mon 26 Aug 2024 05:13:28 +0000 ROA not before: Mon 26 Aug 2024 05:13:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.222.0.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4143 (0x102f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=46305813A2F38C6FA658DB2F9940EFD54A3E479C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:11:58:75:81:e1:fa:98:39:7a:d2:c5:9b: 34:05:b1:2a:e7:24:6d:5d:6c:a9:08:e4:b6:d3:93: ea:de:25:19:4f:ea:60:3e:9f:91:09:bb:d5:82:82: 0c:e9:e6:1d:e9:f8:d4:02:2b:9d:49:f9:40:3c:cc: f4:40:e1:ab:bb:80:bc:c6:a1:19:c2:5a:d7:32:1a: 3e:c2:37:ea:5a:8b:66:44:b7:c2:e1:56:58:e1:da: d5:c1:1d:54:0f:d7:9b:e4:71:06:bf:89:6c:cc:9d: df:be:7b:8e:38:58:6e:94:2d:57:e0:6e:d2:88:d7: e3:49:93:17:b3:d3:b7:7d:56:11:c3:91:73:dd:40: 9d:18:51:6b:57:58:cd:97:9b:b4:10:69:79:c9:4c: 93:8a:dc:ea:b4:70:88:71:bf:17:fe:65:10:c1:9f: 33:89:a6:e1:22:1c:99:f6:90:98:54:51:27:da:e5: ab:22:cf:80:38:b5:1e:fa:3d:92:8d:9c:70:c5:a6: 98:54:b9:99:c8:06:e4:d3:be:04:6e:ef:ff:e6:bb: 2c:c6:bb:fe:a9:ab:c6:3d:8d:f8:9c:0f:35:b3:9f: 67:e6:11:ed:aa:e3:1a:f3:a5:65:0e:10:0b:0e:73: 18:3d:a9:8c:72:06:af:eb:8e:0c:d2:15:8b:ac:c5: 2d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:30:58:13:A2:F3:8C:6F:A6:58:DB:2F:99:40:EF:D5:4A:3E:47:9C X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/RjBYE6LzjG-mWNsvmUDv1Uo-R5w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.0.0/19 Signature Algorithm: sha256WithRSAEncryption 53:5c:f8:15:0f:1f:b7:b2:bb:5a:18:e7:1d:8a:d2:18:23:a6: 62:64:9a:f8:b1:22:8a:e8:9b:03:eb:c7:fc:86:92:f3:26:4f: a9:72:63:e2:fb:9b:bf:0e:0a:2f:bc:ce:36:58:c9:42:71:eb: 92:4c:19:06:19:58:07:7b:c6:4b:26:de:b1:8a:c1:4f:89:f9: d5:eb:40:32:ed:4e:b0:dc:d2:02:b4:47:d7:4d:99:31:9f:d8: 08:dc:23:46:83:c6:05:75:a1:5c:0f:55:e9:5b:63:38:ba:43: dc:53:9f:27:91:bc:46:ad:59:0d:ab:de:75:3d:f4:73:67:1f: 12:ba:f7:b3:42:d1:d2:8d:e5:6d:1e:39:65:f1:06:6f:6c:37: f6:38:70:31:48:fe:4c:11:ab:2f:c1:17:f9:de:4a:97:24:6e: 8f:6b:dd:25:fd:0e:2f:bc:25:a3:f6:42:4d:11:55:6f:c1:cf: a5:46:82:6d:d6:bb:e2:f9:06:54:ef:81:08:f4:d7:87:ee:0a: 4a:26:02:cd:fb:83:9b:fb:fd:c6:e4:06:fc:55:14:91:17:d9: 5b:ab:2f:d3:4d:ac:bf:e6:0d:63:df:69:da:1e:14:30:eb:b9: f7:e3:07:56:78:18:75:08:af:45:0e:dd:c4:ce:48:53:22:91: 5c:8c:ae:29 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ2MzA1ODEzQTJGMzhD NkZBNjU4REIyRjk5NDBFRkQ1NEEzRTQ3OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZZBFYdYHh+pg5etLFmzQFsSrnJG1dbKkI5LbTk+reJRlP6mA+ n5EJu9WCggzp5h3p+NQCK51J+UA8zPRA4au7gLzGoRnCWtcyGj7CN+pai2ZEt8Lh Vljh2tXBHVQP15vkcQa/iWzMnd++e444WG6ULVfgbtKI1+NJkxez07d9VhHDkXPd QJ0YUWtXWM2Xm7QQaXnJTJOK3Oq0cIhxvxf+ZRDBnzOJpuEiHJn2kJhUUSfa5asi z4A4tR76PZKNnHDFpphUuZnIBuTTvgRu7//muyzGu/6pq8Y9jficDzWzn2fmEe2q 4xrzpWUOEAsOcxg9qYxyBq/rjgzSFYusxS11AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQURjBYE6LzjG+mWNsvmUDv1Uo+R5wwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvUmpCWUU2THpqRy1tV05zdm1VRHYx VW8tUjV3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcveADAN BgkqhkiG9w0BAQsFAAOCAQEAU1z4FQ8ft7K7WhjnHYrSGCOmYmSa+LEiiuibA+vH /IaS8yZPqXJj4vubvw4KL7zONljJQnHrkkwZBhlYB3vGSybesYrBT4n51etAMu1O sNzSArRH102ZMZ/YCNwjRoPGBXWhXA9V6VtjOLpD3FOfJ5G8Rq1ZDavedT30c2cf Err3s0LR0o3lbR45ZfEGb2w39jhwMUj+TBGrL8EX+d5KlyRuj2vdJf0OL7wlo/ZC TRFVb8HPpUaCbda74vkGVO+BCPTXh+4KSiYCzfuDm/v9xuQG/FUUkRfZW6sv002s v+YNY99p2h4UMOu59+MHVngYdQivRQ7dxM5IUyKRXIyuKQ== -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org