$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/THqwqfQK4BUbPGpfdtAuZWXwkVM.roa File: THqwqfQK4BUbPGpfdtAuZWXwkVM.roa (raw, json) Hash identifier: Wl9LVwxEmCQ3k7Z+5P6/OV0OJjrVSedlYAXv12fezC8= Subject key identifier: 4C:7A:B0:A9:F4:0A:E0:15:1B:3C:6A:5F:76:D0:2E:65:65:F0:91:53 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E56 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/THqwqfQK4BUbPGpfdtAuZWXwkVM.roa Signing time: Fri 01 Sep 2023 08:49:34 +0000 ROA not before: Fri 01 Sep 2023 08:49:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 182.155.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3670 (0xe56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4C7AB0A9F40AE0151B3C6A5F76D02E6565F09153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4c:39:38:e0:88:21:4c:1b:6e:bd:de:85:22: fb:7b:d3:5a:7c:d5:0a:f5:f1:81:b0:87:81:0e:33: f3:23:fb:62:d9:de:c2:bc:d9:00:d2:b2:39:d3:11: 71:aa:a5:34:43:e3:ea:10:08:c8:88:23:0a:4a:02: 9d:a8:a1:32:2a:1a:23:b3:b3:79:54:bf:1d:32:5c: c2:38:f0:c9:c0:bb:b1:d4:32:32:8e:fb:19:39:73: 98:55:8c:51:67:b8:01:32:c2:09:e2:e5:9e:a7:de: 34:a0:70:42:b5:60:e1:7b:6f:61:82:6f:1f:5e:15: 1d:e9:5e:36:b5:04:47:fd:2f:73:56:48:f4:e2:07: a1:29:38:a3:cd:47:55:31:13:2e:7a:38:c1:c3:a7: 7c:58:8c:a6:f2:e6:a4:89:3f:82:91:69:b4:25:d9: 69:08:6a:3b:b5:a2:7d:cb:b5:d3:1c:83:bc:ce:15: 90:74:eb:11:09:59:aa:85:cc:d0:70:43:7e:aa:d4: 34:4c:ed:83:50:4f:83:e8:65:50:82:ec:03:c9:ce: b0:23:52:fd:e4:b5:60:af:b9:1c:41:81:da:79:53: 85:69:67:93:10:c6:78:e1:30:62:e6:19:31:f1:5c: 4d:82:8a:dc:c9:3f:e8:8c:6f:6e:6b:79:5f:70:33: a5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7A:B0:A9:F4:0A:E0:15:1B:3C:6A:5F:76:D0:2E:65:65:F0:91:53 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/THqwqfQK4BUbPGpfdtAuZWXwkVM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.155.192.0/19 Signature Algorithm: sha256WithRSAEncryption 42:64:50:46:ca:39:d2:90:0c:07:ed:17:52:3d:9b:a2:2d:68: 76:da:c2:5c:8c:f3:96:9d:c9:d1:d0:44:51:ad:df:bd:42:4b: 02:73:f7:c1:e3:1e:06:37:41:ab:9b:dd:f0:d3:31:d4:1c:22: a7:e3:93:f0:7b:98:4a:6d:c9:31:44:68:06:39:10:75:f8:15: d2:de:f9:9b:b8:5c:a3:d5:51:cf:c7:62:d2:da:f3:ab:65:25: 33:a9:f2:ff:2f:b0:ac:85:fa:1d:bd:4e:b6:27:6a:38:45:b9: bf:13:ac:49:01:fe:95:30:8d:d5:24:4f:e9:44:9c:c5:dd:c1: 23:2d:36:e3:f9:ec:29:77:a2:d9:a1:b5:4b:82:16:a2:98:c8: 00:36:38:f1:0e:fa:85:5e:5c:f9:26:ba:08:fd:98:7f:ec:f1: 43:fe:a7:43:36:7d:65:d5:76:bd:f6:e9:b7:7b:d7:7b:c4:af: e3:a2:a4:c7:54:3a:a6:34:52:36:54:34:c4:ca:f5:76:12:ee: 71:93:e8:61:dd:ea:53:95:59:5a:4e:0f:02:86:a9:25:a3:a3: 16:0a:3b:99:a0:b6:10:dd:46:91:9e:d3:27:36:0f:cd:80:f3: ad:5f:44:1e:7a:9b:fa:71:a4:30:14:e6:79:53:9b:cb:d8:4a: 1a:38:12:0b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRDN0FCMEE5RjQwQUUw MTUxQjNDNkE1Rjc2RDAyRTY1NjVGMDkxNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlTDk44IghTBtuvd6FIvt701p81Qr18YGwh4EOM/Mj+2LZ3sK8 2QDSsjnTEXGqpTRD4+oQCMiIIwpKAp2ooTIqGiOzs3lUvx0yXMI48MnAu7HUMjKO +xk5c5hVjFFnuAEywgni5Z6n3jSgcEK1YOF7b2GCbx9eFR3pXja1BEf9L3NWSPTi B6EpOKPNR1UxEy56OMHDp3xYjKby5qSJP4KRabQl2WkIaju1on3LtdMcg7zOFZB0 6xEJWaqFzNBwQ36q1DRM7YNQT4PoZVCC7APJzrAjUv3ktWCvuRxBgdp5U4VpZ5MQ xnjhMGLmGTHxXE2CitzJP+iMb25reV9wM6WzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUTHqwqfQK4BUbPGpfdtAuZWXwkVMwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvVEhxd3FmUUs0QlViUEdwZmR0QXVa V1h3a1ZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbabwDAN BgkqhkiG9w0BAQsFAAOCAQEAQmRQRso50pAMB+0XUj2boi1odtrCXIzzlp3J0dBE Ua3fvUJLAnP3weMeBjdBq5vd8NMx1Bwip+OT8HuYSm3JMURoBjkQdfgV0t75m7hc o9VRz8di0trzq2UlM6ny/y+wrIX6Hb1OtidqOEW5vxOsSQH+lTCN1SRP6UScxd3B Iy024/nsKXei2aG1S4IWopjIADY48Q76hV5c+Sa6CP2Yf+zxQ/6nQzZ9ZdV2vfbp t3vXe8Sv46Kkx1Q6pjRSNlQ0xMr1dhLucZPoYd3qU5VZWk4PAoapJaOjFgo7maC2 EN1GkZ7TJzYPzYDzrV9EHnqb+nGkMBTmeVOby9hKGjgSCw== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org