$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/nw1be0ZJpvoP4_Fz6C6jsJlJm_I.roa File: nw1be0ZJpvoP4_Fz6C6jsJlJm_I.roa (raw, json) Hash identifier: TsmQXUg3N/gNJvuA1XXRk4JHWZj1rTTS4tUbzHWGRRc= Subject key identifier: 9F:0D:5B:7B:46:49:A6:FA:0F:E3:F1:73:E8:2E:A3:B0:99:49:9B:F2 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E46 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nw1be0ZJpvoP4_Fz6C6jsJlJm_I.roa Signing time: Fri 01 Sep 2023 08:49:30 +0000 ROA not before: Fri 01 Sep 2023 08:49:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 203.217.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3654 (0xe46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9F0D5B7B4649A6FA0FE3F173E82EA3B099499BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5e:8a:2d:50:54:f2:58:8e:74:a6:bd:00:43: 0f:fb:d2:53:e6:88:de:b4:b6:95:6b:f4:7b:fe:b4: 5a:81:0c:38:27:d6:59:d0:ed:ad:ee:b7:c5:b3:22: d8:bb:3d:bc:fe:98:51:fe:9d:3b:05:2d:06:c8:4f: 50:b6:b3:c1:37:05:3f:94:ba:0a:fb:16:aa:5e:8d: d1:c2:6f:d0:a6:e6:5b:bc:5b:ec:ce:88:ee:18:c0: 81:64:f4:75:3a:0a:31:b9:e1:24:0f:6b:9f:7d:9c: 0b:f2:35:19:bd:62:a3:2c:83:87:85:cf:70:84:d2: 45:65:6d:9f:17:36:1a:38:48:c4:17:43:a8:ac:09: 7b:01:e9:d1:e4:41:20:d6:60:8e:c0:cd:30:9c:01: 9f:9b:f5:f8:f7:66:da:7a:cd:4c:ec:48:d1:6d:9b: 29:3e:bc:b5:24:38:5d:f5:72:ed:26:8e:d1:24:f9: b2:3a:e2:56:ad:44:58:6c:2c:6e:6b:ff:9a:01:e7: 7b:a9:df:7b:40:3c:11:6b:79:0f:19:b0:69:1a:03: b4:78:b4:83:da:24:de:a8:79:f0:ed:97:6a:be:b6: 4e:21:23:61:bb:6d:36:ab:9c:0c:da:50:a5:dd:8c: c8:bf:aa:8c:2f:e9:fd:dd:02:b7:42:c1:6a:7e:22: 4d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:5B:7B:46:49:A6:FA:0F:E3:F1:73:E8:2E:A3:B0:99:49:9B:F2 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nw1be0ZJpvoP4_Fz6C6jsJlJm_I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.96.0/21 Signature Algorithm: sha256WithRSAEncryption 70:40:86:aa:25:4c:8f:5d:9d:28:78:aa:62:b1:ae:59:6d:39: ba:92:0e:36:2e:32:fe:5e:92:e0:74:77:cd:cf:15:d0:11:ee: 44:7c:2e:ab:7a:5e:fa:61:61:0b:f6:11:33:3d:3d:7f:0b:60: 72:6c:ac:6d:dc:6e:bc:7e:46:55:ac:1f:ea:0e:f0:1b:1f:ac: c2:81:d3:d5:0c:0d:04:c1:28:66:be:ec:a4:10:72:60:48:7c: e0:b9:46:2a:13:09:c0:c7:11:2e:06:d0:1e:3d:77:cf:2b:2a: a8:57:40:65:89:98:14:80:ff:f3:f8:1f:4c:e9:34:38:c2:1c: fd:f3:0f:99:53:58:11:5b:32:e7:ed:4e:a7:9d:23:44:72:47: 54:55:f6:43:c0:3d:41:65:3e:88:cb:d5:b4:1a:c1:82:bf:f7: 3e:b7:58:6d:e1:00:da:35:da:ff:31:bd:c0:a1:64:93:13:35: 02:ee:cb:4c:3d:a6:22:32:8b:bb:a0:17:e4:f7:1c:de:96:b7: c6:45:69:05:a0:b9:fc:a3:fb:3f:4e:bf:9f:dc:86:67:c7:b9: c8:cf:77:e5:50:69:85:45:68:f6:5b:5b:2b:9a:5c:83:4b:b1: c8:d0:52:d7:93:cf:f2:7a:06:fa:f9:2d:b0:09:8f:11:7c:5c: b8:5b:7c:b7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlGMEQ1QjdCNDY0OUE2 RkEwRkUzRjE3M0U4MkVBM0IwOTk0OTlCRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfXootUFTyWI50pr0AQw/70lPmiN60tpVr9Hv+tFqBDDgn1lnQ 7a3ut8WzIti7Pbz+mFH+nTsFLQbIT1C2s8E3BT+Uugr7FqpejdHCb9Cm5lu8W+zO iO4YwIFk9HU6CjG54SQPa599nAvyNRm9YqMsg4eFz3CE0kVlbZ8XNho4SMQXQ6is CXsB6dHkQSDWYI7AzTCcAZ+b9fj3Ztp6zUzsSNFtmyk+vLUkOF31cu0mjtEk+bI6 4latRFhsLG5r/5oB53up33tAPBFreQ8ZsGkaA7R4tIPaJN6oefDtl2q+tk4hI2G7 bTarnAzaUKXdjMi/qowv6f3dArdCwWp+Ik1bAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUnw1be0ZJpvoP4/Fz6C6jsJlJm/IwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbncxYmUwWkpwdm9QNF9GejZDNmpz SmxKbV9JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8vZYDAN BgkqhkiG9w0BAQsFAAOCAQEAcECGqiVMj12dKHiqYrGuWW05upIONi4y/l6S4HR3 zc8V0BHuRHwuq3pe+mFhC/YRMz09fwtgcmysbdxuvH5GVawf6g7wGx+swoHT1QwN BMEoZr7spBByYEh84LlGKhMJwMcRLgbQHj13zysqqFdAZYmYFID/8/gfTOk0OMIc /fMPmVNYEVsy5+1Op50jRHJHVFX2Q8A9QWU+iMvVtBrBgr/3PrdYbeEA2jXa/zG9 wKFkkxM1Au7LTD2mIjKLu6AX5Pcc3pa3xkVpBaC5/KP7P06/n9yGZ8e5yM935VBp hUVo9ltbK5pcg0uxyNBS15PP8noG+vktsAmPEXxcuFt8tw== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org