$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/lY9hjM5BeCKMiHD9eOD-Dn7UmQk.roa File: lY9hjM5BeCKMiHD9eOD-Dn7UmQk.roa (raw, json) Hash identifier: TUgk5EJ0wEJV9meCZ2HedAp2l07rMLjTGwyUaG1BBkY= Subject key identifier: 95:8F:61:8C:CE:41:78:22:8C:88:70:FD:78:E0:FE:0E:7E:D4:99:09 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1034 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lY9hjM5BeCKMiHD9eOD-Dn7UmQk.roa Signing time: Mon 26 Aug 2024 05:13:30 +0000 ROA not before: Mon 26 Aug 2024 05:13:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 27.96.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4148 (0x1034) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=958F618CCE4178228C8870FD78E0FE0E7ED49909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:c1:f7:03:f4:ab:13:39:5d:42:a9:ae:2f: fe:64:da:97:c3:7f:5e:fa:30:82:c5:72:b1:e2:af: 6e:3f:59:34:24:3e:cc:e0:ae:0d:2e:70:52:31:57: ee:74:02:20:b5:15:c8:ff:f9:af:9d:0c:d6:e6:8c: 03:b5:db:18:be:8c:9a:ec:f0:e6:a2:3d:29:51:45: 91:dc:cd:c0:0b:4e:eb:12:56:19:2f:c5:d5:ac:5d: ea:ab:f1:3e:2d:c5:de:02:41:b7:17:e5:3f:67:f5: 85:40:ef:fe:61:08:ff:b0:74:4e:c2:d4:b6:d4:7e: df:26:e7:bc:33:4f:8a:1d:84:b4:8a:59:92:94:34: 6d:bd:dc:21:cc:6b:dd:e5:5c:37:3b:80:79:59:e4: 37:d9:43:49:96:19:82:3e:cb:f0:62:10:fb:b6:bf: 49:d9:77:0f:dd:bd:6a:8e:a5:3d:50:7a:6f:9f:ec: bc:0f:95:47:5b:ad:18:18:f7:51:e5:69:cb:00:e4: 4d:94:6c:18:96:0f:b8:54:ec:9d:09:2a:64:1e:66: a5:53:9d:69:e3:3f:6c:75:25:f9:87:34:d3:94:60: 5e:58:82:53:19:83:3f:26:00:d2:a1:c2:2e:c1:56: f1:33:81:da:d5:16:d1:7e:0b:c6:e0:3b:52:db:42: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8F:61:8C:CE:41:78:22:8C:88:70:FD:78:E0:FE:0E:7E:D4:99:09 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lY9hjM5BeCKMiHD9eOD-Dn7UmQk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.96.252.0/22 Signature Algorithm: sha256WithRSAEncryption 70:9d:ad:c7:a9:01:ae:c5:bb:9e:c5:47:d9:8f:3a:dd:d2:18: 64:1b:b1:5d:08:4c:81:d1:9d:34:d3:91:ab:eb:fe:88:a9:19: 9a:bf:67:94:07:9b:d0:0d:01:7d:18:8e:23:5e:c8:fc:23:99: 2d:3f:45:3f:62:7e:42:cd:cc:6b:e5:6a:9b:b9:7e:c6:7c:b7: d4:ad:96:ed:68:00:c2:93:fa:17:47:30:f1:2d:70:31:07:d9: 53:33:73:5c:f9:eb:ce:3d:f9:ce:cd:16:51:d6:13:5a:13:f3: 2f:6b:22:d7:6f:4e:4f:ad:fa:77:37:80:91:ea:14:fb:7b:b7: a4:f5:0b:02:ab:55:fd:07:80:a5:50:5a:bb:7a:73:84:ec:73: 4f:0c:cc:ca:39:e7:e5:3b:a3:49:b1:8f:ce:72:75:93:04:52: 35:1b:60:2e:a8:07:d4:a0:f9:8b:4c:21:04:64:fb:70:b3:c1: b8:5e:ab:79:1c:ba:f5:36:b7:56:5e:b4:60:8a:1e:6a:76:15: 49:6d:00:59:7b:14:f0:57:44:9e:25:8b:d1:01:e7:10:74:9e: 2f:10:b9:41:04:14:2c:87:29:0f:66:7a:d8:1d:9e:7d:13:47: cb:c8:05:87:4f:e1:c9:99:cf:0a:59:24:56:df:b3:87:f4:1b: 86:bc:19:dc -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk1OEY2MThDQ0U0MTc4 MjI4Qzg4NzBGRDc4RTBGRTBFN0VENDk5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRV8H3A/SrEzldQqmuL/5k2pfDf176MILFcrHir24/WTQkPszg rg0ucFIxV+50AiC1Fcj/+a+dDNbmjAO12xi+jJrs8OaiPSlRRZHczcALTusSVhkv xdWsXeqr8T4txd4CQbcX5T9n9YVA7/5hCP+wdE7C1LbUft8m57wzT4odhLSKWZKU NG293CHMa93lXDc7gHlZ5DfZQ0mWGYI+y/BiEPu2v0nZdw/dvWqOpT1Qem+f7LwP lUdbrRgY91HlacsA5E2UbBiWD7hU7J0JKmQeZqVTnWnjP2x1JfmHNNOUYF5YglMZ gz8mANKhwi7BVvEzgdrVFtF+C8bgO1LbQlYhAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUlY9hjM5BeCKMiHD9eOD+Dn7UmQkwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbFk5aGpNNUJlQ0tNaUhEOWVPRC1E bjdVbVFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhtg/DAN BgkqhkiG9w0BAQsFAAOCAQEAcJ2tx6kBrsW7nsVH2Y863dIYZBuxXQhMgdGdNNOR q+v+iKkZmr9nlAeb0A0BfRiOI17I/COZLT9FP2J+Qs3Ma+Vqm7l+xny31K2W7WgA wpP6F0cw8S1wMQfZUzNzXPnrzj35zs0WUdYTWhPzL2si129OT636dzeAkeoU+3u3 pPULAqtV/QeApVBau3pzhOxzTwzMyjnn5TujSbGPznJ1kwRSNRtgLqgH1KD5i0wh BGT7cLPBuF6reRy69Ta3Vl60YIoeanYVSW0AWXsU8FdEniWL0QHnEHSeLxC5QQQU LIcpD2Z62B2efRNHy8gFh0/hyZnPClkkVt+zh/QbhrwZ3A== -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org