$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/txQUusnyNTYhl_jF_-QK0tDYPPA.roa File: txQUusnyNTYhl_jF_-QK0tDYPPA.roa (raw, json) Hash identifier: 1yj8Ywoze+8HPKW+NzPnnO1wS2NxENGnn1/RFPk0MaY= Subject key identifier: B7:14:14:BA:C9:F2:35:36:21:97:F8:C5:FF:E4:0A:D2:D0:D8:3C:F0 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1022 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/txQUusnyNTYhl_jF_-QK0tDYPPA.roa Signing time: Mon 26 Aug 2024 05:13:24 +0000 ROA not before: Mon 26 Aug 2024 05:13:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 27.96.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4130 (0x1022) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B71414BAC9F235362197F8C5FFE40AD2D0D83CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:0a:98:92:10:cc:24:8d:4e:14:cc:e3:22: b3:4b:a2:85:90:a2:a3:e7:d3:11:52:6e:8e:c8:50: d7:5e:6f:2f:c9:7f:e5:7a:bb:05:24:f6:f5:be:17: fd:d7:67:5c:57:bc:43:67:14:17:13:65:70:d8:b0: 21:bf:08:d5:13:99:73:a4:a8:cc:18:3a:72:dc:0f: c8:e3:74:b6:66:a9:2b:ab:af:7e:22:62:9e:8d:54: 04:d0:d1:af:de:cd:20:33:39:a9:d8:32:74:37:7b: 85:d5:b0:7b:25:0e:00:8a:0f:90:21:3c:25:98:62: 97:74:14:84:46:cf:ff:9d:ee:42:64:d0:9b:64:d2: b2:b1:52:24:1a:7a:ad:d4:9a:25:64:d2:4e:51:09: 96:fd:e4:9f:c2:ff:cb:69:bb:52:74:c9:cf:58:4b: a7:cb:40:7a:1e:9c:09:c3:8c:53:72:48:32:67:b0: 8f:e0:f6:a6:6a:9c:95:c2:69:d7:26:b0:db:8e:d2: 05:ff:e0:f9:0a:fa:89:70:3f:2d:d0:8b:b4:1e:bf: 68:d7:e7:57:32:e0:19:20:ba:a0:07:ff:7e:e0:c3: 00:89:9b:38:ba:87:ed:82:ff:31:78:56:49:07:36: 0c:42:cc:12:9c:b3:e3:11:20:46:24:36:04:18:52: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:14:BA:C9:F2:35:36:21:97:F8:C5:FF:E4:0A:D2:D0:D8:3C:F0 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/txQUusnyNTYhl_jF_-QK0tDYPPA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.96.224.0/20 Signature Algorithm: sha256WithRSAEncryption 62:b9:ea:cb:19:df:22:31:aa:fd:af:9b:b2:4c:1d:e3:93:39: f2:7b:08:6b:b3:b7:a0:e9:34:5c:0b:09:29:75:bc:71:19:8c: 56:51:e4:37:11:84:58:b0:98:62:ca:63:8b:e3:a8:4a:31:a2: 9e:c3:d2:61:ba:d8:32:9b:00:c2:55:b1:40:a2:a1:9d:62:82: f9:32:fe:53:a1:47:92:bf:45:64:32:81:17:61:3e:58:ef:de: 3b:45:db:41:f8:fe:bb:dd:d4:51:1e:b8:78:4a:16:99:a3:ee: 5a:3d:36:01:bc:56:76:46:b9:ea:b1:44:14:ba:56:46:9a:b9: bc:14:c1:eb:67:f4:c0:2c:89:95:8f:da:08:fc:00:4a:3f:b6: 7c:52:ed:1d:5d:60:74:1b:a8:25:37:f4:d3:e0:8c:f1:2d:89: 6f:97:a8:dd:ee:f0:5b:02:ed:da:37:e2:bc:27:8b:42:ef:3f: c1:05:c7:b2:48:3a:f8:9c:bc:6e:37:2f:2b:49:e8:2e:08:d8: 90:58:d6:44:22:9a:00:af:50:9d:c1:81:67:1a:13:e6:e5:03: d0:03:5d:11:c9:69:78:9e:95:f3:75:fc:f9:d2:ce:f7:00:13: d3:57:2b:45:06:cd:91:0a:d8:0f:57:e9:09:47:b6:8d:03:fc: 33:5d:bc:d8 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICECIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3MTQxNEJBQzlGMjM1 MzYyMTk3RjhDNUZGRTQwQUQyRDBEODNDRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOPAqYkhDMJI1OFMzjIrNLooWQoqPn0xFSbo7IUNdeby/Jf+V6 uwUk9vW+F/3XZ1xXvENnFBcTZXDYsCG/CNUTmXOkqMwYOnLcD8jjdLZmqSurr34i Yp6NVATQ0a/ezSAzOanYMnQ3e4XVsHslDgCKD5AhPCWYYpd0FIRGz/+d7kJk0Jtk 0rKxUiQaeq3UmiVk0k5RCZb95J/C/8tpu1J0yc9YS6fLQHoenAnDjFNySDJnsI/g 9qZqnJXCadcmsNuO0gX/4PkK+olwPy3Qi7Qev2jX51cy4BkguqAH/37gwwCJmzi6 h+2C/zF4VkkHNgxCzBKcs+MRIEYkNgQYUuBRAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUtxQUusnyNTYhl/jF/+QK0tDYPPAwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvdHhRVXVzbnlOVFlobF9qRl8tUUsw dERZUFBBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBtg4DAN BgkqhkiG9w0BAQsFAAOCAQEAYrnqyxnfIjGq/a+bskwd45M58nsIa7O3oOk0XAsJ KXW8cRmMVlHkNxGEWLCYYspji+OoSjGinsPSYbrYMpsAwlWxQKKhnWKC+TL+U6FH kr9FZDKBF2E+WO/eO0XbQfj+u93UUR64eEoWmaPuWj02AbxWdka56rFEFLpWRpq5 vBTB62f0wCyJlY/aCPwASj+2fFLtHV1gdBuoJTf00+CM8S2Jb5eo3e7wWwLt2jfi vCeLQu8/wQXHskg6+Jy8bjcvK0noLgjYkFjWRCKaAK9QncGBZxoT5uUD0ANdEclp eJ6V83X8+dLO9wAT01crRQbNkQrYD1fpCUe2jQP8M1282A== -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:40 2024 by rpki-client on console-fra.rpki-client.org