$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/gtKPIbgE6v06hCYAlB43SQBsi7A.roa File: gtKPIbgE6v06hCYAlB43SQBsi7A.roa (raw, json) Hash identifier: Z6FqqOENAhkeK6JCcV9DwLHQxC69Sz41d+8AacyUomU= Subject key identifier: 82:D2:8F:21:B8:04:EA:FD:3A:84:26:00:94:1E:37:49:00:6C:8B:B0 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 100F Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gtKPIbgE6v06hCYAlB43SQBsi7A.roa Signing time: Mon 26 Aug 2024 05:13:20 +0000 ROA not before: Mon 26 Aug 2024 05:13:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.222.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4111 (0x100f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=82D28F21B804EAFD3A842600941E3749006C8BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:64:62:00:46:17:fa:e1:dd:85:5f:14:f8:b5: b3:af:74:9a:96:2b:fd:e5:5c:74:42:bf:fd:b5:41: dc:d0:a3:e4:9a:c4:8c:e7:4b:64:ac:46:d3:3c:60: 89:aa:13:aa:ae:32:43:81:95:bc:f9:9a:78:dc:97: f6:fd:18:26:d9:aa:73:53:eb:23:77:bc:f9:bb:d3: 97:ed:76:24:3a:06:b5:24:05:3a:d5:c2:85:57:d1: 3d:9d:2d:4e:03:94:f8:ab:29:d2:01:5c:38:78:79: a1:96:8c:24:b0:85:2e:02:20:a1:d0:ad:d0:0c:1c: fc:a0:8e:35:cb:a0:d8:2a:0e:3a:cd:63:50:f8:42: 40:ae:d1:04:8f:81:eb:b2:64:f6:f2:8b:f4:35:26: 5c:96:61:50:03:a3:86:06:75:c7:9b:1b:97:b9:ae: 64:ac:a6:e5:4a:1a:08:85:bb:af:0c:9d:47:98:5c: 08:18:7f:a6:9e:9b:6d:66:34:59:f7:d1:5a:68:fe: b7:60:b5:16:88:41:2e:d3:cb:8a:c6:38:57:71:a1: a0:4c:10:82:25:73:99:bf:4b:1d:49:ca:b0:b9:35: 8a:9f:c3:66:0f:a1:66:2c:24:0a:56:72:dd:41:35: 06:54:e7:fc:69:c9:41:8f:0a:fc:e7:ec:f7:1d:96: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D2:8F:21:B8:04:EA:FD:3A:84:26:00:94:1E:37:49:00:6C:8B:B0 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gtKPIbgE6v06hCYAlB43SQBsi7A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.16.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:ef:f1:60:58:e6:08:7c:e3:7f:6a:64:b4:6b:fd:95:9a:25: ae:92:d4:4a:86:20:ca:34:0c:50:ff:cb:b0:a5:29:ad:b8:e4: 95:fb:1c:70:e5:91:e4:e9:40:f2:ea:34:9f:f8:a6:b9:b4:82: 2d:88:1d:ae:0d:2e:7f:49:ad:d0:63:9e:30:04:0e:7c:61:d9: 42:fd:ff:59:d4:73:56:af:d0:ea:5a:f3:44:1c:56:f8:c9:83: eb:46:6b:88:2e:21:c7:02:d4:85:9e:41:34:eb:03:65:34:b9: 34:e4:80:65:4e:ea:81:e5:5e:89:b8:c3:98:01:5f:fe:ae:4a: 73:fd:cd:f7:78:c6:ec:c5:96:cc:fc:f3:4f:8b:fa:b5:39:7c: 79:a3:2f:64:ad:71:37:d5:02:8e:5f:b2:b0:33:33:4f:7f:ba: a5:54:19:4d:9e:c1:f2:ea:64:aa:96:b2:e0:23:ef:e9:09:cd: 57:a3:d4:38:54:8f:4a:32:67:5f:88:b3:f9:90:d0:5a:9e:32: 58:4c:90:46:e6:a6:41:bd:2f:c4:95:d8:f8:c1:73:b2:c6:b6: 9a:fc:d5:a0:e5:f1:d9:96:09:a7:56:66:6e:51:22:59:f4:41: bb:14:be:1b:59:93:01:c3:5b:17:3d:d9:0d:75:52:da:eb:53: 0b:99:56:b6 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEA8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgyRDI4RjIxQjgwNEVB RkQzQTg0MjYwMDk0MUUzNzQ5MDA2QzhCQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsZGIARhf64d2FXxT4tbOvdJqWK/3lXHRCv/21QdzQo+SaxIzn S2SsRtM8YImqE6quMkOBlbz5mnjcl/b9GCbZqnNT6yN3vPm705ftdiQ6BrUkBTrV woVX0T2dLU4DlPirKdIBXDh4eaGWjCSwhS4CIKHQrdAMHPygjjXLoNgqDjrNY1D4 QkCu0QSPgeuyZPbyi/Q1JlyWYVADo4YGdcebG5e5rmSspuVKGgiFu68MnUeYXAgY f6aem21mNFn30Vpo/rdgtRaIQS7Ty4rGOFdxoaBMEIIlc5m/Sx1JyrC5NYqfw2YP oWYsJApWct1BNQZU5/xpyUGPCvzn7PcdllUrAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUgtKPIbgE6v06hCYAlB43SQBsi7AwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvZ3RLUEliZ0U2djA2aENZQWxCNDNT UUJzaTdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveEDAN BgkqhkiG9w0BAQsFAAOCAQEAje/xYFjmCHzjf2pktGv9lZolrpLUSoYgyjQMUP/L sKUprbjklfsccOWR5OlA8uo0n/imubSCLYgdrg0uf0mt0GOeMAQOfGHZQv3/WdRz Vq/Q6lrzRBxW+MmD60ZriC4hxwLUhZ5BNOsDZTS5NOSAZU7qgeVeibjDmAFf/q5K c/3N93jG7MWWzPzzT4v6tTl8eaMvZK1xN9UCjl+ysDMzT3+6pVQZTZ7B8upkqpay 4CPv6QnNV6PUOFSPSjJnX4iz+ZDQWp4yWEyQRuamQb0vxJXY+MFzssa2mvzVoOXx 2ZYJp1ZmblEiWfRBuxS+G1mTAcNbFz3ZDXVS2utTC5lWtg== -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org