$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/lGstxepd74htnY7wkbQm4v7kzhY.roa File: lGstxepd74htnY7wkbQm4v7kzhY.roa (raw, json) Hash identifier: iNNhwdZja9WHdDuAo3cP2P++CZmhDmnnLuYymGhULL8= Subject key identifier: 94:6B:2D:C5:EA:5D:EF:88:6D:9D:8E:F0:91:B4:26:E2:FE:E4:CE:16 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E3A Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lGstxepd74htnY7wkbQm4v7kzhY.roa Signing time: Fri 01 Sep 2023 08:49:26 +0000 ROA not before: Fri 01 Sep 2023 08:49:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 203.222.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3642 (0xe3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=946B2DC5EA5DEF886D9D8EF091B426E2FEE4CE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3f:58:c5:ae:15:7d:f5:6b:88:2a:8c:ab:a9: b7:cf:00:be:69:43:71:21:6f:f5:d5:1c:c9:f4:f6: 91:bb:cb:15:b3:e0:e8:db:cc:5c:30:fa:3f:25:58: ad:90:3f:10:b3:93:35:25:44:2d:fd:13:6c:4e:41: e5:4c:e1:2a:a2:d5:fe:dc:95:79:b9:0d:db:09:03: 56:8c:0d:c8:7d:74:91:3f:31:ef:97:cd:c4:18:4f: bc:6d:87:24:82:6b:ab:f4:7b:d1:7d:27:72:b1:28: d5:6c:f7:89:c7:3e:c0:af:3a:53:91:27:9f:18:59: 87:cf:8f:7a:74:01:0b:98:6d:90:65:4b:e9:2c:54: f0:a5:52:7d:bd:28:0a:25:80:a9:df:19:1f:9b:f1: ab:c5:33:6e:03:32:3b:a9:78:81:c8:21:c4:1b:4a: 6a:a0:02:a4:da:db:b2:b5:ad:4c:1f:38:a5:b9:61: c4:4c:08:b4:4d:3e:d1:54:65:e0:5a:52:b5:26:9f: cc:63:f4:31:68:e2:a6:06:5e:e2:a8:ef:7c:c8:66: 60:54:cd:a9:b1:03:93:f9:d8:c4:60:12:81:5d:d2: 31:3f:7c:df:f3:8c:1c:bb:ee:87:06:2b:d4:83:49: 6a:3a:6c:30:97:8e:d6:8a:4c:e8:05:79:87:2e:24: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6B:2D:C5:EA:5D:EF:88:6D:9D:8E:F0:91:B4:26:E2:FE:E4:CE:16 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lGstxepd74htnY7wkbQm4v7kzhY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.8.0/21 Signature Algorithm: sha256WithRSAEncryption 15:22:0f:d0:b8:fa:67:15:ff:06:8e:99:03:ac:30:4b:95:14: d8:2b:ce:38:74:29:10:7a:91:c6:c5:b2:a0:e7:ee:3b:cc:52: 09:5c:e4:0a:db:fb:7e:8a:6d:35:36:64:8f:4f:5a:47:02:2e: 0b:d9:cb:a4:c8:8b:35:3d:bc:25:be:d6:97:12:93:d5:38:c5: 09:d0:67:47:23:6f:c7:66:12:e5:90:9b:76:94:80:ac:fa:3c: c4:86:35:08:99:c2:4d:42:05:8b:dd:bb:e3:54:3d:e2:34:68: c3:0d:07:b2:3d:50:da:a4:cb:d1:fa:11:dd:3a:fb:b1:08:68: 06:9d:d2:fb:23:76:cc:91:48:37:bd:8a:79:6a:66:95:3f:8c: 7b:ec:7e:16:eb:34:47:d1:6f:2f:68:d5:87:1d:f4:09:b5:ab: 04:ce:cd:a6:8e:19:b9:41:58:af:65:7b:ac:ef:2f:a2:41:dd: 23:06:5b:d3:6d:d7:ea:e9:c2:94:7d:7a:b8:a5:79:39:c8:cc: 9f:28:dd:62:d3:33:a2:8d:9b:c7:db:b6:fe:3f:2f:f8:58:bc: 0a:54:fe:63:2d:3c:bc:a5:0d:fe:bf:91:11:68:f1:c8:20:b4: c6:ec:c5:ab:fa:c1:c5:19:5d:d1:3b:f4:1f:b8:32:95:fd:fa: b7:fb:bd:3e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk0NkIyREM1RUE1REVG ODg2RDlEOEVGMDkxQjQyNkUyRkVFNENFMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtP1jFrhV99WuIKoyrqbfPAL5pQ3Ehb/XVHMn09pG7yxWz4Ojb zFww+j8lWK2QPxCzkzUlRC39E2xOQeVM4Sqi1f7clXm5DdsJA1aMDch9dJE/Me+X zcQYT7xthySCa6v0e9F9J3KxKNVs94nHPsCvOlORJ58YWYfPj3p0AQuYbZBlS+ks VPClUn29KAolgKnfGR+b8avFM24DMjupeIHIIcQbSmqgAqTa27K1rUwfOKW5YcRM CLRNPtFUZeBaUrUmn8xj9DFo4qYGXuKo73zIZmBUzamxA5P52MRgEoFd0jE/fN/z jBy77ocGK9SDSWo6bDCXjtaKTOgFeYcuJKQxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUlGstxepd74htnY7wkbQm4v7kzhYwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbEdzdHhlcGQ3NGh0blk3d2tiUW00 djdremhZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8veCDAN BgkqhkiG9w0BAQsFAAOCAQEAFSIP0Lj6ZxX/Bo6ZA6wwS5UU2CvOOHQpEHqRxsWy oOfuO8xSCVzkCtv7foptNTZkj09aRwIuC9nLpMiLNT28Jb7WlxKT1TjFCdBnRyNv x2YS5ZCbdpSArPo8xIY1CJnCTUIFi92741Q94jRoww0Hsj1Q2qTL0foR3Tr7sQho Bp3S+yN2zJFIN72KeWpmlT+Me+x+Fus0R9FvL2jVhx30CbWrBM7Npo4ZuUFYr2V7 rO8vokHdIwZb023X6unClH16uKV5OcjMnyjdYtMzoo2bx9u2/j8v+Fi8ClT+Yy08 vKUN/r+REWjxyCC0xuzFq/rBxRld0Tv0H7gylf36t/u9Pg== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org