$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/pZsi7I9Ia91ggua7lbS-5SJU0oE.roa File: pZsi7I9Ia91ggua7lbS-5SJU0oE.roa (raw, json) Hash identifier: EH3itWFa2lEQgXur4DW4QemqvPSlMO77m3XJHPuBzTk= Subject key identifier: A5:9B:22:EC:8F:48:6B:DD:60:82:E6:BB:95:B4:BE:E5:22:54:D2:81 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E1C Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pZsi7I9Ia91ggua7lbS-5SJU0oE.roa Signing time: Fri 01 Sep 2023 08:49:18 +0000 ROA not before: Fri 01 Sep 2023 08:49:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18046 IP address blocks: 119.15.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3612 (0xe1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A59B22EC8F486BDD6082E6BB95B4BEE52254D281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:d4:f2:9f:ca:f9:a6:45:35:a6:8c:80:ee: 4c:9a:c1:c4:39:6d:38:e8:b2:4f:78:fc:bf:92:aa: 11:ae:43:8b:82:a9:8c:90:cc:d1:c4:69:bc:6c:7d: f6:d8:15:d2:32:79:d2:03:48:f3:c0:52:95:d2:1c: a2:85:b0:88:4d:9c:ef:ad:f3:51:2b:ee:6c:aa:90: 93:fd:3b:05:26:f1:7a:c4:1b:ee:c3:72:d9:a3:68: e3:b2:19:00:28:38:9c:cc:c1:86:dc:7e:2b:bc:90: 1a:5d:d2:79:94:bf:5b:08:0e:93:7c:0f:5e:c6:86: 7e:ec:38:7f:d9:76:83:c6:03:21:8d:ae:38:00:b3: 9f:4c:7c:06:19:1e:f5:68:23:5a:4a:28:3b:3d:ea: 16:f7:af:b3:c5:66:e8:dc:3a:a3:3d:8a:9c:a0:c2: 14:09:70:22:5b:77:12:f7:f2:70:38:66:b0:e5:0a: 0c:c8:1c:b0:62:3a:54:62:2a:b2:af:24:11:37:3b: 61:6f:d1:7e:d7:7f:d3:2b:fc:1d:5b:93:d7:da:4e: 29:04:c7:74:a4:1c:f2:b3:9b:fd:67:b0:40:0a:6c: 46:79:04:52:ef:f4:f0:20:14:a9:aa:9b:b9:63:79: 4d:bd:6b:bf:d7:96:8b:27:e2:2d:89:d0:ea:d2:e1: 0f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9B:22:EC:8F:48:6B:DD:60:82:E6:BB:95:B4:BE:E5:22:54:D2:81 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pZsi7I9Ia91ggua7lbS-5SJU0oE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.15.192.0/21 Signature Algorithm: sha256WithRSAEncryption 78:cf:10:57:b3:b3:a7:bd:16:f1:54:26:ea:6e:7f:d2:3d:04: de:42:8a:a9:1a:98:5e:9c:d4:93:af:61:27:b5:26:70:a7:69: 59:de:cb:9c:0d:13:a9:62:68:a5:4c:06:5b:2e:19:e8:a5:df: 61:99:02:21:07:ba:23:7f:14:87:fe:db:f0:df:93:ee:f2:86: 63:ad:0e:da:2b:ae:bb:24:56:3f:6c:e7:13:ff:ca:91:15:ad: c4:b7:1f:dc:1a:07:be:6b:f9:8d:a9:0b:fe:44:ed:7a:23:73: 55:2d:44:ce:e1:7c:83:b3:84:97:0a:09:93:02:9e:58:fb:b9: cb:38:18:7b:be:d1:61:6d:20:75:64:ce:fc:19:0d:3c:1a:2a: 3c:de:5c:d2:76:52:28:e9:90:f6:aa:89:41:19:ff:c1:16:b1: a2:46:27:ae:a8:da:22:8c:f0:ad:83:cd:7f:35:b5:96:d8:06: 27:35:d9:98:0a:c5:44:4e:83:6f:f6:dd:6b:cc:6c:ef:06:87: 2c:12:12:c1:41:46:2a:c9:dd:d2:e2:04:f8:4e:e0:01:ac:86: 00:d8:22:88:3f:98:39:66:81:bb:26:96:ac:a7:5a:4c:bb:96: 48:57:9a:2e:3e:16:60:7a:ce:5b:23:2a:2d:e0:4b:00:d9:92: f0:ca:11:35 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE1OUIyMkVDOEY0ODZC REQ2MDgyRTZCQjk1QjRCRUU1MjI1NEQyODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAf9Tyn8r5pkU1poyA7kyawcQ5bTjosk94/L+SqhGuQ4uCqYyQ zNHEabxsffbYFdIyedIDSPPAUpXSHKKFsIhNnO+t81Er7myqkJP9OwUm8XrEG+7D ctmjaOOyGQAoOJzMwYbcfiu8kBpd0nmUv1sIDpN8D17Ghn7sOH/ZdoPGAyGNrjgA s59MfAYZHvVoI1pKKDs96hb3r7PFZujcOqM9ipygwhQJcCJbdxL38nA4ZrDlCgzI HLBiOlRiKrKvJBE3O2Fv0X7Xf9Mr/B1bk9faTikEx3SkHPKzm/1nsEAKbEZ5BFLv 9PAgFKmqm7ljeU29a7/Xlosn4i2J0OrS4Q9xAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUpZsi7I9Ia91ggua7lbS+5SJU0oEwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvcFpzaTdJOUlhOTFnZ3VhN2xiUy01 U0pVMG9FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cPwDAN BgkqhkiG9w0BAQsFAAOCAQEAeM8QV7Ozp70W8VQm6m5/0j0E3kKKqRqYXpzUk69h J7UmcKdpWd7LnA0TqWJopUwGWy4Z6KXfYZkCIQe6I38Uh/7b8N+T7vKGY60O2iuu uyRWP2znE//KkRWtxLcf3BoHvmv5jakL/kTteiNzVS1EzuF8g7OElwoJkwKeWPu5 yzgYe77RYW0gdWTO/BkNPBoqPN5c0nZSKOmQ9qqJQRn/wRaxokYnrqjaIozwrYPN fzW1ltgGJzXZmArFRE6Db/bda8xs7waHLBISwUFGKsnd0uIE+E7gAayGANgiiD+Y OWaBuyaWrKdaTLuWSFeaLj4WYHrOWyMqLeBLANmS8MoRNQ== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:06 2024 by rpki-client on console-ams.rpki-client.org