$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/lsAdgPpWp5MUMBWciBiDChgvaQ0.roa File: lsAdgPpWp5MUMBWciBiDChgvaQ0.roa (raw, json) Hash identifier: 5jgdvf9/l6NWBMN8HJqPFbhOIhn6rofRib/wfh2iXKA= Subject key identifier: 96:C0:1D:80:FA:56:A7:93:14:30:15:9C:88:18:83:0A:18:2F:69:0D Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0FFD Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lsAdgPpWp5MUMBWciBiDChgvaQ0.roa Signing time: Mon 26 Aug 2024 05:13:16 +0000 ROA not before: Mon 26 Aug 2024 05:13:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 2401:ab00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4093 (0xffd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=96C01D80FA56A7931430159C8818830A182F690D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:7b:4f:68:5c:6e:65:a3:f3:85:67:f1:69: 51:21:e9:0d:ef:4b:1c:ea:85:2a:f3:46:4b:b6:04: 01:ff:a9:6b:25:6e:f6:f6:a9:90:19:a4:a4:d3:0a: c9:e6:55:1a:75:22:e1:d3:39:63:15:29:71:32:57: 12:c3:01:b4:fc:7a:c6:a6:19:d2:64:6b:20:1b:b1: 36:e5:63:09:f8:19:c0:ea:bf:5b:69:ba:31:f1:dd: 29:6a:ea:83:7e:28:77:5e:4a:fe:fb:15:06:68:49: 1c:db:b0:0e:08:59:42:83:f0:97:38:f2:ec:c6:2a: 70:ac:c2:ec:c4:7c:90:db:15:54:5c:36:ae:47:61: 4b:47:3e:4c:2e:b8:07:d3:1e:01:fd:43:66:5c:6f: 52:87:0d:3c:7a:f4:f8:30:ae:30:81:09:ee:8d:12: 08:25:20:c9:ad:2f:dc:fc:91:35:ef:c6:88:6f:04: e4:b7:0c:36:ad:9f:d7:6c:78:10:f9:8c:a5:b6:5b: cc:ad:f1:51:79:9a:83:70:08:af:b1:b4:71:8c:83: bd:1b:55:1c:8b:af:35:72:6d:15:30:90:88:d3:8a: 92:e2:e2:e9:db:fb:81:c7:d8:62:a6:cb:83:41:a2: 78:e3:56:19:da:95:d5:47:9a:97:c6:91:67:a9:07: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C0:1D:80:FA:56:A7:93:14:30:15:9C:88:18:83:0A:18:2F:69:0D X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lsAdgPpWp5MUMBWciBiDChgvaQ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:ab00::/32 Signature Algorithm: sha256WithRSAEncryption 62:04:92:59:77:0c:35:25:39:6d:17:b6:db:73:af:37:a3:52: a5:1a:99:30:2f:c3:4a:fa:59:e8:df:3b:52:85:85:5b:20:b6: 4e:aa:bb:a7:ee:96:55:ec:b6:ca:64:92:cc:56:4a:9e:1b:71: da:d0:14:36:3e:46:84:78:c7:91:8a:b0:4a:1e:8a:a0:c0:45: f0:13:b3:3b:47:52:85:bc:e9:62:0d:91:1d:f2:f7:b4:ce:ca: 1d:d4:19:f6:94:15:57:d3:04:27:15:dd:50:5b:2e:25:1a:3a: cb:6b:3e:a2:f5:0b:2d:97:40:d3:88:28:ab:fa:be:59:b4:a4: 0e:42:1d:4a:30:8f:c6:73:a2:ac:97:82:7d:b9:9b:ba:9d:62: 7d:88:a9:1c:0e:5b:84:df:22:14:f9:40:dd:f1:8b:68:f8:de: d0:6f:ab:92:3d:38:ba:ed:3a:e7:0d:87:61:f4:51:fc:78:67: 20:9f:0c:2f:bf:48:55:3f:31:ce:85:d6:c8:5a:cf:1c:dd:80: 14:8a:49:be:99:c6:67:12:e1:4d:d5:19:d5:23:ab:af:07:d3: 09:93:47:2e:c6:3c:f8:8e:ad:a0:62:cc:63:d0:41:d8:f9:58: c0:16:86:48:ba:f9:cb:17:ce:80:c3:b3:f3:92:e2:c8:e4:45: 4b:80:92:45 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk2QzAxRDgwRkE1NkE3 OTMxNDMwMTU5Qzg4MTg4MzBBMTgyRjY5MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGD3tPaFxuZaPzhWfxaVEh6Q3vSxzqhSrzRku2BAH/qWslbvb2 qZAZpKTTCsnmVRp1IuHTOWMVKXEyVxLDAbT8esamGdJkayAbsTblYwn4GcDqv1tp ujHx3Slq6oN+KHdeSv77FQZoSRzbsA4IWUKD8Jc48uzGKnCswuzEfJDbFVRcNq5H YUtHPkwuuAfTHgH9Q2Zcb1KHDTx69PgwrjCBCe6NEgglIMmtL9z8kTXvxohvBOS3 DDatn9dseBD5jKW2W8yt8VF5moNwCK+xtHGMg70bVRyLrzVybRUwkIjTipLi4unb +4HH2GKmy4NBonjjVhnaldVHmpfGkWepB4VNAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUlsAdgPpWp5MUMBWciBiDChgvaQ0wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbHNBZGdQcFdwNU1VTUJXY2lCaURD aGd2YVEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBqwAw DQYJKoZIhvcNAQELBQADggEBAGIEkll3DDUlOW0XtttzrzejUqUamTAvw0r6Wejf O1KFhVsgtk6qu6fullXstspkksxWSp4bcdrQFDY+RoR4x5GKsEoeiqDARfATsztH UoW86WINkR3y97TOyh3UGfaUFVfTBCcV3VBbLiUaOstrPqL1Cy2XQNOIKKv6vlm0 pA5CHUowj8ZzoqyXgn25m7qdYn2IqRwOW4TfIhT5QN3xi2j43tBvq5I9OLrtOucN h2H0Ufx4ZyCfDC+/SFU/Mc6F1shazxzdgBSKSb6ZxmcS4U3VGdUjq68H0wmTRy7G PPiOraBizGPQQdj5WMAWhki6+csXzoDDs/OS4sjkRUuAkkU= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:40 2024 by rpki-client on console-fra.rpki-client.org