$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/rBrkJGS6ZSNzXglIlpUU_hiEmDQ.roa File: rBrkJGS6ZSNzXglIlpUU_hiEmDQ.roa (raw, json) Hash identifier: 6KobIQvKAYMxIq3N5i/AXqH1dFKuR9TKvZEmqJRw8f8= Subject key identifier: AC:1A:E4:24:64:BA:65:23:73:5E:09:48:96:95:14:FE:18:84:98:34 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0FE0 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/rBrkJGS6ZSNzXglIlpUU_hiEmDQ.roa Signing time: Mon 26 Aug 2024 05:13:10 +0000 ROA not before: Mon 26 Aug 2024 05:13:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 210.209.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4064 (0xfe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AC1AE42464BA6523735E0948969514FE18849834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:ef:21:f8:25:05:35:27:02:e1:55:4a:1a: 57:35:31:a2:35:fb:34:ca:22:59:94:06:e7:f2:00: 27:95:30:a5:24:3f:a9:4c:56:52:b1:1e:b1:d1:9c: e4:8d:cb:16:65:a4:9f:0a:82:e2:51:05:1c:da:60: cd:06:21:7c:8a:4e:d4:4d:1d:e6:7d:7e:8f:c1:ee: 60:11:b5:01:61:fd:00:5c:ea:49:13:dc:86:58:00: 31:7f:bb:0f:2d:65:dc:c1:ed:3a:93:f0:44:9a:5b: 8e:15:0b:0d:bb:21:a1:86:76:46:dc:de:9c:06:73: 8c:1c:8e:a6:fd:6e:49:e5:4a:ec:1e:20:dd:22:63: 9b:4d:a8:29:ca:f2:d1:b6:2f:56:c1:41:1b:49:17: 6f:94:da:d2:4f:e3:59:c0:4e:de:97:1e:4a:b9:66: 40:5a:7c:b2:44:42:52:62:54:91:b5:6a:10:f4:a8: fa:41:2b:2e:bb:13:4f:da:fc:30:b5:d2:2e:b4:fa: f2:f9:7d:81:63:be:69:c4:d7:0e:53:66:44:d1:2b: 14:a2:d6:ac:54:73:b7:56:e1:d7:3e:26:e3:5c:d6: 50:ff:e2:bd:b4:2a:4c:45:a4:db:fa:76:1d:9c:49: 52:2c:f5:9b:46:f8:94:8c:18:36:f3:8b:da:b5:9f: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1A:E4:24:64:BA:65:23:73:5E:09:48:96:95:14:FE:18:84:98:34 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/rBrkJGS6ZSNzXglIlpUU_hiEmDQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.128.0/18 Signature Algorithm: sha256WithRSAEncryption 52:25:84:8a:fc:2a:01:65:17:ac:dc:96:22:1c:76:93:fa:2c: 0b:37:d1:e8:70:12:4c:4b:03:09:28:e9:d5:a8:df:52:b9:d6: 43:e5:4b:0f:b9:b4:3c:d2:bd:8f:c3:2c:7f:ff:39:20:9a:11: a6:a5:b4:59:aa:0f:33:cc:18:71:2a:2a:f1:04:f6:56:76:f3: 1d:b6:a9:a3:37:29:f0:07:3c:c3:b6:6e:d9:cd:8b:59:49:3a: e6:98:26:e3:38:0b:bf:d8:ae:d5:83:15:58:9d:9c:12:0c:d8: 1f:9f:7b:48:2e:2d:56:81:de:59:38:bf:f2:9c:56:64:55:34: da:95:54:85:b1:65:aa:40:66:5c:70:05:20:22:c5:ee:02:b6: 84:8c:62:06:fe:69:c6:d7:f9:6d:3b:ef:0d:1f:a3:21:98:b7: 5f:15:1e:f2:2a:1f:2c:3c:b7:99:f0:2a:9e:75:96:96:86:7d: 7e:aa:48:e3:78:4c:7b:95:ac:5d:b2:1c:6c:f4:88:13:0a:3c: e0:09:5c:e8:81:d0:fd:c9:a8:f8:40:5f:1f:a3:d1:df:e3:b1: 63:ce:00:f5:5e:78:3c:22:5e:ed:8c:59:45:8e:2c:c7:e1:b2: fe:5e:17:3a:60:eb:a9:1f:3a:be:85:3c:64:1a:d8:04:35:9b: f1:9c:ef:65 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD+AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDMUFFNDI0NjRCQTY1 MjM3MzVFMDk0ODk2OTUxNEZFMTg4NDk4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC03O8h+CUFNScC4VVKGlc1MaI1+zTKIlmUBufyACeVMKUkP6lM VlKxHrHRnOSNyxZlpJ8KguJRBRzaYM0GIXyKTtRNHeZ9fo/B7mARtQFh/QBc6kkT 3IZYADF/uw8tZdzB7TqT8ESaW44VCw27IaGGdkbc3pwGc4wcjqb9bknlSuweIN0i Y5tNqCnK8tG2L1bBQRtJF2+U2tJP41nATt6XHkq5ZkBafLJEQlJiVJG1ahD0qPpB Ky67E0/a/DC10i60+vL5fYFjvmnE1w5TZkTRKxSi1qxUc7dW4dc+JuNc1lD/4r20 KkxFpNv6dh2cSVIs9ZtG+JSMGDbzi9q1n1jVAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUrBrkJGS6ZSNzXglIlpUU/hiEmDQwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvckJya0pHUzZaU056WGdsSWxwVVVf aGlFbURRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLRgDAN BgkqhkiG9w0BAQsFAAOCAQEAUiWEivwqAWUXrNyWIhx2k/osCzfR6HASTEsDCSjp 1ajfUrnWQ+VLD7m0PNK9j8Msf/85IJoRpqW0WaoPM8wYcSoq8QT2VnbzHbapozcp 8Ac8w7Zu2c2LWUk65pgm4zgLv9iu1YMVWJ2cEgzYH597SC4tVoHeWTi/8pxWZFU0 2pVUhbFlqkBmXHAFICLF7gK2hIxiBv5pxtf5bTvvDR+jIZi3XxUe8iofLDy3mfAq nnWWloZ9fqpI43hMe5WsXbIcbPSIEwo84Alc6IHQ/cmo+EBfH6PR3+OxY84A9V54 PCJe7YxZRY4sx+Gy/l4XOmDrqR86voU8ZBrYBDWb8ZzvZQ== -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org