$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/gDX_bn1Ekyz7y9S9x9NkxsphGNc.roa File: gDX_bn1Ekyz7y9S9x9NkxsphGNc.roa (raw, json) Hash identifier: nQ+cEG0pb6BwQEX73LXIG4erjXsp9/X7nvqt2iYk1mk= Subject key identifier: 80:35:FF:6E:7D:44:93:2C:FB:CB:D4:BD:C7:D3:64:C6:CA:61:18:D7 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 101A Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gDX_bn1Ekyz7y9S9x9NkxsphGNc.roa Signing time: Mon 26 Aug 2024 05:13:23 +0000 ROA not before: Mon 26 Aug 2024 05:13:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 119.15.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4122 (0x101a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8035FF6E7D44932CFBCBD4BDC7D364C6CA6118D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:8b:ef:de:52:75:41:b7:ad:bf:50:e2:bd: 7c:8e:96:51:e2:9f:9e:95:f1:f2:c2:0e:20:4a:e4: cf:1e:4d:0e:26:d6:c5:1f:38:80:44:ad:21:8d:3e: 0b:7e:8f:11:16:e3:1f:af:33:ef:f5:61:1c:a2:46: ad:d6:a4:f1:34:8f:1b:a7:a2:28:5e:cc:90:be:36: 5a:1d:42:fa:19:0c:96:20:d3:2b:aa:4e:0c:46:e2: e5:50:4e:6d:c9:78:88:3c:87:9b:35:35:46:da:c0: ea:fb:e0:be:5b:98:f5:fa:09:77:7b:d8:2c:f7:05: d0:fe:03:ee:02:09:8d:b1:66:c0:a0:94:05:73:df: 92:a4:42:68:90:f3:ea:78:4c:fe:a4:cf:67:c1:13: 3a:fc:3b:a8:4e:19:aa:8e:ef:30:d5:22:4f:71:48: 4e:79:10:ad:3a:f6:23:81:67:e9:d2:8d:b1:4e:38: 4a:b0:0d:b5:ba:46:f1:43:9d:5f:1c:68:bf:f8:7a: 89:2a:98:4b:c8:cf:e2:bc:2a:2c:e7:7c:bb:4e:cb: 41:f2:40:d4:57:92:90:f7:cd:02:49:2b:e5:f7:b2: 59:62:db:82:b6:cf:31:29:b9:ce:9b:50:aa:a8:59: c4:f5:fe:f5:ff:26:bf:b3:42:95:2e:7c:b5:5c:4f: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:35:FF:6E:7D:44:93:2C:FB:CB:D4:BD:C7:D3:64:C6:CA:61:18:D7 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gDX_bn1Ekyz7y9S9x9NkxsphGNc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.15.216.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:33:40:40:e4:51:8a:2a:50:e5:33:74:69:de:03:6b:94:ad: 86:65:7e:9e:b5:74:c9:89:db:b5:26:ac:56:b5:2b:04:30:43: 55:ec:7f:a4:83:60:f4:7a:67:2f:5d:79:bf:8e:a1:19:93:82: 31:d1:8b:c8:e5:87:8f:ac:da:40:44:fb:87:89:00:96:b7:5e: 4b:a7:57:e4:05:5c:4e:a9:ae:b7:80:68:a8:fa:80:15:ca:fb: 43:37:88:42:ab:b3:74:b7:e9:b2:c1:17:8a:ba:a1:c5:d4:67: 94:77:20:1d:b4:41:f4:b1:ee:29:57:04:90:4c:90:b8:fa:6c: bf:17:78:c8:f7:0e:58:7d:de:b7:61:56:40:e0:33:a7:a0:31: b2:2d:e6:d7:13:3e:b0:5e:af:63:90:0c:e6:f0:5d:bb:f6:33: 76:f7:be:7e:30:5a:50:32:18:9c:81:1e:5b:67:7f:7b:f3:f6: ee:d8:93:03:5e:ab:3e:56:a6:ac:4e:e0:c6:c2:0a:a8:d9:91: 15:d4:72:f3:07:e7:34:08:d5:30:a3:1c:c7:62:6f:b9:1f:d2: f1:64:11:e1:77:d8:de:d7:39:1a:6c:c2:c5:d2:df:bd:ef:df: 4e:7a:8b:9f:39:94:65:91:47:9e:c6:a6:51:eb:54:9b:c4:2a: 37:8a:73:1d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwMzVGRjZFN0Q0NDkz MkNGQkNCRDRCREM3RDM2NEM2Q0E2MTE4RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZGIvv3lJ1Qbetv1DivXyOllHin56V8fLCDiBK5M8eTQ4m1sUf OIBErSGNPgt+jxEW4x+vM+/1YRyiRq3WpPE0jxunoihezJC+NlodQvoZDJYg0yuq TgxG4uVQTm3JeIg8h5s1NUbawOr74L5bmPX6CXd72Cz3BdD+A+4CCY2xZsCglAVz 35KkQmiQ8+p4TP6kz2fBEzr8O6hOGaqO7zDVIk9xSE55EK069iOBZ+nSjbFOOEqw DbW6RvFDnV8caL/4eokqmEvIz+K8KiznfLtOy0HyQNRXkpD3zQJJK+X3slli24K2 zzEpuc6bUKqoWcT1/vX/Jr+zQpUufLVcT9sdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUgDX/bn1Ekyz7y9S9x9NkxsphGNcwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvZ0RYX2JuMUVreXo3eTlTOXg5Tmt4 c3BoR05jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cP2DAN BgkqhkiG9w0BAQsFAAOCAQEAWjNAQORRiipQ5TN0ad4Da5SthmV+nrV0yYnbtSas VrUrBDBDVex/pINg9HpnL115v46hGZOCMdGLyOWHj6zaQET7h4kAlrdeS6dX5AVc Tqmut4BoqPqAFcr7QzeIQquzdLfpssEXirqhxdRnlHcgHbRB9LHuKVcEkEyQuPps vxd4yPcOWH3et2FWQOAzp6Axsi3m1xM+sF6vY5AM5vBdu/Yzdve+fjBaUDIYnIEe W2d/e/P27tiTA16rPlamrE7gxsIKqNmRFdRy8wfnNAjVMKMcx2JvuR/S8WQR4XfY 3tc5GmzCxdLfve/fTnqLnzmUZZFHnsamUetUm8QqN4pzHQ== -----END CERTIFICATE-----Generated at Sat Sep 21 05:09:38 2024 by rpki-client on console-ams.rpki-client.org