$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/WcscaxcUIumlJ8FdFa-jGaJkvmc.roa File: WcscaxcUIumlJ8FdFa-jGaJkvmc.roa (raw, json) Hash identifier: DWq27z5YGsfYp65PKlkEig3P9H7L9DfrjgYuFQxT+J4= Subject key identifier: 59:CB:1C:6B:17:14:22:E9:A5:27:C1:5D:15:AF:A3:19:A2:64:BE:67 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1014 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WcscaxcUIumlJ8FdFa-jGaJkvmc.roa Signing time: Mon 26 Aug 2024 05:13:21 +0000 ROA not before: Mon 26 Aug 2024 05:13:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 121.254.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4116 (0x1014) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=59CB1C6B171422E9A527C15D15AFA319A264BE67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:5a:a1:23:80:6e:1d:8c:05:68:fe:f2:eb: 4c:02:dc:a1:a1:3b:3c:44:0c:24:15:39:c1:a8:49: 7b:ae:d1:fa:ec:ca:a6:6f:81:0f:9d:04:9a:a6:2c: 36:af:ca:c9:db:86:21:09:47:66:63:eb:95:f0:6a: 88:43:f7:db:7d:17:01:45:e1:65:be:45:90:89:ce: 4f:b9:99:9f:b3:9c:a2:34:a4:94:3b:8c:b6:1f:18: d6:b2:90:cc:a7:6e:c2:87:74:26:f9:37:41:92:fb: 6f:0e:e2:b2:d6:4d:54:dc:e9:dd:a2:28:61:7a:d6: 1f:26:6b:67:35:3e:27:d1:b5:7b:15:3a:f8:cf:7c: 44:28:c3:e5:cf:e5:5c:3b:81:a2:94:ce:01:6b:7c: d2:7d:9c:89:ee:2d:7f:18:03:87:f8:fd:bf:a2:12: 9f:9e:cd:e6:27:74:e4:11:d1:fe:27:10:83:16:f7: 3c:66:04:8d:2d:aa:69:ae:4b:a6:6c:07:0f:89:e1: 95:05:dc:a1:43:7f:06:2a:7d:f4:98:43:be:39:c1: 32:65:ea:c2:b3:70:d0:2c:f6:87:e8:21:b8:48:f2: 06:01:56:d3:4e:91:5d:e7:36:84:39:90:d4:7e:80: 0d:01:1b:ad:05:88:ab:6f:aa:b8:6b:64:43:fc:b1: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CB:1C:6B:17:14:22:E9:A5:27:C1:5D:15:AF:A3:19:A2:64:BE:67 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WcscaxcUIumlJ8FdFa-jGaJkvmc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.64.0/18 Signature Algorithm: sha256WithRSAEncryption 85:89:8e:20:82:9d:9a:55:98:8f:42:c0:3a:20:4a:65:16:fb: 5d:03:02:97:a7:32:6e:00:19:77:89:0d:c8:21:58:bc:32:27: 01:dd:a7:90:3c:06:d3:1f:ca:42:30:df:56:a3:f8:a6:ba:6e: cc:29:ad:42:d6:17:1b:ce:30:2f:b3:4d:aa:98:5d:a3:ac:d0: d3:a6:7c:97:fb:d5:8f:95:0d:f4:43:90:b0:4b:29:4b:6b:3a: 89:00:dd:9d:9b:9e:32:6d:28:19:db:42:56:33:59:26:8e:28: 82:40:8e:e8:56:af:df:3b:7f:34:6c:d2:22:1b:3e:a4:32:97: bc:d6:33:11:0c:b4:f7:82:28:af:08:c8:cd:ae:08:61:df:57: c5:a1:aa:dc:d1:fa:db:ef:dc:f0:95:e8:29:96:b3:42:16:8c: 93:0e:e5:dc:b6:4d:4c:25:68:77:fc:fa:36:2e:6f:b8:93:82: 76:04:23:2d:2a:79:16:1c:4f:fc:aa:97:64:6a:01:b4:db:ba: 53:c7:b9:9c:7b:ca:a8:0e:02:21:db:95:bb:7a:04:d2:6b:05: db:1e:5c:37:b5:b5:b1:e4:14:ef:6e:fd:f5:50:f7:44:23:78: 8c:75:62:b0:d3:b3:0c:d3:0c:13:78:c0:83:77:fd:87:a8:9b: 29:48:a3:75 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU5Q0IxQzZCMTcxNDIy RTlBNTI3QzE1RDE1QUZBMzE5QTI2NEJFNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGs1qhI4BuHYwFaP7y60wC3KGhOzxEDCQVOcGoSXuu0frsyqZv gQ+dBJqmLDavysnbhiEJR2Zj65XwaohD99t9FwFF4WW+RZCJzk+5mZ+znKI0pJQ7 jLYfGNaykMynbsKHdCb5N0GS+28O4rLWTVTc6d2iKGF61h8ma2c1PifRtXsVOvjP fEQow+XP5Vw7gaKUzgFrfNJ9nInuLX8YA4f4/b+iEp+ezeYndOQR0f4nEIMW9zxm BI0tqmmuS6ZsBw+J4ZUF3KFDfwYqffSYQ745wTJl6sKzcNAs9ofoIbhI8gYBVtNO kV3nNoQ5kNR+gA0BG60FiKtvqrhrZEP8sf9VAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUWcscaxcUIumlJ8FdFa+jGaJkvmcwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvV2NzY2F4Y1VJdW1sSjhGZEZhLWpH YUprdm1jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnn+QDAN BgkqhkiG9w0BAQsFAAOCAQEAhYmOIIKdmlWYj0LAOiBKZRb7XQMCl6cybgAZd4kN yCFYvDInAd2nkDwG0x/KQjDfVqP4prpuzCmtQtYXG84wL7NNqphdo6zQ06Z8l/vV j5UN9EOQsEspS2s6iQDdnZueMm0oGdtCVjNZJo4ogkCO6Fav3zt/NGzSIhs+pDKX vNYzEQy094IorwjIza4IYd9XxaGq3NH62+/c8JXoKZazQhaMkw7l3LZNTCVod/z6 Ni5vuJOCdgQjLSp5FhxP/KqXZGoBtNu6U8e5nHvKqA4CIduVu3oE0msF2x5cN7W1 seQU72799VD3RCN4jHVisNOzDNMME3jAg3f9h6ibKUijdQ== -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:40 2024 by rpki-client on console-fra.rpki-client.org