$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/mWrsiflSZTwSp9a4Zg1ge5udvM8.roa File: mWrsiflSZTwSp9a4Zg1ge5udvM8.roa (raw, json) Hash identifier: mxF44S1gpIb0C8PDku9R+Y5kMlK7A2pXN0E/aYdjJnM= Subject key identifier: 99:6A:EC:89:F9:52:65:3C:12:A7:D6:B8:66:0D:60:7B:9B:9D:BC:CF Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E4C Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mWrsiflSZTwSp9a4Zg1ge5udvM8.roa Signing time: Fri 01 Sep 2023 08:49:31 +0000 ROA not before: Fri 01 Sep 2023 08:49:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 182.155.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3660 (0xe4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=996AEC89F952653C12A7D6B8660D607B9B9DBCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:18:42:c6:79:a0:f0:02:df:21:16:29:5c: 4e:94:ca:1c:db:87:49:2d:21:55:24:f3:4f:24:c9: 2d:db:40:46:db:a2:cc:cf:bb:cb:fc:5e:e0:7b:c0: 53:76:b3:4b:fb:eb:ee:5a:5c:7d:2c:76:7b:29:09: 48:90:7a:c8:0d:16:46:58:87:94:67:1b:69:9b:26: 48:c1:1f:9f:cb:b2:c4:95:23:33:15:c8:4b:7a:1b: 7c:88:50:eb:aa:ee:8d:aa:8f:d5:fc:67:82:7b:22: e3:77:93:f8:81:35:91:95:e4:77:ef:dc:6f:3c:15: 2a:68:a7:4d:86:7e:85:d8:a4:bb:58:cd:01:a9:6a: f0:51:9a:18:32:de:6b:c8:1e:3c:72:06:20:b5:25: 97:6e:f9:21:3e:d8:07:3a:e8:58:b0:53:50:28:3f: 13:7b:0d:95:e4:ca:bd:a3:1e:82:20:63:58:ab:b6: 1c:45:09:f1:75:36:31:fe:67:48:84:f7:39:dc:ce: c4:7f:c8:b9:d9:7d:db:14:d5:43:8a:57:0d:0c:be: e2:ea:cf:e6:40:96:f6:53:c0:50:d6:61:d1:0e:7d: 5e:a5:f6:42:ae:ec:76:1f:e9:11:68:c1:61:d3:a4: 03:ac:66:fc:1d:bc:5a:a6:28:21:e6:4a:06:39:74: 8b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:EC:89:F9:52:65:3C:12:A7:D6:B8:66:0D:60:7B:9B:9D:BC:CF X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mWrsiflSZTwSp9a4Zg1ge5udvM8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.155.128.0/19 Signature Algorithm: sha256WithRSAEncryption ad:fb:40:ae:30:57:48:79:7f:0e:27:f9:5d:d6:95:06:c0:7f: 33:42:dc:ef:b0:7c:ea:e9:a8:4e:e6:88:99:9d:a4:e8:0d:fb: e0:35:5f:5b:b3:58:f0:54:18:39:d3:4c:5b:4d:6f:97:1a:d3: 74:c7:70:02:1f:81:c4:a6:19:af:a9:b3:b2:d6:73:c7:42:9f: 12:f4:c0:dd:13:8b:8e:c5:96:43:ff:d2:5d:f5:55:c5:c6:10: 86:c4:1c:c6:47:62:d3:a6:44:59:b4:7a:ab:e2:57:cc:9b:be: d7:bb:e9:73:48:8d:7f:94:c7:55:e1:3f:e7:60:49:13:96:23: 4e:ed:09:68:67:02:98:09:94:a5:8a:8c:e4:e4:8e:24:67:b0: 96:05:e6:a2:0f:1d:72:27:26:0c:c2:c3:99:26:e4:56:77:a1: 31:06:04:15:f4:0a:41:13:66:0b:6e:21:07:5b:1b:50:ef:44: 16:b2:0e:94:f5:bf:6e:6e:26:6d:59:de:df:a4:90:1a:d6:46: eb:63:7d:d5:7a:1c:69:72:5e:cd:14:0f:51:06:5b:80:e9:9b: 9c:39:90:6c:c2:cb:ea:56:07:7a:b9:d0:6c:a7:15:b5:8f:49: 46:f8:4b:c1:9f:ef:fe:58:fe:06:f7:d0:48:7e:ea:3c:57:8a: 3b:2b:76:2e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk5NkFFQzg5Rjk1MjY1 M0MxMkE3RDZCODY2MEQ2MDdCOUI5REJDQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDARRhCxnmg8ALfIRYpXE6Uyhzbh0ktIVUk808kyS3bQEbboszP u8v8XuB7wFN2s0v76+5aXH0sdnspCUiQesgNFkZYh5RnG2mbJkjBH5/LssSVIzMV yEt6G3yIUOuq7o2qj9X8Z4J7IuN3k/iBNZGV5Hfv3G88FSpop02GfoXYpLtYzQGp avBRmhgy3mvIHjxyBiC1JZdu+SE+2Ac66FiwU1AoPxN7DZXkyr2jHoIgY1irthxF CfF1NjH+Z0iE9znczsR/yLnZfdsU1UOKVw0MvuLqz+ZAlvZTwFDWYdEOfV6l9kKu 7HYf6RFowWHTpAOsZvwdvFqmKCHmSgY5dIvdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUmWrsiflSZTwSp9a4Zg1ge5udvM8wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbVdyc2lmbFNaVHdTcDlhNFpnMWdl NXVkdk04LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbabgDAN BgkqhkiG9w0BAQsFAAOCAQEArftArjBXSHl/Dif5XdaVBsB/M0Lc77B86umoTuaI mZ2k6A374DVfW7NY8FQYOdNMW01vlxrTdMdwAh+BxKYZr6mzstZzx0KfEvTA3ROL jsWWQ//SXfVVxcYQhsQcxkdi06ZEWbR6q+JXzJu+17vpc0iNf5THVeE/52BJE5Yj Tu0JaGcCmAmUpYqM5OSOJGewlgXmog8dcicmDMLDmSbkVnehMQYEFfQKQRNmC24h B1sbUO9EFrIOlPW/bm4mbVne36SQGtZG62N91XocaXJezRQPUQZbgOmbnDmQbMLL 6lYHernQbKcVtY9JRvhLwZ/v/lj+BvfQSH7qPFeKOyt2Lg== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org