$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/SFlYl5eL1Rfex0Rb_jiWUmkqEpE.roa File: SFlYl5eL1Rfex0Rb_jiWUmkqEpE.roa (raw, json) Hash identifier: hFSnszHp3k9zWzuAbE7vyrJTwdImSOoMOTCx8UFwsJI= Subject key identifier: 48:59:58:97:97:8B:D5:17:DE:C7:44:5B:FE:38:96:52:69:2A:12:91 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E5D Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SFlYl5eL1Rfex0Rb_jiWUmkqEpE.roa Signing time: Fri 01 Sep 2023 08:49:36 +0000 ROA not before: Fri 01 Sep 2023 08:49:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 113.61.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3677 (0xe5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=48595897978BD517DEC7445BFE389652692A1291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:5e:ff:a1:5b:cb:8a:cb:87:e6:5d:1b:44: 82:67:27:bf:9f:8a:e9:ba:8b:23:3b:60:7b:78:38: db:4e:ac:78:46:0c:2d:97:c6:81:b6:83:8f:e7:39: 3a:e0:a5:68:be:5b:50:46:4b:7a:4d:f5:9b:e8:bc: 3d:e9:1a:86:5a:b1:74:4e:a4:24:2d:4a:01:f7:b9: 79:db:92:78:85:6a:54:22:1f:8d:cf:be:a9:da:30: 54:04:7a:33:d7:0c:6c:68:59:88:4c:26:0e:30:ea: 12:0d:8f:e9:e0:22:28:31:64:0a:a0:2b:9f:8e:28: db:f8:0d:07:53:31:83:b9:ab:75:05:7e:5f:8c:26: e1:cc:1c:73:a7:1c:da:ab:3e:66:18:a0:b4:17:fb: 2a:a8:f3:7a:f6:df:69:5a:2d:78:64:bf:60:f4:12: 56:14:42:cb:70:4c:b2:1d:fd:ae:00:6d:c4:ce:f1: cd:dc:7d:09:46:b4:ab:0f:ec:49:d5:bd:24:73:34: 77:2f:9d:1b:33:70:c3:77:78:dc:d9:69:00:7e:af: ac:0c:1e:6a:00:43:39:bf:73:7d:b6:4c:7e:7a:95: 76:b7:46:0e:0c:2c:91:77:90:52:0e:8d:fa:0b:f7: c9:30:6e:b7:7d:ab:38:63:95:fb:47:c6:74:74:30: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:59:58:97:97:8B:D5:17:DE:C7:44:5B:FE:38:96:52:69:2A:12:91 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SFlYl5eL1Rfex0Rb_jiWUmkqEpE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.224.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:98:06:65:44:e9:3f:94:00:96:67:5a:d2:b2:a6:db:92:41: e3:c9:dd:5a:dc:59:8e:03:09:af:c8:e1:8c:1e:c0:5b:1a:87: 99:cb:3c:e8:28:ec:23:a0:34:7f:d5:9f:8c:d1:be:e6:17:68: ff:c7:14:49:a2:49:c8:79:55:b5:7d:e1:9d:c4:23:fe:2e:43: a4:58:4d:fb:5c:b5:10:89:76:df:a6:15:34:73:68:11:51:80: 87:3e:c5:6c:f0:73:27:c5:ed:17:be:d5:26:5a:0e:9d:77:09: dd:01:9c:0b:b3:5d:bd:0b:9a:e1:d5:ec:9a:f5:11:e1:6b:53: 28:f3:de:94:6b:30:9d:e6:09:df:ec:68:3d:92:16:dc:a1:d9: 18:17:cb:e5:93:60:70:34:95:39:c4:13:23:96:04:b6:16:84: 37:69:0c:ad:f4:4a:68:7f:7b:10:18:77:0c:07:ba:c9:27:91: 48:15:0e:76:6f:64:4b:c0:55:eb:39:bc:17:c1:63:79:1f:39: 5d:1d:c9:a1:8d:2e:f7:12:e6:c0:58:ef:2a:e6:5f:0d:0c:29: e6:0c:74:05:2b:bc:9a:e3:6b:0b:89:62:4f:f5:91:3c:ab:7b: 90:bb:d8:12:ef:a5:9f:58:e7:aa:ff:04:8e:c3:6a:0a:f9:a9: d9:c6:ba:c6 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ4NTk1ODk3OTc4QkQ1 MTdERUM3NDQ1QkZFMzg5NjUyNjkyQTEyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA/17/oVvLisuH5l0bRIJnJ7+fium6iyM7YHt4ONtOrHhGDC2X xoG2g4/nOTrgpWi+W1BGS3pN9ZvovD3pGoZasXROpCQtSgH3uXnbkniFalQiH43P vqnaMFQEejPXDGxoWYhMJg4w6hINj+ngIigxZAqgK5+OKNv4DQdTMYO5q3UFfl+M JuHMHHOnHNqrPmYYoLQX+yqo83r232laLXhkv2D0ElYUQstwTLId/a4AbcTO8c3c fQlGtKsP7EnVvSRzNHcvnRszcMN3eNzZaQB+r6wMHmoAQzm/c322TH56lXa3Rg4M LJF3kFIOjfoL98kwbrd9qzhjlftHxnR0MCpNAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUSFlYl5eL1Rfex0Rb/jiWUmkqEpEwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvU0ZsWWw1ZUwxUmZleDBSYl9qaVdV bWtxRXBFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHE94DAN BgkqhkiG9w0BAQsFAAOCAQEAC5gGZUTpP5QAlmda0rKm25JB48ndWtxZjgMJr8jh jB7AWxqHmcs86CjsI6A0f9WfjNG+5hdo/8cUSaJJyHlVtX3hncQj/i5DpFhN+1y1 EIl236YVNHNoEVGAhz7FbPBzJ8XtF77VJloOnXcJ3QGcC7NdvQua4dXsmvUR4WtT KPPelGswneYJ3+xoPZIW3KHZGBfL5ZNgcDSVOcQTI5YEthaEN2kMrfRKaH97EBh3 DAe6ySeRSBUOdm9kS8BV6zm8F8FjeR85XR3JoY0u9xLmwFjvKuZfDQwp5gx0BSu8 muNrC4liT/WRPKt7kLvYEu+ln1jnqv8EjsNqCvmp2ca6xg== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org