$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/cLZWxaLpyMqrXs0cMb3i2jfJZCg.roa File: cLZWxaLpyMqrXs0cMb3i2jfJZCg.roa (raw, json) Hash identifier: paEGvf+ZUvJ/PVU0GTulaAT0FZ09trozuEoR8jQXb6w= Subject key identifier: 70:B6:56:C5:A2:E9:C8:CA:AB:5E:CD:1C:31:BD:E2:DA:37:C9:64:28 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E2E Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/cLZWxaLpyMqrXs0cMb3i2jfJZCg.roa Signing time: Fri 01 Sep 2023 08:49:23 +0000 ROA not before: Fri 01 Sep 2023 08:49:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 182.155.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3630 (0xe2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=70B656C5A2E9C8CAAB5ECD1C31BDE2DA37C96428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:bd:42:44:be:94:f4:3a:bf:c2:30:6b:93: 89:f6:53:9b:6b:25:d1:f8:9d:db:15:cd:81:04:fd: 4f:fb:f8:16:f4:09:09:e5:e1:bf:17:fe:b6:37:85: ac:e4:b6:c9:fc:58:f7:0e:e0:8d:85:31:8d:4b:35: ed:50:25:3d:13:2d:04:e7:8c:a6:0a:78:9c:d9:17: a4:9e:47:61:0e:d0:d6:04:df:c0:74:5d:f6:03:e5: 6b:a9:83:7b:1f:cd:dd:d9:e8:cc:2b:6f:12:2d:eb: e6:ba:25:82:04:db:f3:44:85:8f:30:d0:60:30:bb: eb:0f:8d:89:e7:e4:0c:45:e3:17:7c:97:50:98:7c: 70:76:ed:7d:d8:6f:ec:89:fb:c8:72:ee:a9:8e:14: a6:10:e1:98:b7:6a:a5:f4:3d:d5:18:13:7a:fd:c8: 4e:b3:d5:9d:42:43:0c:b9:c4:4a:88:85:b1:d7:75: a8:f6:b4:6a:3c:ac:a0:b6:45:22:94:0f:5e:6d:4a: 38:59:70:96:f9:5d:81:1b:48:17:13:df:d9:44:87: 51:5c:c0:0a:f3:5e:a1:27:f7:6b:db:13:29:40:43: 53:36:0e:9f:63:86:3c:2a:32:c6:fd:cb:63:d5:ec: ab:2e:87:fb:68:7e:18:d2:1c:01:dd:3d:c8:de:fe: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B6:56:C5:A2:E9:C8:CA:AB:5E:CD:1C:31:BD:E2:DA:37:C9:64:28 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/cLZWxaLpyMqrXs0cMb3i2jfJZCg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.155.128.0/17 Signature Algorithm: sha256WithRSAEncryption 22:b5:78:87:d9:63:37:e1:6a:72:03:0b:19:4b:f1:f4:e0:a3: 59:99:f9:ae:b6:85:4b:b3:10:37:36:53:b2:60:03:8e:cd:ea: 34:ae:16:26:3a:27:bb:ff:14:45:5e:e5:b7:f8:91:a7:59:58: 42:cc:0d:6d:f2:5f:3f:e3:cd:d4:2b:93:38:1d:cc:90:85:31: 65:f4:88:8d:fd:a9:76:63:32:73:6d:c8:df:c5:c6:56:f5:5f: a6:fa:45:32:e0:8c:2f:1d:f3:7b:c9:a4:71:60:38:ba:10:5f: 87:c3:de:87:22:85:5e:13:f1:bd:4d:9e:6c:66:07:0e:d0:64: d3:de:c0:5b:c9:ba:83:68:43:6f:0e:bb:f7:7e:01:16:7e:e2: 74:9b:43:0d:62:8e:36:9d:17:a8:4a:18:a0:9f:1b:fc:1d:7e: 71:dc:bd:de:4a:3e:a3:b7:9b:52:69:b8:89:d5:be:74:cf:d5: b5:03:d5:d0:97:8b:4f:16:2a:df:c4:29:3a:b3:fd:97:d3:6c: 73:60:4e:cd:8e:44:c6:9c:8d:2d:6a:68:a6:f0:13:52:f1:36: a3:72:f7:54:3b:0a:90:1a:ff:8d:79:7b:d6:c9:09:22:77:db: 6b:d1:0a:17:72:11:a2:e4:52:fc:d2:18:b8:23:30:dc:42:09: 48:22:bd:9c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcwQjY1NkM1QTJFOUM4 Q0FBQjVFQ0QxQzMxQkRFMkRBMzdDOTY0MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR0r1CRL6U9Dq/wjBrk4n2U5trJdH4ndsVzYEE/U/7+Bb0CQnl 4b8X/rY3hazktsn8WPcO4I2FMY1LNe1QJT0TLQTnjKYKeJzZF6SeR2EO0NYE38B0 XfYD5Wupg3sfzd3Z6MwrbxIt6+a6JYIE2/NEhY8w0GAwu+sPjYnn5AxF4xd8l1CY fHB27X3Yb+yJ+8hy7qmOFKYQ4Zi3aqX0PdUYE3r9yE6z1Z1CQwy5xEqIhbHXdaj2 tGo8rKC2RSKUD15tSjhZcJb5XYEbSBcT39lEh1FcwArzXqEn92vbEylAQ1M2Dp9j hjwqMsb9y2PV7Ksuh/tofhjSHAHdPcje/ljnAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUcLZWxaLpyMqrXs0cMb3i2jfJZCgwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvY0xaV3hhTHB5TXFyWHMwY01iM2ky amZKWkNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7abgDAN BgkqhkiG9w0BAQsFAAOCAQEAIrV4h9ljN+FqcgMLGUvx9OCjWZn5rraFS7MQNzZT smADjs3qNK4WJjonu/8URV7lt/iRp1lYQswNbfJfP+PN1CuTOB3MkIUxZfSIjf2p dmMyc23I38XGVvVfpvpFMuCMLx3ze8mkcWA4uhBfh8PehyKFXhPxvU2ebGYHDtBk 097AW8m6g2hDbw67934BFn7idJtDDWKONp0XqEoYoJ8b/B1+cdy93ko+o7ebUmm4 idW+dM/VtQPV0JeLTxYq38QpOrP9l9Nsc2BOzY5ExpyNLWpopvATUvE2o3L3VDsK kBr/jXl71skJInfba9EKF3IRouRS/NIYuCMw3EIJSCK9nA== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org